Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/qrowMRZGzbwqZK-G7mlr-HWw3WU.roa
File: qrowMRZGzbwqZK-G7mlr-HWw3WU.roa (raw, json)
Hash identifier: tXIjlyeCmT2PLVo1k1J3nwVx4O14OAK9hVbVHpGibh4=
Subject key identifier: AA:BA:30:31:16:46:CD:BC:2A:64:AF:86:EE:69:6B:F8:75:B0:DD:65
Certificate issuer: /CN=eeb59b791c7a11d232a95c7ef169285caea695bc
Certificate serial: 018CC50067116DDC12C2B2A6EFA92450BF53
Authority key identifier: EE:B5:9B:79:1C:7A:11:D2:32:A9:5C:7E:F1:69:28:5C:AE:A6:95:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/qrowMRZGzbwqZK-G7mlr-HWw3WU.roa
Signing time: Mon 01 Jan 2024 12:29:47 +0000
ROA not before: Mon 01 Jan 2024 12:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201922
IP address blocks: 185.179.35.0/24 maxlen: 24
2a02:6c20:807::/48 maxlen: 48
2a02:6c20:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:67:11:6d:dc:12:c2:b2:a6:ef:a9:24:50:bf:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb59b791c7a11d232a95c7ef169285caea695bc
Validity
Not Before: Jan 1 12:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aaba30311646cdbc2a64af86ee696bf875b0dd65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:28:76:2a:36:e3:93:02:f9:94:07:81:e9:10:
0f:ef:e4:7f:f9:fd:7f:06:be:7b:89:8b:4b:26:7f:
eb:44:13:d1:22:34:e7:00:b0:99:b6:d4:0d:37:2a:
39:c7:9a:26:ad:1f:51:73:7c:62:36:b8:47:63:57:
51:b5:fe:c0:ec:f1:57:ca:d7:28:12:d3:e2:5a:cc:
84:e0:29:0b:74:72:5c:2b:22:53:f6:9b:f6:e5:98:
19:a2:66:c1:4b:bd:19:79:f8:80:17:a4:0c:f9:33:
06:44:f6:c6:15:49:c4:98:51:5b:dc:0c:b9:d6:1c:
b1:59:25:81:2e:dc:e9:b3:6c:14:2c:e2:c8:38:3c:
be:7c:63:5d:1d:fa:d3:a0:b6:ce:2c:10:01:0f:e5:
90:02:3e:84:ba:e1:7a:5a:b4:1c:30:9d:fb:e9:b5:
91:74:e6:ce:5a:62:f2:dc:59:02:99:30:f3:73:f9:
2e:66:34:42:eb:ee:e6:53:7e:d1:6a:12:52:04:df:
1a:08:92:43:f2:77:b6:5f:44:68:39:32:7a:17:68:
4c:75:ab:95:d5:79:94:1a:6b:54:2c:0f:09:df:9c:
e2:c8:3a:da:53:35:d0:22:41:c4:62:69:1c:90:d2:
af:6c:23:4d:40:bc:48:95:00:88:5a:20:05:2f:22:
3d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BA:30:31:16:46:CD:BC:2A:64:AF:86:EE:69:6B:F8:75:B0:DD:65
X509v3 Authority Key Identifier:
keyid:EE:B5:9B:79:1C:7A:11:D2:32:A9:5C:7E:F1:69:28:5C:AE:A6:95:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/qrowMRZGzbwqZK-G7mlr-HWw3WU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.35.0/24
IPv6:
2a02:6c20:3::/48
2a02:6c20:807::/48
Signature Algorithm: sha256WithRSAEncryption
38:b1:d7:d7:4f:dd:10:54:85:a7:9b:fd:84:dc:02:ae:b6:a9:
f3:e1:cc:1c:aa:91:8f:22:c6:e2:47:e6:1e:bc:b9:b2:0c:19:
98:ec:31:96:dd:45:fb:a1:2a:52:76:18:7a:0a:2d:2e:4d:40:
30:93:e2:ac:6a:77:ff:95:c9:03:53:c0:76:1b:97:9a:d0:9a:
37:96:c6:50:98:ec:89:7b:17:6e:a9:56:50:b6:15:7a:6e:09:
ca:3c:e3:fb:d8:52:b8:c4:ac:c3:da:7f:5f:d5:be:2d:b8:06:
2c:0e:e9:eb:ec:14:3b:b7:25:28:db:1b:73:19:8c:a9:ba:a0:
48:bd:02:b4:83:6c:3a:7f:7d:b1:1d:83:cd:2d:a7:70:7f:a5:
8b:9d:2d:1d:ca:9b:3f:05:e1:7e:26:c0:59:a7:ce:b4:d7:ba:
0c:cc:dc:7b:55:28:75:b1:d9:1d:14:d4:db:59:d6:2a:b6:40:
15:12:ad:f8:bc:44:a0:87:62:75:5c:a4:3c:d2:12:72:0b:4d:
fa:a7:92:92:7f:1d:f6:22:bd:0d:6a:30:b3:5d:d6:97:eb:5e:
4e:d4:67:ba:73:c0:d9:80:a2:d1:3e:af:46:55:05:e4:76:62:
2d:7f:47:a1:98:7b:3e:c0:6c:3b:4f:ce:a6:b2:08:33:35:79:
67:2f:8f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:05:44 2025 by rpki-client