Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/hC-zrZYQlzLEzoCtdOJs0BJ6_m0.roa
File: hC-zrZYQlzLEzoCtdOJs0BJ6_m0.roa (raw, json)
Hash identifier: 5ScOzlAr2vcJw157SyFiY9iRxPEA5yt2QcfCV79CFSw=
Subject key identifier: 84:2F:B3:AD:96:10:97:32:C4:CE:80:AD:74:E2:6C:D0:12:7A:FE:6D
Certificate issuer: /CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Certificate serial: 018CC5011BEFC53243624F3A5AA35186D8A0
Authority key identifier: 06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/hC-zrZYQlzLEzoCtdOJs0BJ6_m0.roa
Signing time: Mon 01 Jan 2024 12:30:33 +0000
ROA not before: Mon 01 Jan 2024 12:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61955
IP address blocks: 185.54.111.0/24 maxlen: 24
185.54.108.0/22 maxlen: 22
185.54.108.0/24 maxlen: 24
185.54.109.0/24 maxlen: 24
185.54.110.0/24 maxlen: 24
2a02:44a0:1c::/48 maxlen: 48
2a02:44a0:17::/48 maxlen: 48
2a02:44a0:12::/48 maxlen: 48
2a02:44a0:d::/48 maxlen: 48
2a02:44a0:10::/48 maxlen: 48
2a02:44a0:b::/48 maxlen: 48
2a02:44a0:6::/48 maxlen: 48
2a02:44a0:1::/48 maxlen: 48
2a02:44a0:14::/48 maxlen: 48
2a02:44a0:f::/48 maxlen: 48
2a02:44a0:a::/48 maxlen: 48
2a02:44a0::/64 maxlen: 64
2a02:44a0:5::/48 maxlen: 48
2a02:44a0:8::/48 maxlen: 48
2a02:44a0:3::/48 maxlen: 48
2a02:44a0:1e::/48 maxlen: 48
2a02:44a0:19::/48 maxlen: 48
2a02:44a0:c::/48 maxlen: 48
2a02:44a0:7::/48 maxlen: 48
2a02:44a0:2::/48 maxlen: 48
2a02:44a0:1d::/48 maxlen: 48
2a02:44a0::/48 maxlen: 48
2a02:44a0:1b::/48 maxlen: 48
2a02:44a0:16::/48 maxlen: 48
2a02:44a0:11::/48 maxlen: 48
2a02:44a0:4::/48 maxlen: 48
2a02:44a0:ffff::/48 maxlen: 48
2a02:44a0:1f::/48 maxlen: 48
2a02:44a0:1a::/48 maxlen: 48
2a02:44a0:15::/48 maxlen: 48
2a02:44a0:18::/48 maxlen: 48
2a02:44a0:13::/48 maxlen: 48
2a02:44a0:e::/48 maxlen: 48
2a02:44a0:9::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 11 Jan 2024 15:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:1b:ef:c5:32:43:62:4f:3a:5a:a3:51:86:d8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Validity
Not Before: Jan 1 12:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=842fb3ad96109732c4ce80ad74e26cd0127afe6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d8:dd:8a:2f:b3:cc:65:92:2d:b9:70:de:6b:
76:e1:3e:d4:90:fa:f6:5a:e4:66:e1:a9:b1:75:ee:
b6:3c:4a:e5:fa:c1:fd:b4:d3:e8:df:02:c1:e8:6a:
b9:42:56:03:85:39:c4:0c:84:94:96:de:49:ba:f5:
15:f8:93:6d:49:dc:7d:94:80:45:84:5a:50:8d:ad:
cc:3a:47:4d:a7:bb:b7:32:35:aa:d9:1c:46:2c:9f:
c8:6c:6b:1c:09:92:de:d2:5d:ce:6c:1d:ab:d5:45:
6c:ed:7d:35:8e:c6:89:73:f9:d1:d7:68:b1:37:00:
b3:a2:e7:8b:7c:6a:ba:2f:d0:6a:8a:99:38:75:e0:
2c:d8:d9:0c:f2:dd:36:49:77:53:83:c8:87:8d:cd:
d0:30:90:d1:f0:58:1a:df:86:7c:42:5f:34:b5:1c:
8a:86:7f:45:e6:cc:86:bf:97:70:bb:28:d7:03:8e:
a3:e8:5f:92:a1:1e:41:2d:c4:eb:a5:93:12:b8:45:
ea:76:39:82:2a:e2:db:fe:d5:d3:5c:9d:30:a7:0c:
52:20:4e:b7:f7:1b:38:df:f6:f2:be:f6:bc:00:a8:
aa:fb:70:ee:31:d4:2e:54:02:a2:a9:a6:1f:69:14:
7c:d4:f8:fe:eb:ff:51:dd:8e:fe:69:50:21:b4:fd:
aa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2F:B3:AD:96:10:97:32:C4:CE:80:AD:74:E2:6C:D0:12:7A:FE:6D
X509v3 Authority Key Identifier:
keyid:06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/hC-zrZYQlzLEzoCtdOJs0BJ6_m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.108.0/22
IPv6:
2a02:44a0::/43
2a02:44a0:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
ad:a5:c1:87:73:7c:8a:42:c7:da:0d:67:25:c8:1f:c9:fb:b1:
02:99:05:08:d3:5b:9b:fc:73:c3:b5:d2:dc:16:af:2f:a1:8d:
d4:94:e5:c4:b4:11:77:59:97:57:bb:17:7f:de:c7:d6:8d:3b:
97:81:c7:4f:c0:03:ea:19:9e:69:78:18:ac:08:b6:90:52:e0:
71:5d:6d:45:ea:27:58:da:59:d6:2d:16:e7:89:a6:5b:72:72:
b4:c0:25:63:f9:1a:04:d2:d5:a8:64:68:1f:fc:f2:07:45:d9:
ab:d2:5e:be:44:96:3d:20:7c:f1:13:d5:67:b6:09:b1:bd:73:
e1:fd:25:6a:35:eb:be:ee:d3:c2:61:b5:d2:6e:c4:1d:96:2e:
9e:b4:6d:11:46:c1:52:ce:d9:c6:8a:c7:28:ba:60:62:6c:8d:
6e:23:a3:aa:5e:b1:9e:24:76:65:70:d4:f8:91:cd:19:c8:7f:
4b:c2:4a:cd:84:06:3a:f3:fd:f6:85:a5:54:22:11:ec:21:25:
98:b4:62:17:3e:e7:26:e5:e6:0f:8e:68:93:20:9b:be:2a:29:
f6:e6:f7:cd:71:c9:ae:6b:81:7c:e9:ab:b2:9d:2e:4c:53:9b:
ff:5a:b5:81:55:2d:97:85:07:d0:39:00:88:52:5d:a4:03:55:
fd:36:1b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:34 2024 by rpki-client on console-fra.rpki-client.org