Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/MX0_cNa5QGsfYtHm8N_PsnfKcK0.roa
File: MX0_cNa5QGsfYtHm8N_PsnfKcK0.roa (raw, json)
Hash identifier: 0xEiXwpypDowIAwaMgRsUBq+/RHgv4BQbe2Fa2390u8=
Subject key identifier: 31:7D:3F:70:D6:B9:40:6B:1F:62:D1:E6:F0:DF:CF:B2:77:CA:70:AD
Certificate issuer: /CN=b65918f25d56000f881da98de323d91a064e0087
Certificate serial: 018CC86F0B8A7519BC2F5109D0F12FF4CD1D
Authority key identifier: B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/MX0_cNa5QGsfYtHm8N_PsnfKcK0.roa
Signing time: Tue 02 Jan 2024 04:29:29 +0000
ROA not before: Tue 02 Jan 2024 04:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207125
IP address blocks: 185.165.117.0/24 maxlen: 24
185.165.116.0/23 maxlen: 23
185.165.116.0/24 maxlen: 24
185.165.118.0/23 maxlen: 23
185.165.118.0/24 maxlen: 24
185.165.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:0b:8a:75:19:bc:2f:51:09:d0:f1:2f:f4:cd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65918f25d56000f881da98de323d91a064e0087
Validity
Not Before: Jan 2 04:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=317d3f70d6b9406b1f62d1e6f0dfcfb277ca70ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f3:ec:d0:e1:3c:d0:48:d7:09:0b:28:7a:18:
98:bb:c5:dd:3d:b3:65:c0:b0:0d:ed:31:5c:24:33:
b2:d7:ec:3f:3d:15:d2:43:88:ef:16:cf:07:6d:d3:
a2:ca:f0:77:bd:32:7c:9f:9a:b1:da:59:a9:b2:e1:
32:08:a2:82:05:1e:50:8d:14:5a:bc:48:37:db:e7:
d1:37:6e:4b:c9:09:bb:be:25:07:9b:2c:56:ef:a8:
0a:b4:0c:3a:17:e8:72:35:cc:03:1d:21:b3:bf:91:
08:6c:a2:94:13:c0:cb:58:76:42:18:63:9e:bd:74:
db:d0:93:7e:9f:59:89:4f:e6:0d:a4:ce:ea:45:e8:
a4:17:74:2c:dc:fc:85:bc:30:a2:e6:44:26:25:2c:
49:90:f5:7e:96:57:da:2b:95:d7:95:a0:8b:06:14:
bf:eb:30:47:d5:36:4e:7f:a2:60:29:89:39:c3:ee:
87:3a:ef:ad:e2:75:2a:5e:b0:95:ba:84:23:1c:f2:
77:27:e1:37:56:4c:09:28:b6:56:bd:a7:e0:e8:41:
a2:25:44:0f:c5:47:9d:53:11:fa:e5:1d:31:ac:b6:
a9:44:d9:e0:13:c7:16:22:46:dd:fd:2a:40:22:db:
9c:ce:e7:ea:07:36:69:d4:22:88:56:f3:e6:60:68:
f3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7D:3F:70:D6:B9:40:6B:1F:62:D1:E6:F0:DF:CF:B2:77:CA:70:AD
X509v3 Authority Key Identifier:
keyid:B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/MX0_cNa5QGsfYtHm8N_PsnfKcK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.116.0/22
Signature Algorithm: sha256WithRSAEncryption
57:53:ae:13:73:f5:f0:36:c1:9f:ad:06:ae:fe:80:79:7a:8a:
60:f7:1b:44:db:50:a5:d9:97:be:c3:4e:e0:5c:46:8e:0c:56:
de:54:d6:b1:f1:6d:d7:64:c2:44:57:89:4e:7d:95:75:91:ce:
ba:06:43:9e:6d:94:80:77:e5:47:07:4e:95:97:e9:74:d2:c3:
93:57:37:ba:e0:cf:96:ba:17:25:d9:03:ec:95:da:78:51:bb:
fe:7b:c0:d4:fa:fe:8a:6f:c2:4b:d0:8e:cb:0e:2c:5e:75:6d:
5e:d6:63:94:d1:fa:a4:fb:a8:b2:e5:65:15:0e:8e:c3:50:05:
85:89:2c:70:c4:54:f9:81:42:d7:39:84:02:e6:cc:39:2f:38:
4b:4f:b6:65:f4:35:58:e8:1a:5c:08:4a:96:f7:ad:0f:76:79:
84:82:bd:ed:3b:4d:e8:eb:b3:83:5d:e4:77:1f:f7:69:33:07:
68:59:59:b9:90:fa:26:3b:74:bc:ee:cb:6b:a7:31:b6:99:53:
b1:4c:27:50:89:2f:5d:cf:47:9e:9b:35:69:02:23:3d:89:38:
0b:ce:96:c6:8c:62:73:33:51:dc:79:28:63:46:7c:18:57:c5:
e0:95:37:b7:39:43:51:fc:d8:cb:ed:cb:f6:7d:df:a4:36:f9:
c2:d2:ff:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:17:49 2025 by rpki-client