Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/E0NDxn0fDvbKkJNO0xtBHNwAESM.roa
File: E0NDxn0fDvbKkJNO0xtBHNwAESM.roa (raw, json)
Hash identifier: PcI/At8aUJfi5q7bEJkaBAwB7b+SdmBkULfiuU8guSk=
Subject key identifier: 13:43:43:C6:7D:1F:0E:F6:CA:90:93:4E:D3:1B:41:1C:DC:00:11:23
Certificate issuer: /CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Certificate serial: 018CC9BCB68EED8103E3B8F54D4FA05CBBBB
Authority key identifier: 8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/E0NDxn0fDvbKkJNO0xtBHNwAESM.roa
Signing time: Tue 02 Jan 2024 10:33:57 +0000
ROA not before: Tue 02 Jan 2024 10:33:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24933
IP address blocks: 185.44.32.0/22 maxlen: 22
2a04:9880::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:b6:8e:ed:81:03:e3:b8:f5:4d:4f:a0:5c:bb:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Validity
Not Before: Jan 2 10:33:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=134343c67d1f0ef6ca90934ed31b411cdc001123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8a:6b:67:e9:1e:53:40:a9:c9:86:de:18:e1:
da:c5:24:e9:79:40:20:ca:3a:1c:e6:88:43:37:a8:
ac:3c:f1:fb:f6:18:3b:77:c6:e7:fd:28:1b:53:fd:
05:69:3b:bc:ae:57:9a:18:df:32:57:6f:09:b3:95:
cb:2a:76:65:67:ad:ec:2a:12:35:36:f6:24:73:ad:
66:af:01:8e:04:32:c8:32:ad:78:06:42:76:38:14:
61:51:ad:60:42:2b:88:ab:45:ff:fe:8a:e0:39:2e:
bf:04:e9:e6:42:4e:49:46:dc:c1:b9:1d:ee:72:3a:
01:62:00:ac:16:70:4d:2c:47:f5:99:c2:ce:52:9c:
1b:22:76:b4:79:11:0c:8a:be:bd:5a:5f:42:c5:8e:
10:2d:56:03:89:c9:60:4b:73:81:39:19:bc:2f:01:
5c:cc:9f:74:6f:bc:cc:7e:32:68:9b:07:bf:e0:b0:
93:dc:55:4b:cf:07:c8:5a:fa:98:6f:5d:ed:5f:14:
27:ec:b1:18:2a:65:3a:3f:26:9b:a5:49:f7:25:f9:
8c:06:96:44:88:3f:5f:d3:8d:5a:f8:56:04:4d:ce:
77:1e:bb:0c:4d:90:2e:6c:24:5e:95:d4:8c:25:c7:
a0:34:cc:8f:55:4a:36:31:2d:31:06:f9:a1:c9:f9:
39:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:43:43:C6:7D:1F:0E:F6:CA:90:93:4E:D3:1B:41:1C:DC:00:11:23
X509v3 Authority Key Identifier:
keyid:8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/E0NDxn0fDvbKkJNO0xtBHNwAESM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.32.0/22
IPv6:
2a04:9880::/29
Signature Algorithm: sha256WithRSAEncryption
05:66:85:0d:c0:d5:b4:b7:95:98:0f:b2:c3:ed:53:36:f8:ad:
89:a6:71:f2:a8:88:0c:8e:5b:e6:fb:40:fb:3f:4e:e4:91:ed:
a1:88:16:f3:98:32:9b:f1:1e:81:e0:d8:fb:41:c3:44:5f:72:
0e:8d:46:ac:e3:62:da:ad:2e:ed:43:3e:d8:a6:1c:16:00:e9:
aa:04:ee:40:68:5c:b6:6a:bc:c4:0b:51:f6:64:59:33:98:19:
29:00:66:cc:91:92:9f:34:66:e3:4d:3a:e3:dc:dc:d1:00:b6:
4c:26:2e:5a:70:1e:4f:0c:eb:02:34:5c:96:f5:b8:19:a9:db:
dc:ac:68:62:05:e5:b3:54:e0:8e:51:11:6c:98:36:7e:6f:f0:
99:18:48:78:ba:a1:af:fb:30:ca:5b:90:55:0d:70:3a:d7:96:
63:0c:3c:ff:b3:f1:d3:3c:70:a7:cf:2f:0a:74:de:46:b5:c3:
f5:3c:e3:59:62:f3:9b:fd:27:cd:a3:66:72:53:65:38:97:b0:
12:3a:02:52:30:16:1b:83:c9:6d:44:7f:b7:66:0e:05:67:b2:
f5:b8:65:17:bd:c4:c6:fc:f2:b1:97:4f:76:18:d2:8a:05:1e:
d1:b0:08:63:99:46:bb:7b:1f:82:2e:fd:b0:95:71:d7:5b:0f:
71:1c:16:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:41:07 2025 by rpki-client