Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/BMHhsQ_ZTzpBByebQJHZJ3Oj6nU.roa
File: BMHhsQ_ZTzpBByebQJHZJ3Oj6nU.roa (raw, json)
Hash identifier: DnHPZwE0qmTDC3R8Wb0jEurg2HEfALjoVoyx0WGGqec=
Subject key identifier: 04:C1:E1:B1:0F:D9:4F:3A:41:07:27:9B:40:91:D9:27:73:A3:EA:75
Certificate issuer: /CN=b0d8f469b90711a1282bf490d00f156096597760
Certificate serial: 0190A62E0D28E33F036095FEB365745D4705
Authority key identifier: B0:D8:F4:69:B9:07:11:A1:28:2B:F4:90:D0:0F:15:60:96:59:77:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNj0abkHEaEoK_SQ0A8VYJZZd2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/BMHhsQ_ZTzpBByebQJHZJ3Oj6nU.roa
Signing time: Fri 12 Jul 2024 09:02:34 +0000
ROA not before: Fri 12 Jul 2024 09:02:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205514
IP address blocks: 185.201.0.0/23 maxlen: 23
185.201.2.0/24 maxlen: 24
185.201.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a6:2e:0d:28:e3:3f:03:60:95:fe:b3:65:74:5d:47:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d8f469b90711a1282bf490d00f156096597760
Validity
Not Before: Jul 12 09:02:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04c1e1b10fd94f3a4107279b4091d92773a3ea75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7b:3d:99:2b:92:29:b5:83:31:5c:b6:2e:89:
2c:05:bb:09:91:40:b3:2b:57:3b:42:33:62:61:e8:
fc:d8:13:94:2e:7b:c4:9d:f4:f5:6f:ee:c5:8b:66:
95:ba:f8:61:a2:a4:23:bc:e2:61:d0:e4:bf:2d:f1:
da:71:84:c2:bd:3a:3e:33:75:c9:34:e8:94:33:94:
e0:39:2e:b7:8f:b3:82:14:fa:20:34:e8:07:c3:9c:
0a:48:72:41:ef:42:4e:1b:84:7d:e6:a3:01:4f:06:
99:a7:aa:29:71:f0:ec:aa:0e:cf:73:b2:a3:ff:ea:
80:fc:8f:4f:46:dc:5a:cc:59:d8:f0:e1:25:07:4b:
43:6d:57:0a:f9:e7:03:5f:56:d4:87:49:da:7c:c3:
94:f6:85:33:d8:eb:72:8f:79:af:74:7d:c5:aa:8d:
ae:d9:85:c3:53:7d:ee:1f:e3:36:56:1e:7d:50:c5:
15:69:fe:ef:78:6c:90:3e:bc:f0:22:21:02:45:08:
5c:b4:5f:26:7f:fb:c3:2c:ac:00:a8:d9:f7:78:00:
a1:80:31:41:b2:30:3d:76:c4:10:44:89:be:36:95:
2c:d9:91:da:ce:68:ff:1e:5f:38:cc:9c:a4:da:78:
1c:ca:73:39:a3:a4:d3:8e:27:0c:a2:64:ed:7b:68:
f2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C1:E1:B1:0F:D9:4F:3A:41:07:27:9B:40:91:D9:27:73:A3:EA:75
X509v3 Authority Key Identifier:
keyid:B0:D8:F4:69:B9:07:11:A1:28:2B:F4:90:D0:0F:15:60:96:59:77:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNj0abkHEaEoK_SQ0A8VYJZZd2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/BMHhsQ_ZTzpBByebQJHZJ3Oj6nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.0.0/22
Signature Algorithm: sha256WithRSAEncryption
01:7b:64:0b:b4:f8:46:9c:b0:1c:95:54:47:aa:56:7a:9f:d5:
4c:17:46:e4:85:dc:4d:f0:35:08:b5:3b:0d:b1:67:57:55:08:
79:2c:74:a3:60:6a:57:98:cd:8f:80:26:73:8b:28:d4:b4:7d:
4c:9d:1f:e2:76:f6:de:8a:e0:94:56:76:2a:6d:0d:73:1f:60:
2f:cd:3f:f8:d9:65:7c:a4:8e:28:91:39:d3:4c:61:79:dd:dd:
34:33:3a:f0:ba:be:25:3a:31:3d:33:be:8b:20:c2:c0:07:a9:
20:de:11:0b:31:a8:88:51:1b:ae:7d:ba:d5:60:24:51:5b:8c:
d7:ce:fe:a1:f8:7c:4e:f7:5d:38:7a:eb:27:b9:63:48:7f:23:
f7:17:14:c5:d9:57:87:b5:0c:34:f6:19:b3:2c:94:ee:56:7d:
b1:3d:0f:31:0f:b9:f8:27:d8:8a:be:ce:57:07:17:45:83:0a:
a1:e6:70:98:0f:a7:23:7b:aa:16:16:68:50:71:90:66:8a:2e:
b7:a8:b7:2a:19:bc:2b:68:2a:ef:05:3d:70:50:8f:6f:66:61:
06:23:7e:1e:67:ed:09:58:72:98:8c:6f:cb:68:11:39:07:b4:
51:62:78:d7:16:b7:2f:c8:53:36:a4:c7:8d:45:e0:f5:1f:c2:
c8:61:ab:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:13:12 2025 by rpki-client