Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/ZaJQvRabS1QbCkyiDBEj_d6XerE.roa
File: ZaJQvRabS1QbCkyiDBEj_d6XerE.roa (raw, json)
Hash identifier: Mv6f4Hwk2bC18FFgg4LrBIcL9E68Tc5bm6oiB5pwy+s=
Subject key identifier: 65:A2:50:BD:16:9B:4B:54:1B:0A:4C:A2:0C:11:23:FD:DE:97:7A:B1
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019424B3E17C2F8E183001CB730AC74D620C
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/ZaJQvRabS1QbCkyiDBEj_d6XerE.roa
Signing time: Thu 02 Jan 2025 01:49:15 +0000
ROA not before: Thu 02 Jan 2025 01:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25288
IP address blocks: 185.163.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Jan 2025 21:15:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e1:7c:2f:8e:18:30:01:cb:73:0a:c7:4d:62:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jan 2 01:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65a250bd169b4b541b0a4ca20c1123fdde977ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:34:93:fc:cb:44:72:57:06:53:f9:e8:05:14:
cf:05:c3:73:4f:60:4f:4e:e3:c0:76:5d:3c:95:0b:
38:a7:76:b9:40:c7:9a:31:51:a6:62:01:31:56:a6:
fa:40:a8:f0:f6:98:6a:4a:25:4e:50:a6:22:fb:c1:
01:06:62:1e:4e:92:8c:1c:43:18:e1:6a:2e:2e:83:
44:89:a4:2f:0d:67:f9:ae:52:0b:50:98:60:17:5e:
32:21:cb:1b:b8:9a:b8:d5:05:4c:dd:a0:a3:7e:72:
1d:93:15:1c:04:4e:8f:2d:6e:64:60:64:b4:2e:58:
84:69:fd:02:02:fc:78:49:29:e3:d7:22:b7:a9:20:
d6:6b:64:56:06:54:73:b3:ef:ad:78:05:26:c2:67:
85:91:47:8d:44:6d:1b:23:c5:b3:ff:bb:cc:8b:a8:
f7:04:2b:19:ac:77:4b:4a:f8:6f:6e:4a:5d:a2:4e:
f4:12:a8:77:61:07:ba:cf:57:7c:7d:eb:d8:bf:18:
09:b8:4e:fe:55:a3:b0:45:49:25:e0:f5:9b:3a:44:
12:3e:9d:b6:44:c5:f9:45:36:57:1e:08:e4:39:23:
cc:f8:3c:ed:f3:65:cd:42:8e:88:53:a8:6f:8a:f8:
0f:8b:31:11:ec:58:1e:40:e0:f9:0c:7e:95:57:29:
b1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A2:50:BD:16:9B:4B:54:1B:0A:4C:A2:0C:11:23:FD:DE:97:7A:B1
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/ZaJQvRabS1QbCkyiDBEj_d6XerE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.207.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:c0:98:df:c6:f0:56:06:b0:ed:57:e6:e4:55:ac:5b:0d:66:
b9:8e:db:fa:8c:a3:c0:59:4e:93:54:3b:e2:5a:a0:3c:64:20:
c1:6e:cd:46:17:12:9b:17:ad:4a:50:58:ee:af:a4:26:d8:0a:
33:c8:d2:62:7e:9b:be:63:93:aa:26:2c:fc:d8:a7:5d:20:ba:
c3:fa:44:df:38:a2:7c:d5:e5:b2:1c:23:45:fc:1f:f1:94:5a:
15:a3:8e:1c:1f:35:47:3c:99:82:36:0e:bb:8d:e2:5d:9a:83:
98:4c:ab:8e:cb:50:c0:c3:e1:ed:a5:1c:a4:85:7d:e6:dc:e6:
e0:aa:ff:5d:88:47:72:29:af:9a:88:e5:a1:bd:6f:a1:58:7b:
de:a1:7a:6d:fa:7a:e1:5f:f9:0b:c9:14:7e:8e:d4:5a:98:cb:
cd:02:5c:0f:bd:07:ab:b2:df:1f:ae:c2:51:30:eb:eb:09:21:
1e:07:72:a0:ec:a5:fb:fd:c9:e4:fd:92:9c:a1:67:14:6d:4b:
a8:43:63:05:2b:07:d5:0e:08:d5:cf:c6:b1:46:4b:ba:21:f1:
94:be:af:ea:7d:9c:03:76:91:88:d9:75:76:e5:e7:9a:70:56:
bb:ed:96:8e:89:4c:5e:99:26:9b:8c:6d:70:56:6d:f4:74:7c:
42:ee:2a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:48:42 2025 by rpki-client