Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/AkZ-PGvyoeZZivJmGZvwYqxk-lY.roa
File: AkZ-PGvyoeZZivJmGZvwYqxk-lY.roa (raw, json)
Hash identifier: jvykhubOE/+95+Y/zQYp/7q6NpN6GKJg2M9Bga4SgCM=
Subject key identifier: 02:46:7E:3C:6B:F2:A1:E6:59:8A:F2:66:19:9B:F0:62:AC:64:FA:56
Certificate issuer: /CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Certificate serial: 018D5EF4D42D4BA20BD546623243DD6790F0
Authority key identifier: CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/AkZ-PGvyoeZZivJmGZvwYqxk-lY.roa
Signing time: Wed 31 Jan 2024 09:58:39 +0000
ROA not before: Wed 31 Jan 2024 09:58:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60372
IP address blocks: 185.4.252.0/24 maxlen: 24
185.4.253.0/24 maxlen: 24
185.4.254.0/24 maxlen: 24
185.4.255.0/24 maxlen: 24
185.4.255.112/29 maxlen: 29
185.156.212.0/24 maxlen: 24
185.156.212.8/29 maxlen: 29
185.156.212.24/29 maxlen: 29
185.156.213.0/24 maxlen: 24
185.156.214.0/24 maxlen: 24
185.156.215.0/24 maxlen: 24
2a02:7740::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5e:f4:d4:2d:4b:a2:0b:d5:46:62:32:43:dd:67:90:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Validity
Not Before: Jan 31 09:58:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02467e3c6bf2a1e6598af266199bf062ac64fa56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6f:4c:5f:2a:80:87:8b:0c:bd:54:44:7e:e2:
fe:bc:99:1b:ab:a5:8c:d6:31:61:f4:6f:fb:7b:71:
fd:28:e6:21:17:40:87:ec:f5:30:66:30:a0:ca:b1:
85:b0:04:a5:26:aa:46:b9:cb:7d:44:33:0d:08:87:
7f:42:b1:fd:57:dd:77:94:74:08:ec:08:66:bd:21:
01:a8:bf:de:74:63:91:4a:5b:98:42:f7:56:47:72:
9d:f6:69:cc:fb:86:c0:2d:9a:af:83:64:5f:35:97:
9e:e5:d1:dd:22:73:46:ea:b2:ae:57:6f:c9:8d:b8:
17:d5:5b:e4:03:79:7e:48:e2:1a:5d:be:e1:02:3f:
bd:e6:f0:79:1f:3b:82:cd:4f:ee:b8:87:93:66:5a:
48:24:4c:68:ec:f9:db:46:10:a2:db:46:4e:7b:f0:
d1:fb:2e:70:ac:ee:52:30:d6:5d:9c:2b:32:90:df:
34:ea:b4:1e:09:c1:2a:f7:af:01:05:9c:97:b9:0f:
c9:c8:fc:d8:7b:aa:fb:32:04:14:09:f0:c7:19:88:
0e:af:95:da:b0:20:dd:0f:64:7d:3a:de:68:7a:4a:
04:8f:f2:21:4a:7e:92:4a:1b:53:21:aa:08:68:07:
9c:f0:93:18:5e:a5:5c:cc:a4:6c:2d:85:da:92:5f:
24:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:46:7E:3C:6B:F2:A1:E6:59:8A:F2:66:19:9B:F0:62:AC:64:FA:56
X509v3 Authority Key Identifier:
keyid:CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/AkZ-PGvyoeZZivJmGZvwYqxk-lY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.252.0/22
185.156.212.0/22
IPv6:
2a02:7740::/32
Signature Algorithm: sha256WithRSAEncryption
06:05:47:9f:25:3b:7e:2b:c7:9d:0a:73:ef:22:02:68:bc:19:
38:cd:45:8c:19:ec:fb:a5:89:f9:1d:aa:fe:69:b7:24:d5:36:
d4:ae:d0:1a:ca:8e:75:b0:9c:f4:76:47:f8:15:d1:38:85:39:
98:a6:1b:70:7a:97:fb:34:37:c9:3c:99:c3:15:14:52:d7:29:
4d:cd:2d:bf:4f:be:c8:1e:19:c1:7b:a5:64:39:0e:77:98:19:
be:b0:4a:f5:36:04:6e:65:18:17:50:10:a2:04:41:65:72:4c:
8b:52:ac:4e:41:17:1f:e6:67:c7:c9:98:ce:15:45:5a:e1:a7:
eb:3b:c7:c7:d7:0e:88:fe:5d:be:ac:e7:9f:a6:00:67:ec:8e:
3a:db:e6:11:ce:78:a3:37:ba:23:06:bd:15:eb:8b:7d:81:86:
a5:fa:d5:9f:fa:57:af:a0:c1:7d:93:a5:e5:87:40:3f:d5:8e:
55:ab:b3:6d:f7:c8:2d:12:d6:89:39:e3:06:85:c3:6f:cf:6a:
9f:cb:06:cb:05:ff:73:e2:bd:b7:bc:d3:31:2b:df:77:7f:25:
2e:97:40:51:0c:ec:93:68:7d:4a:da:e7:0e:0f:68:32:0e:7c:
d6:70:a3:85:3a:f0:49:4c:ae:c3:a2:b3:33:b9:ef:fa:d9:2a:
11:d8:e0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:19:56 2025 by rpki-client