Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/6ISucpykeXCgiiR-dtDoHT2UlU4.roa
File: 6ISucpykeXCgiiR-dtDoHT2UlU4.roa (raw, json)
Hash identifier: ISj7kTY3+UcB3guU58anQ393x7mJd6MGUq34UvEd/zw=
Subject key identifier: E8:84:AE:72:9C:A4:79:70:A0:8A:24:7E:76:D0:E8:1D:3D:94:95:4E
Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial: 018CC492A43E981D125879A9DA7EC63A1CE6
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/6ISucpykeXCgiiR-dtDoHT2UlU4.roa
Signing time: Mon 01 Jan 2024 10:29:53 +0000
ROA not before: Mon 01 Jan 2024 10:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42083
IP address blocks: 185.208.100.0/24 maxlen: 24
185.208.101.0/24 maxlen: 24
185.208.102.0/24 maxlen: 24
185.208.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:a4:3e:98:1d:12:58:79:a9:da:7e:c6:3a:1c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Validity
Not Before: Jan 1 10:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e884ae729ca47970a08a247e76d0e81d3d94954e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:75:22:8d:a1:0e:59:a4:f7:e7:e3:84:6a:e3:
a8:5d:b5:99:33:49:76:11:41:9a:08:b4:ac:e1:f5:
a7:a6:9f:bf:1d:57:1d:f5:f0:1f:19:02:f4:b8:82:
25:34:53:89:af:32:96:ca:15:7b:ee:f0:d5:01:e2:
fc:75:e8:ff:b0:15:a5:cd:b0:fc:ac:14:38:97:d3:
01:96:f3:94:f2:2d:04:6b:65:92:59:eb:27:6c:b4:
eb:97:f6:5d:84:33:e2:a3:18:63:48:3b:74:a3:86:
bb:85:9f:e5:79:70:98:44:b5:bd:b1:59:ff:10:04:
32:1b:6e:9c:dd:ef:6f:fe:53:86:b3:5a:e5:aa:2a:
e3:36:2b:4f:c8:7e:47:bf:6a:2c:d1:4d:d1:56:f2:
44:25:0b:35:43:58:84:64:71:a7:f5:08:a3:61:9e:
56:7d:81:c3:e2:b9:7c:27:98:e6:cb:40:59:c1:11:
c8:c3:10:8d:61:63:14:8e:f5:a8:62:f7:56:66:ed:
ec:52:84:62:74:3f:cd:64:e5:bc:4f:4a:21:be:ba:
df:fc:f4:29:eb:55:fe:df:1c:21:90:9e:62:83:34:
e6:11:77:cc:06:dc:f3:cb:2e:50:f2:6b:2f:fb:f9:
6f:d0:f1:80:74:df:ea:f8:1a:d5:2a:9d:f2:70:a8:
73:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:84:AE:72:9C:A4:79:70:A0:8A:24:7E:76:D0:E8:1D:3D:94:95:4E
X509v3 Authority Key Identifier:
keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/6ISucpykeXCgiiR-dtDoHT2UlU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.100.0/22
Signature Algorithm: sha256WithRSAEncryption
81:3a:63:98:e9:6f:d4:a8:60:1b:45:e1:9b:ac:77:e5:67:79:
03:cd:a2:97:88:5d:12:8b:f5:5e:bd:d3:8e:77:cd:48:13:f5:
2a:2d:8f:15:70:36:c0:b1:07:b0:2a:11:09:c6:13:4c:c7:ce:
8d:99:ff:ce:09:1a:12:37:b3:a9:85:cf:14:6a:36:ea:3b:f6:
f0:85:81:03:8f:7c:e5:c8:24:e5:ed:e8:77:ae:9a:4e:02:72:
2b:40:b8:97:f7:af:90:e9:31:2b:41:4f:90:d0:93:be:ce:52:
76:b4:fd:bd:16:68:ee:e4:31:1a:ef:0a:5a:9d:8e:55:bc:a7:
59:93:5c:12:06:46:a4:6b:4a:7d:5f:89:f4:8d:6f:92:65:e0:
3d:55:03:19:3f:22:db:e6:b8:31:1e:8e:ff:d8:21:e1:d0:92:
d6:09:8e:c9:7f:25:49:a8:66:c6:98:cb:ec:9d:76:d8:28:d5:
68:59:06:59:98:0e:ae:44:6e:ac:fc:c3:6f:59:7a:93:a8:49:
af:ee:74:4f:9b:a9:12:80:a2:6c:c2:cb:9b:c7:34:12:9c:ae:
aa:a4:77:53:31:5a:57:68:f3:fd:8b:e6:0f:79:15:01:f9:ea:
41:08:57:fb:9c:e2:e3:28:2f:5f:64:c1:09:92:9e:44:b1:d4:
33:dd:b7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:39:29 2025 by rpki-client