Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/yxIrJA00ng30wnvnc3tBN4YU8O4.roa
File: yxIrJA00ng30wnvnc3tBN4YU8O4.roa (raw, json)
Hash identifier: BQdxDg1X4ho7Us2GY8fbWQ3JOnoFGLfYdh6wnTZVDgo=
Subject key identifier: CB:12:2B:24:0D:34:9E:0D:F4:C2:7B:E7:73:7B:41:37:86:14:F0:EE
Certificate issuer: /CN=15bd7f78b7a044ae134c88b624e831a761143b79
Certificate serial: 0194252229B52857F3F8EF1F2039684085E9
Authority key identifier: 15:BD:7F:78:B7:A0:44:AE:13:4C:88:B6:24:E8:31:A7:61:14:3B:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/yxIrJA00ng30wnvnc3tBN4YU8O4.roa
Signing time: Thu 02 Jan 2025 03:49:43 +0000
ROA not before: Thu 02 Jan 2025 03:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203618
IP address blocks: 185.92.230.0/23 maxlen: 23
185.92.230.0/24 maxlen: 24
185.92.231.0/24 maxlen: 24
2a03:8d60::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 24 Mar 2025 11:18:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:29:b5:28:57:f3:f8:ef:1f:20:39:68:40:85:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15bd7f78b7a044ae134c88b624e831a761143b79
Validity
Not Before: Jan 2 03:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb122b240d349e0df4c27be7737b41378614f0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9b:11:60:1f:ce:7c:3f:d2:bb:b7:cb:35:c3:
4d:1e:05:d6:4d:a1:78:89:ca:d6:0d:9f:37:d3:a2:
fb:81:59:03:97:de:6a:54:76:84:84:fb:91:c2:de:
7f:c3:96:3c:de:a2:4b:73:0f:17:91:0f:65:40:8c:
61:35:21:be:44:ce:0e:89:28:85:7e:75:72:ab:26:
e2:bd:5b:d1:1c:90:01:fe:e9:13:37:75:00:58:83:
82:09:08:13:7d:76:03:2c:80:12:d3:34:b7:bc:5d:
23:39:f2:27:c4:90:9f:73:bf:a4:dd:de:53:79:dd:
2a:51:0e:65:e5:d1:3d:58:38:a3:08:47:12:67:93:
88:97:76:af:26:ed:4e:8c:a7:94:e3:cb:74:77:6d:
ad:a1:8d:1b:bc:c9:eb:47:2b:ed:c5:49:2d:1c:02:
c6:21:fb:a1:06:30:5f:2e:d3:bf:5f:c0:75:47:87:
31:94:10:4e:c5:1a:59:55:08:e7:28:4b:11:c2:c4:
5a:97:42:f2:e3:99:17:41:2a:01:8d:01:ae:6b:83:
d6:88:63:f0:26:c2:f1:5e:71:47:db:86:ee:9b:b3:
1f:3b:3c:b0:7f:00:62:90:88:e7:ab:5f:64:76:7a:
fe:74:21:76:fa:ab:a3:75:bb:ed:5a:dc:06:13:34:
7c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:12:2B:24:0D:34:9E:0D:F4:C2:7B:E7:73:7B:41:37:86:14:F0:EE
X509v3 Authority Key Identifier:
keyid:15:BD:7F:78:B7:A0:44:AE:13:4C:88:B6:24:E8:31:A7:61:14:3B:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/yxIrJA00ng30wnvnc3tBN4YU8O4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/Fb1_eLegRK4TTIi2JOgxp2EUO3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.230.0/23
IPv6:
2a03:8d60::/48
Signature Algorithm: sha256WithRSAEncryption
6b:13:bd:22:b8:93:58:cc:d2:98:67:cd:6b:55:4c:9d:71:0a:
4e:d2:68:04:05:b8:ba:0a:46:25:33:92:0c:46:c3:de:f4:7d:
03:9a:ce:b9:56:25:61:8b:d3:47:6d:9a:66:15:ea:bf:68:52:
f0:77:1d:e6:b6:1f:2b:93:5f:d6:31:44:66:38:02:17:8b:07:
21:75:98:24:22:b7:10:60:91:0a:57:71:1f:2d:a3:b8:9d:0a:
1d:e0:c8:ec:19:e1:4a:8e:f0:6a:be:d2:5b:af:c3:bd:22:8b:
cb:1c:7a:0c:03:da:7e:20:54:00:b0:cb:07:a0:79:ef:4f:4f:
bb:c7:47:d9:a5:99:f5:a4:04:59:fa:6d:3e:14:a2:14:84:3d:
59:97:6b:a2:ea:d0:64:fb:ae:92:e5:c5:34:53:7f:af:82:62:
5e:1c:f2:e1:86:81:c4:a3:69:eb:9f:3d:88:83:bf:28:7f:77:
bd:44:63:08:c7:c7:78:6c:e3:9a:e1:ed:39:c9:a8:50:21:60:
3d:15:1d:c8:7a:d6:ca:ad:6b:b1:7a:2d:8a:61:6d:fd:88:63:
6a:8d:3f:af:77:b9:fa:2d:43:72:3c:ea:c6:3c:5c:ba:d3:e3:
64:8a:14:99:e9:72:ba:23:a2:08:f3:e6:09:9e:17:38:b7:e5:
a5:3a:fb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:25:39 2025 by rpki-client