Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/6M0pg-uzoUyOqQWo4OZCzfYIIv8.roa
File: 6M0pg-uzoUyOqQWo4OZCzfYIIv8.roa (raw, json)
Hash identifier: bfRyZvvl8P9/J8fuGStIams9hL+fVVt6I7EaLI+M49w=
Subject key identifier: E8:CD:29:83:EB:B3:A1:4C:8E:A9:05:A8:E0:E6:42:CD:F6:08:22:FF
Certificate issuer: /CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Certificate serial: 018CC8023DA6C0BADE8BEE03E232E535D146
Authority key identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/6M0pg-uzoUyOqQWo4OZCzfYIIv8.roa
Signing time: Tue 02 Jan 2024 02:30:39 +0000
ROA not before: Tue 02 Jan 2024 02:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48283
IP address blocks: 194.0.30.0/24 maxlen: 24
194.0.31.0/24 maxlen: 24
194.0.28.0/24 maxlen: 24
194.0.29.0/24 maxlen: 24
2001:678:38::/48 maxlen: 48
2001:678:30::/48 maxlen: 48
2001:678:2c::/48 maxlen: 48
2001:678:34::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:3d:a6:c0:ba:de:8b:ee:03:e2:32:e5:35:d1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Validity
Not Before: Jan 2 02:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8cd2983ebb3a14c8ea905a8e0e642cdf60822ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:89:6a:bf:57:c3:f6:96:72:ea:3a:7a:63:f6:
9b:7b:bd:ce:81:12:dd:35:58:ed:a7:86:11:9b:79:
99:8e:ac:df:9d:12:24:08:e9:98:25:48:3b:0c:70:
67:e6:c8:6a:c9:ae:81:05:1d:84:14:bc:1d:51:4d:
d7:44:5f:cf:a9:38:83:4d:66:9d:f5:d4:ba:a2:7b:
67:1c:4c:06:1b:bd:8a:54:bd:5b:47:81:52:f2:7b:
b4:53:c6:00:7a:f4:93:96:56:4f:1a:27:15:3e:d7:
47:b2:0b:35:f4:fc:b9:a2:10:26:40:ce:16:9e:3b:
21:7c:3f:28:ec:94:cc:9f:f6:76:d9:b4:e8:09:7f:
ce:02:10:4c:f0:e2:fd:ba:90:35:b9:95:a0:69:c9:
a1:9a:00:12:03:99:31:63:92:ae:14:12:c0:af:b5:
06:5d:35:cf:57:b8:80:bc:99:79:91:ac:c0:48:bc:
0a:e9:d7:37:68:00:09:a0:34:8a:fd:b4:47:c7:0c:
3c:1a:9c:97:85:6c:69:6d:c2:74:b8:11:d7:bd:08:
63:cd:d5:80:25:1f:39:3b:de:f2:bb:5a:2c:1d:4d:
c5:70:40:32:43:1e:60:2d:67:c2:cd:86:9b:77:c6:
67:b8:f8:e4:e0:a5:d1:55:72:d4:a2:6d:fb:24:d3:
b5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CD:29:83:EB:B3:A1:4C:8E:A9:05:A8:E0:E6:42:CD:F6:08:22:FF
X509v3 Authority Key Identifier:
keyid:D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/6M0pg-uzoUyOqQWo4OZCzfYIIv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.28.0/22
IPv6:
2001:678:2c::/48
2001:678:30::/48
2001:678:34::/48
2001:678:38::/48
Signature Algorithm: sha256WithRSAEncryption
1c:22:d3:6c:66:c1:6a:b5:a5:f4:b4:71:d5:11:18:83:99:d5:
05:b0:b1:8f:dd:4b:de:3d:4e:50:b6:a5:36:a2:f7:94:b7:f0:
13:32:c6:76:6f:b2:26:1a:0f:53:f7:ac:80:bb:4b:8c:4c:e3:
66:62:7f:84:98:2b:bb:a5:8a:e6:00:ef:0e:af:fa:13:a3:59:
3f:9c:a1:44:6a:c2:84:43:41:c4:ab:97:10:30:25:14:e1:b5:
e4:97:9e:3b:80:64:ff:80:61:2b:e3:f6:76:d1:00:36:f2:07:
97:f0:07:cf:2c:c6:09:28:94:99:a1:79:16:5f:76:ee:42:0f:
42:48:bf:88:f3:4c:c0:53:c6:e7:8f:1d:3e:4a:77:40:7e:30:
69:1a:18:59:8b:a9:24:b9:2e:e4:d0:fe:58:5f:38:e9:81:33:
03:e5:ab:e8:05:42:dd:d2:2d:c4:27:e8:81:7a:28:d5:a9:a0:
89:6a:15:fb:cf:17:2d:37:fd:ae:97:f8:67:33:56:08:38:1a:
df:9b:3c:92:a4:e2:69:41:6e:89:ac:71:22:a5:c0:98:1e:fa:
80:28:1b:60:e0:61:e3:78:5b:c5:b1:5d:c3:01:21:6b:97:5b:
be:2d:8a:a8:8a:45:75:c6:98:6c:d6:f1:d8:bc:93:d5:cf:93:
fa:06:2c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:42:54 2025 by rpki-client