Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/A20qrp1ZlElRVncJ2UHkCXcc1Ls.roa
File: A20qrp1ZlElRVncJ2UHkCXcc1Ls.roa (raw, json)
Hash identifier: Iza82KGe1tEtLfDx5Xj6Iqgy62v6Fhry/ERjo2uWDgU=
Subject key identifier: 03:6D:2A:AE:9D:59:94:49:51:56:77:09:D9:41:E4:09:77:1C:D4:BB
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 0193724CB5336511AC3908D5A248C47B23DA
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/A20qrp1ZlElRVncJ2UHkCXcc1Ls.roa
Signing time: Thu 28 Nov 2024 10:24:09 +0000
ROA not before: Thu 28 Nov 2024 10:24:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206961
IP address blocks: 185.165.124.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Nov 2024 10:34:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:72:4c:b5:33:65:11:ac:39:08:d5:a2:48:c4:7b:23:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Nov 28 10:24:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=036d2aae9d59944951567709d941e409771cd4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7a:a7:17:90:61:7d:58:1e:96:91:37:d9:72:
d9:bd:16:1a:9f:69:f9:80:cf:6d:53:c6:3b:05:b5:
bb:c9:63:a2:b7:2e:ec:78:66:d6:9c:82:59:57:6c:
ca:e4:15:16:00:ab:6f:fe:ae:d6:52:2b:6a:6a:35:
50:90:35:56:6d:5c:a3:e2:76:48:d1:56:cb:c8:84:
0d:a5:b5:ec:68:44:8e:2f:4e:89:2e:e2:e1:a7:93:
98:6a:51:56:ef:56:34:4a:ca:5e:7a:98:31:6e:91:
e2:8e:97:df:6e:9c:61:b3:13:cf:21:ff:26:99:fa:
e6:7e:d5:16:c9:23:5e:69:e1:e6:cd:59:4d:29:c0:
df:59:eb:68:de:ba:21:73:2d:73:f6:18:dc:8a:ac:
7c:d1:a6:4f:97:ec:6f:df:70:ea:2c:b8:65:0d:28:
61:77:66:f1:01:fc:0b:42:ab:fa:0c:c7:32:a0:e1:
ea:c7:9c:32:06:aa:f8:26:90:1b:e1:80:67:2c:66:
a9:f7:79:22:54:62:7b:4e:bf:91:23:00:a9:19:23:
0b:4a:a4:30:26:14:84:48:c2:70:f8:e6:b0:cb:56:
d9:5a:0f:c5:d4:82:70:42:6a:af:19:17:0a:bc:67:
60:c2:b6:20:2e:43:f0:c0:f1:3f:a6:0f:12:2c:88:
90:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6D:2A:AE:9D:59:94:49:51:56:77:09:D9:41:E4:09:77:1C:D4:BB
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/A20qrp1ZlElRVncJ2UHkCXcc1Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.124.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:e8:c9:03:10:d6:49:da:ff:e0:ba:aa:be:b9:c5:38:2f:2c:
fd:ad:98:fc:4e:92:42:bd:d3:9d:5e:4e:0e:dd:c1:20:35:08:
af:8a:99:30:25:ca:49:28:5c:d0:f9:04:4f:1a:f7:93:cb:4a:
b4:1c:84:60:76:e5:2f:36:da:1a:1f:61:d4:ca:8a:eb:e7:df:
b7:6f:58:b8:04:5b:47:f7:58:bb:cc:92:2a:e3:c7:e4:a6:cf:
ad:54:36:f1:72:59:45:9a:be:ba:9e:47:87:67:aa:fc:42:e0:
5f:dc:be:d6:0a:87:da:fe:c6:0a:17:74:08:b3:c0:9d:ac:36:
42:af:87:b3:d1:52:1b:62:c0:9c:1e:bf:d3:bf:85:82:27:a8:
15:0f:6f:3c:fb:c8:01:a7:03:13:42:d2:c1:7a:38:58:0d:91:
b6:d3:5d:06:63:eb:ca:f8:02:d3:12:d6:cc:0b:b7:91:be:f1:
2d:69:da:bf:40:ed:d4:c1:c4:cc:33:70:5c:40:a4:34:1e:8e:
67:3a:fd:ba:76:a5:0d:32:82:5e:0e:6b:ca:be:77:14:d9:11:
07:a0:62:20:12:1b:cb:b7:ff:2a:4e:5d:6f:77:b2:18:b2:1f:
b4:5d:23:b4:72:77:e8:b3:c5:79:33:88:ff:b0:77:1c:d5:62:
70:60:bb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:47:23 2025 by rpki-client