Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/c1V6dur8n5-FkrCxThJLcDRu9DY.roa
File: c1V6dur8n5-FkrCxThJLcDRu9DY.roa (raw, json)
Hash identifier: yluRaUxePzjxchPpOHL/xcGMf5T9xjMrXnyL37iiGpE=
Subject key identifier: 73:55:7A:76:EA:FC:9F:9F:85:92:B0:B1:4E:12:4B:70:34:6E:F4:36
Certificate issuer: /CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Certificate serial: 0194206834BAAA4E3C1C9743BC0774EF8D5B
Authority key identifier: C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/c1V6dur8n5-FkrCxThJLcDRu9DY.roa
Signing time: Wed 01 Jan 2025 05:48:07 +0000
ROA not before: Wed 01 Jan 2025 05:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31042
IP address blocks: 185.81.60.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 15:41:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:34:ba:aa:4e:3c:1c:97:43:bc:07:74:ef:8d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Validity
Not Before: Jan 1 05:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73557a76eafc9f9f8592b0b14e124b70346ef436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8a:a3:2a:aa:06:f4:ac:b3:df:41:b3:3a:79:
98:1e:59:d4:57:ed:fd:1d:fd:f4:24:47:57:0f:9d:
a1:8f:81:db:36:bf:7d:3b:15:cc:13:d0:e7:d4:0c:
1e:2b:a0:9b:45:a7:20:e2:50:03:c8:8d:42:c8:ed:
99:9c:87:52:1c:30:75:5d:bb:68:11:16:22:0d:67:
49:0b:f4:ab:f3:ad:8d:3f:c3:19:8f:e1:c5:4d:a1:
b3:b0:a7:d3:9a:00:4c:9c:a0:55:62:f8:d9:cb:f6:
14:04:c0:9a:a8:26:ff:ec:0c:ec:4d:e1:ce:57:eb:
0e:bf:21:08:81:a4:56:05:47:90:37:13:c8:2c:04:
73:98:2c:05:39:8c:e9:f0:f8:7c:93:5f:d9:8e:91:
ba:f3:05:cb:3a:65:8e:eb:23:e0:8c:ca:6a:a0:68:
58:fd:f2:03:43:1b:65:ef:b3:ac:0e:a8:b9:21:1e:
93:a8:0b:03:31:30:57:11:a5:a2:7d:5a:0b:fd:69:
1f:1c:9e:86:60:e6:e8:86:2d:75:90:a2:f9:27:04:
dc:29:a5:38:86:74:12:0c:bf:4b:15:2d:7f:d7:5b:
1f:4c:73:69:cf:95:30:f3:35:e6:a5:28:f4:68:ec:
8c:0e:64:0d:c1:c5:8b:0a:bf:09:98:9d:47:85:19:
63:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:55:7A:76:EA:FC:9F:9F:85:92:B0:B1:4E:12:4B:70:34:6E:F4:36
X509v3 Authority Key Identifier:
keyid:C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/c1V6dur8n5-FkrCxThJLcDRu9DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.60.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:b6:95:a0:b2:f6:9c:0d:7c:26:d4:a9:d2:87:65:a1:e1:fb:
aa:ae:84:49:6b:37:be:66:b2:0a:d3:7a:86:c7:da:d9:c3:43:
17:05:5e:6a:55:ca:37:00:21:54:18:89:78:41:ec:97:1d:9d:
b0:ce:21:b5:7c:ec:72:a6:f0:b7:41:f8:6f:79:84:2a:ce:69:
9e:aa:2a:22:0e:19:3e:83:86:6d:95:53:7e:55:47:83:8f:c3:
00:42:e8:f9:6c:05:85:37:1e:72:ab:14:7f:83:8d:c9:e0:9b:
57:f8:2b:85:a4:29:84:3d:df:e1:26:0d:e8:4a:95:66:b0:e6:
e0:30:29:e6:3b:20:30:a6:a4:c0:af:f2:9f:79:c1:ff:b4:3f:
26:2a:af:a4:09:3c:d2:31:04:98:0b:5f:7f:95:5b:b0:47:20:
84:63:06:22:fc:59:b2:1c:f1:a9:1d:e0:4f:06:32:13:07:d2:
26:ca:53:03:96:46:ec:59:53:44:f2:49:14:a2:df:95:79:38:
25:ec:a0:ec:6c:eb:18:02:c3:c4:9c:3e:3a:a6:12:ef:18:a9:
41:3a:06:eb:b6:ae:03:0e:1f:7d:ac:96:b5:5d:85:ca:ec:85:
cf:ed:95:0f:2e:7d:5f:73:2c:5b:77:65:b8:89:b2:01:23:a2:
5d:c7:97:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:56:20 2025 by rpki-client