Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/NFwyxqMUSs2O3rvwdw1yVsf0Y8Q.roa
File: NFwyxqMUSs2O3rvwdw1yVsf0Y8Q.roa (raw, json)
Hash identifier: FRmslx37cnFuNtgRSlbnruAlli1iwvKKCOjD/2aRhg4=
Subject key identifier: 34:5C:32:C6:A3:14:4A:CD:8E:DE:BB:F0:77:0D:72:56:C7:F4:63:C4
Certificate issuer: /CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Certificate serial: 0191E100258FA991F241891CA7EA5D2F07C0
Authority key identifier: B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/NFwyxqMUSs2O3rvwdw1yVsf0Y8Q.roa
Signing time: Wed 11 Sep 2024 12:12:48 +0000
ROA not before: Wed 11 Sep 2024 12:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211134
IP address blocks: 185.253.184.0/24 maxlen: 24
185.253.185.0/24 maxlen: 24
185.253.186.0/24 maxlen: 24
185.253.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Sep 2024 06:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:00:25:8f:a9:91:f2:41:89:1c:a7:ea:5d:2f:07:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Validity
Not Before: Sep 11 12:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=345c32c6a3144acd8edebbf0770d7256c7f463c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:93:31:e7:2c:6f:e8:3f:3b:08:00:0f:58:94:
f4:1d:9f:20:e2:c2:89:10:8b:d0:07:4f:78:5d:90:
38:f3:b0:cb:3d:d5:9c:87:dd:54:19:4b:61:ca:4a:
37:d4:bf:73:33:67:8e:7a:7c:28:ad:09:da:3f:19:
a2:43:fe:a8:4f:9d:7f:c0:a6:c6:79:0d:dc:c5:60:
a2:3e:5e:6d:fd:eb:9d:00:86:88:a1:eb:2c:8c:17:
a9:75:af:00:4a:d5:42:fa:31:30:86:c1:7b:00:8f:
78:27:4f:cf:61:b4:05:ea:9a:17:a9:f3:b7:dd:44:
ee:1f:5e:9f:a8:ab:d8:73:30:b7:e8:38:b6:03:5a:
76:af:30:95:27:9d:2f:c2:6e:75:dc:6e:f7:78:c4:
5b:78:ff:31:9b:12:59:79:3f:41:e3:a4:b3:bf:36:
a2:09:b6:91:b7:cb:9d:59:6a:f1:f5:bc:20:59:89:
f8:b7:b8:4a:ba:9e:54:90:c7:b4:74:be:8b:23:69:
9c:3e:34:fd:23:2e:43:28:ca:f9:cd:4e:f5:b8:56:
4b:08:98:da:b0:24:a7:23:12:d0:11:86:cc:bd:b4:
ae:53:e7:fb:17:4b:fb:d1:75:ef:41:b2:a5:10:90:
f1:44:69:42:c8:06:f7:b4:d7:ef:0e:40:bd:fc:0b:
0d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5C:32:C6:A3:14:4A:CD:8E:DE:BB:F0:77:0D:72:56:C7:F4:63:C4
X509v3 Authority Key Identifier:
keyid:B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/NFwyxqMUSs2O3rvwdw1yVsf0Y8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.184.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:e2:b2:42:f1:38:aa:e7:20:5d:1d:a7:4b:07:30:08:98:d0:
a6:41:6f:e7:32:60:7e:f4:90:cd:28:4e:1e:d7:f8:b5:6d:0d:
e7:2b:f9:e7:cf:ae:ec:22:54:0a:e0:81:7a:a3:1b:55:ba:a4:
b6:8e:9a:65:ec:0f:24:dc:2e:4a:a2:bb:90:bb:89:9f:69:ce:
0d:ee:58:34:4b:30:83:c7:54:35:f4:a8:cb:78:08:31:b3:48:
9a:20:92:76:99:84:41:c3:3f:9c:3c:d0:46:55:e9:9f:e2:57:
45:e6:a1:9a:c6:d7:31:a6:88:09:32:41:df:8a:84:be:0a:e5:
9a:2a:b7:e3:1e:47:c8:7b:78:f9:3a:8a:5c:e5:81:b4:9a:1d:
48:8b:03:81:4e:45:d0:90:67:e5:a0:a0:c6:c6:86:0d:40:f2:
a9:4b:57:5e:b4:3e:be:09:80:61:c0:7f:c3:a2:c6:16:cf:18:
44:e6:2b:d8:1e:47:bc:13:56:a1:c7:44:3a:78:3f:73:e3:40:
bb:b4:41:6e:39:83:5e:a6:a5:03:70:e7:f9:87:73:04:e0:4c:
0a:74:34:90:d4:d4:e8:94:ec:47:97:1f:76:31:20:9d:96:31:
06:bd:45:b6:71:9d:b9:6b:b0:b5:6c:3e:7a:67:a6:e9:4f:90:
4d:09:18:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:52:45 2025 by rpki-client