Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/18PUeer6RxOZPTSLrsCS1U_zSKE.roa
File: 18PUeer6RxOZPTSLrsCS1U_zSKE.roa (raw, json)
Hash identifier: ih0sbDTsnvZsmDTB7mzA9OGPKf3jM0SOtzJrUzWgpSM=
Subject key identifier: D7:C3:D4:79:EA:FA:47:13:99:3D:34:8B:AE:C0:92:D5:4F:F3:48:A1
Certificate issuer: /CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
Certificate serial: 018CC727175D190777B9D3168CC9D2FE62A3
Authority key identifier: 6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/18PUeer6RxOZPTSLrsCS1U_zSKE.roa
Signing time: Mon 01 Jan 2024 22:31:17 +0000
ROA not before: Mon 01 Jan 2024 22:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57119
IP address blocks: 185.212.22.0/24 maxlen: 24
185.212.21.0/24 maxlen: 24
185.212.20.0/22 maxlen: 22
185.212.20.0/24 maxlen: 24
185.212.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:17:5d:19:07:77:b9:d3:16:8c:c9:d2:fe:62:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
Validity
Not Before: Jan 1 22:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7c3d479eafa4713993d348baec092d54ff348a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c4:93:66:30:2d:8c:89:ab:98:a2:dd:54:c5:
c0:16:10:6f:ec:70:e8:60:7a:d9:0a:ee:97:55:af:
bf:b2:a2:9a:b3:bb:c6:7b:b3:87:be:53:64:fe:aa:
45:9e:a5:b1:54:6b:66:86:34:5a:a1:60:9b:a1:60:
a1:90:7f:4f:1c:64:bc:40:20:f4:d5:c5:af:e7:28:
88:29:0d:6d:1b:6e:93:7e:3d:ae:87:5c:f3:49:75:
7b:dc:f8:4a:c2:c3:ad:ea:26:6a:35:3f:2e:4c:a1:
3b:9f:c7:ba:c1:fb:14:2e:74:1e:d4:2a:ea:a4:c3:
a6:c3:f2:fd:47:d0:c3:8f:25:5d:00:39:ff:83:71:
bd:3c:0e:a2:32:ae:6e:8c:7b:39:8e:37:90:cd:84:
24:21:b3:c7:61:5a:78:48:17:21:d7:01:a2:1b:e3:
7e:d7:39:1d:92:9e:ee:ff:ca:4f:6c:7f:bc:20:c7:
8a:5a:28:f9:07:c6:93:0d:75:a0:d4:12:7a:e9:ae:
79:5e:00:43:67:92:ff:fc:a2:c1:e5:40:1f:17:7a:
62:82:b3:6f:7f:6a:0d:2b:72:b4:cb:e0:86:80:1b:
23:bc:a4:65:59:77:c4:4a:db:12:42:00:b4:58:09:
69:99:b2:63:4d:16:d8:d0:04:6f:85:f5:0e:30:95:
98:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C3:D4:79:EA:FA:47:13:99:3D:34:8B:AE:C0:92:D5:4F:F3:48:A1
X509v3 Authority Key Identifier:
keyid:6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/18PUeer6RxOZPTSLrsCS1U_zSKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.20.0/22
Signature Algorithm: sha256WithRSAEncryption
93:33:f9:43:b3:8f:a5:03:2f:d2:ea:9d:64:56:75:68:6c:c4:
ec:bc:46:a5:c5:e8:29:05:8f:96:82:ed:18:b0:00:9b:4b:2e:
a7:06:ef:84:d4:1d:7b:87:6b:2f:6b:ff:43:f4:8c:8f:b2:44:
9c:a3:02:11:bb:8f:c7:98:70:3d:b9:48:4f:28:8e:9c:53:fb:
7a:31:6c:78:d9:80:47:fd:fb:8e:0a:4f:92:3c:f8:60:1f:12:
67:48:73:73:be:e4:11:ba:66:88:14:a8:3d:91:7c:39:6f:99:
14:8c:be:d2:69:f1:dc:39:02:ee:ea:b0:ba:ee:83:2d:2e:d8:
71:96:12:31:7f:25:c9:88:e8:3d:42:ff:22:15:13:67:d1:1d:
d4:d9:bf:b0:6e:62:cf:9d:73:4c:43:bc:55:74:d4:15:0b:4d:
27:2b:38:1a:82:70:43:60:c5:c6:58:d0:d5:f0:da:c6:70:a5:
1a:6b:cb:ab:0a:56:b4:be:c3:a7:fd:77:ae:2b:0f:dd:ce:37:
b1:68:b3:18:fa:cd:4d:16:58:be:6b:5d:97:f6:12:22:10:62:
88:13:16:a8:13:ba:f8:e9:4d:72:c1:b5:01:c0:d9:a6:40:79:
8a:ca:7e:28:b8:7d:72:e2:4c:85:1a:35:66:71:55:b5:d0:49:
b7:28:e2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:11:58 2025 by rpki-client