Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/dKAScF1lg0dP-I2DwG0CRl6SnjE.roa
File: dKAScF1lg0dP-I2DwG0CRl6SnjE.roa (raw, json)
Hash identifier: 1pWODrXn6PEZzvo/CsrUIarAgeGWWtR/39cs45IZonk=
Subject key identifier: 74:A0:12:70:5D:65:83:47:4F:F8:8D:83:C0:6D:02:46:5E:92:9E:31
Certificate issuer: /CN=091472e52047b5f7753ef1526dda38ed428bfe47
Certificate serial: 018E183CCB02A019025E281FFA0F4A4FDEFA
Authority key identifier: 09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/dKAScF1lg0dP-I2DwG0CRl6SnjE.roa
Signing time: Thu 07 Mar 2024 09:27:01 +0000
ROA not before: Thu 07 Mar 2024 09:27:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207095
IP address blocks: 185.166.52.0/24 maxlen: 24
185.166.53.0/24 maxlen: 24
185.166.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:18:3c:cb:02:a0:19:02:5e:28:1f:fa:0f:4a:4f:de:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091472e52047b5f7753ef1526dda38ed428bfe47
Validity
Not Before: Mar 7 09:27:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74a012705d6583474ff88d83c06d02465e929e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:be:bf:48:8d:bd:50:09:5b:c4:87:2e:55:
28:b6:e2:ad:f6:41:a3:5c:28:71:71:2f:fa:fb:a6:
c5:f7:db:92:4f:f1:55:17:88:2b:d1:c6:2a:b6:05:
c5:1e:a2:df:d4:20:50:ea:92:b8:c5:5f:20:35:31:
bb:ee:be:19:55:6d:db:78:6d:75:99:9e:48:d1:e5:
5c:48:c4:2f:e3:ce:f9:41:68:e2:9e:45:bb:53:2b:
f7:30:4c:b2:97:c5:ad:01:d8:a4:1d:63:13:a0:5a:
a8:ac:ea:04:0d:00:19:4d:86:66:d9:c8:b1:a7:56:
1f:5a:71:f4:b1:28:8e:e2:0b:65:54:2a:37:db:85:
ad:6c:0d:ac:cc:f7:14:c5:ce:91:51:e1:ac:40:c9:
7a:52:50:a2:2e:23:fd:14:df:c6:4d:aa:d6:41:3a:
90:0b:f6:d2:4f:65:47:bd:6a:04:0e:16:04:38:c5:
35:11:2f:55:6b:10:68:80:20:78:70:34:d2:0b:92:
49:3b:04:4d:78:de:96:2c:ff:57:6f:be:0c:bb:a2:
61:40:d1:b0:33:42:6a:37:3f:e6:b0:61:d8:a4:83:
4e:4b:62:04:cb:43:62:b5:31:f4:25:42:ab:dc:2b:
a2:7f:38:fd:fd:71:5b:a5:53:77:84:76:1f:4a:40:
6d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A0:12:70:5D:65:83:47:4F:F8:8D:83:C0:6D:02:46:5E:92:9E:31
X509v3 Authority Key Identifier:
keyid:09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/dKAScF1lg0dP-I2DwG0CRl6SnjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.52.0/23
185.166.55.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:86:92:7d:fc:b3:59:20:b5:2d:a4:4e:6d:3c:28:8c:d8:f6:
bf:e1:19:1b:f1:14:6d:d7:c2:af:85:4e:be:c9:98:af:90:ae:
98:37:b5:2a:5d:bd:63:c8:a6:c1:d4:4e:39:75:6c:dc:2c:c7:
69:94:7b:a1:94:e4:49:7f:a0:c1:0c:8d:11:30:02:e4:2c:29:
89:26:08:2b:8c:b1:d2:67:4d:d2:a0:84:f1:78:3c:d7:a0:e2:
54:4f:39:6b:ab:d4:e8:b7:7b:05:64:7f:bd:5d:d4:f2:3b:82:
ff:4d:70:b1:24:04:90:d0:92:e4:14:a1:89:aa:0e:88:21:da:
a3:10:49:a3:e2:e4:37:77:50:02:e1:80:d1:95:36:5c:93:bd:
e9:e2:88:1b:25:25:21:c8:96:fc:55:65:64:e1:02:e6:b8:0a:
6c:7b:2e:8d:4a:c7:ef:54:55:00:e7:8b:f9:36:41:b3:53:3f:
05:8f:6d:7f:76:59:be:b7:8d:55:67:1e:4f:38:05:f0:bc:70:
e7:bd:fd:f7:a8:db:c4:3d:c9:87:50:14:c9:61:fc:d6:83:b1:
7b:5f:14:a3:90:73:a1:1c:d4:d8:c0:c4:5f:c3:51:10:ec:6f:
8d:2f:1a:72:dd:8d:49:cf:a0:ae:04:95:84:7e:a4:97:18:9c:
5a:f1:65:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:08 2025 by rpki-client