Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/OX6_5RoXnOC47aGKKBsg5S6c4zM.roa
File: OX6_5RoXnOC47aGKKBsg5S6c4zM.roa (raw, json)
Hash identifier: V+FsR4lZBJmX+St3SwhU1t7NEOeh2tw3jPf3KvSTKF8=
Subject key identifier: 39:7E:BF:E5:1A:17:9C:E0:B8:ED:A1:8A:28:1B:20:E5:2E:9C:E3:33
Certificate issuer: /CN=afb00b29396e78033edbacafef9850b1b0e35323
Certificate serial: 018CC94E6122ABD4F87408A1EC81BF4EA6EE
Authority key identifier: AF:B0:0B:29:39:6E:78:03:3E:DB:AC:AF:EF:98:50:B1:B0:E3:53:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/OX6_5RoXnOC47aGKKBsg5S6c4zM.roa
Signing time: Tue 02 Jan 2024 08:33:26 +0000
ROA not before: Tue 02 Jan 2024 08:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206911
IP address blocks: 185.171.109.0/24 maxlen: 24
185.171.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:61:22:ab:d4:f8:74:08:a1:ec:81:bf:4e:a6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb00b29396e78033edbacafef9850b1b0e35323
Validity
Not Before: Jan 2 08:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=397ebfe51a179ce0b8eda18a281b20e52e9ce333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:59:32:df:6f:33:8a:c4:83:da:4a:fe:ae:75:
0d:a5:15:56:e7:2a:a8:a6:74:f2:91:cd:42:f8:0a:
83:c8:f2:f3:30:15:46:28:b1:d1:6d:af:79:96:d3:
e2:b3:c4:ca:ff:71:9e:48:3d:48:34:b7:e3:f3:d4:
b8:94:ef:4c:81:84:b3:dc:8d:1b:c4:1a:71:66:4b:
a9:0c:3b:3d:79:66:f3:46:50:ad:d5:f1:bc:78:6b:
2e:11:da:1a:9b:e0:b0:93:d8:66:ea:aa:e5:2a:19:
69:38:a3:b9:5f:74:7f:7c:32:15:de:5c:1b:66:dc:
3c:f3:11:9b:00:7a:40:6b:68:06:c1:04:c4:c9:e4:
9f:7d:ba:05:4e:87:45:6b:60:69:77:ec:a8:af:9b:
35:7c:c8:dd:94:8b:f3:8a:4a:78:b9:73:f3:85:04:
59:a1:b4:ee:bf:e7:0a:12:93:41:89:50:a7:7c:3b:
a2:20:03:71:e2:ac:f5:e4:08:44:83:ab:77:eb:70:
9a:fa:d7:3f:d7:2f:78:cd:78:c2:19:aa:6d:d8:b8:
dc:32:89:83:ec:ed:26:3a:40:ab:94:12:c7:58:f4:
c8:c7:2e:b6:b8:97:98:d2:f2:91:dc:cb:9b:30:f7:
46:6d:34:f2:7a:7a:1d:32:27:7b:2f:e5:39:02:97:
1c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7E:BF:E5:1A:17:9C:E0:B8:ED:A1:8A:28:1B:20:E5:2E:9C:E3:33
X509v3 Authority Key Identifier:
keyid:AF:B0:0B:29:39:6E:78:03:3E:DB:AC:AF:EF:98:50:B1:B0:E3:53:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/OX6_5RoXnOC47aGKKBsg5S6c4zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.108.0/23
Signature Algorithm: sha256WithRSAEncryption
63:40:17:ce:f4:ee:ba:2e:1e:ac:99:30:e3:f4:a2:f2:e4:4a:
0d:23:a4:82:78:f0:37:f2:db:3c:10:29:2f:06:ff:60:25:b8:
29:f8:dd:9d:3f:cc:1d:7b:3f:9e:5f:6a:8a:e4:c0:63:81:a2:
1f:63:5e:4d:3c:fe:10:aa:de:ca:72:85:ff:aa:59:c7:7a:8f:
5e:c7:be:e0:9c:5d:63:84:b3:71:e6:83:1b:f1:7f:41:a3:ef:
f4:d3:71:85:de:5a:53:8f:06:33:8e:24:db:12:e5:3f:34:54:
ab:10:81:ae:fa:6a:1f:11:9a:14:fa:38:94:29:31:ef:2d:ec:
c4:07:46:ab:26:ac:fa:68:fc:ae:7f:03:73:77:b4:20:93:97:
2d:9d:51:a2:76:ef:b7:c7:89:24:5f:35:35:37:46:88:a8:8f:
e8:2a:bd:f5:13:49:25:53:c2:84:df:50:53:ab:39:f7:a0:e9:
c3:b4:d1:55:7b:81:f2:1f:85:9e:ef:43:48:b8:ec:69:f8:4a:
98:df:4c:41:33:0d:eb:dc:43:d9:c2:83:95:fb:23:e9:41:05:
e5:10:57:8e:d9:7f:36:b4:78:ca:20:bb:fd:ab:a7:b5:e9:af:
5d:dd:9b:80:27:d0:51:11:6e:dc:7b:1f:2f:ee:0a:28:b3:e3:
03:1f:aa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 19:10:16 2025 by rpki-client