Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/z9MgkyyUamM1CFQrm0UVdeK-Em4.roa
File: z9MgkyyUamM1CFQrm0UVdeK-Em4.roa (raw, json)
Hash identifier: lur8IpG2D9Jw42ZDqnkqTitVWToL9yQLfEmQ2sW/9oU=
Subject key identifier: CF:D3:20:93:2C:94:6A:63:35:08:54:2B:9B:45:15:75:E2:BE:12:6E
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 018CC3B6E22386852E22995DB0A63905F720
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/z9MgkyyUamM1CFQrm0UVdeK-Em4.roa
Signing time: Mon 01 Jan 2024 06:29:51 +0000
ROA not before: Mon 01 Jan 2024 06:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206961
IP address blocks: 185.165.124.0/22 maxlen: 22
185.197.140.0/24 maxlen: 24
185.197.141.0/24 maxlen: 24
185.197.142.0/24 maxlen: 24
185.197.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Nov 2024 12:45:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:e2:23:86:85:2e:22:99:5d:b0:a6:39:05:f7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Jan 1 06:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfd320932c946a633508542b9b451575e2be126e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:96:ec:90:72:f7:d2:c8:6f:06:61:88:b7:e1:
e8:09:8b:5f:37:0e:67:a8:81:20:55:60:b5:32:c9:
8c:a0:37:3c:e9:fa:9b:a8:37:6d:56:33:8a:a2:5c:
e4:04:42:ba:f9:e2:4e:79:08:16:e9:ea:36:d4:ce:
9f:55:5c:5e:eb:2c:97:93:02:3b:45:b5:48:57:a3:
06:2e:4f:4e:5e:5a:c7:a9:54:31:dc:24:78:31:36:
70:f4:16:8b:ad:5e:8a:84:1c:fd:70:f3:4f:12:f8:
af:61:e5:1b:89:34:6d:96:42:7e:7e:4a:8f:e0:d0:
e0:ab:a3:1e:98:5c:95:a2:7b:80:88:0e:e2:e9:3d:
87:91:6f:2c:cf:71:9c:cb:f6:80:3f:7e:7e:71:d9:
52:ed:01:7d:35:e3:e8:b9:c6:03:a9:75:42:39:88:
2f:26:2e:cf:95:3e:f8:f5:2d:1f:b5:fa:23:f1:ae:
54:69:c9:52:61:db:ac:6a:6e:0d:8a:f0:85:d6:a6:
78:2d:07:e0:c9:1b:97:ac:73:c6:15:0e:ba:3a:97:
fa:01:8f:9c:de:04:0e:91:1a:9c:04:87:c9:65:b2:
dd:9a:32:31:8f:45:f8:ba:37:32:03:c7:01:07:76:
98:3f:1f:d8:8e:59:ba:94:6d:13:b4:63:e8:13:73:
7d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D3:20:93:2C:94:6A:63:35:08:54:2B:9B:45:15:75:E2:BE:12:6E
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/z9MgkyyUamM1CFQrm0UVdeK-Em4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.124.0/22
185.197.140.0/22
Signature Algorithm: sha256WithRSAEncryption
56:d2:7a:09:05:d8:7b:d6:d7:6d:cb:bf:2d:54:fe:8f:3c:cc:
90:e9:11:19:94:5f:4c:8a:dd:2d:c7:cc:37:b2:4d:79:34:c6:
45:98:4a:8f:d5:f9:4d:6e:a9:56:82:51:ac:f3:c9:b7:33:74:
0f:09:80:2a:66:45:f9:5f:e5:f2:a6:fd:21:db:00:a3:78:aa:
37:e6:27:76:90:b6:da:49:86:97:1f:b3:e5:78:25:67:b0:0e:
f5:79:98:70:c1:be:bc:c9:84:7a:9c:f0:60:60:33:a4:e5:94:
f3:44:45:f9:28:d4:03:2e:47:dd:dd:18:73:e0:40:12:c3:39:
78:53:5b:89:23:25:d1:4a:14:59:35:5f:f7:2f:ac:cc:7d:a6:
53:d0:fb:a7:08:7b:33:15:8c:51:3f:9c:87:f9:23:b9:a6:b3:
7a:99:8b:0c:19:16:0d:7d:57:7e:91:1a:9f:10:7c:6d:c9:a3:
91:01:80:ef:84:fc:65:de:1c:7a:57:a0:18:94:7c:7d:74:68:
f1:1b:7d:49:99:c2:79:a8:e7:19:c5:41:a9:44:fe:b1:06:13:
bd:ba:b6:b3:83:ce:f1:95:2c:b6:2e:b6:d2:83:8a:ed:da:9b:
09:86:28:45:5b:1e:9d:94:61:67:7c:ac:f8:cb:17:3a:d2:3f:
ee:d0:cd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:40 2025 by rpki-client