Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/u0L1L0NM7S1HKMvsjnoIdQYESE4.roa
File: u0L1L0NM7S1HKMvsjnoIdQYESE4.roa (raw, json)
Hash identifier: +sebfRF6G+yXsu6TZqaZfYw+DnoAe6J+JksbL4n7hWA=
Subject key identifier: BB:42:F5:2F:43:4C:ED:2D:47:28:CB:EC:8E:7A:08:75:06:04:48:4E
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 01951339B067517DD9305E57DCE0B3BF0307
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/u0L1L0NM7S1HKMvsjnoIdQYESE4.roa
Signing time: Mon 17 Feb 2025 09:25:02 +0000
ROA not before: Mon 17 Feb 2025 09:25:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44547
IP address blocks: 185.136.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Feb 2025 20:08:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:13:39:b0:67:51:7d:d9:30:5e:57:dc:e0:b3:bf:03:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Feb 17 09:25:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb42f52f434ced2d4728cbec8e7a08750604484e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:46:bf:20:5d:b4:db:c7:ef:9b:4c:fc:82:df:
e9:fb:14:d6:70:59:d1:aa:0b:e5:5c:12:fd:ed:05:
6c:e5:01:0c:a0:ac:b2:da:8b:63:5f:29:9b:92:bb:
4d:7a:a0:13:25:29:6e:81:99:02:76:7c:2e:f9:59:
56:28:ac:dc:15:ad:e0:03:7c:4d:3a:97:33:33:7c:
cb:9a:a7:04:e4:d4:19:43:a6:2f:1a:80:c3:b1:01:
e2:a0:f4:7a:07:6a:b4:1a:97:0f:98:12:3d:d4:e5:
46:50:dd:42:f6:78:af:4b:0a:44:32:e3:1c:f6:65:
8a:d8:7a:fb:0d:69:0e:fa:d5:19:97:f4:2f:02:b9:
ae:1d:25:29:23:42:92:14:50:e2:01:cc:b3:14:c4:
06:50:b7:6e:9e:7b:3b:fc:61:52:cb:67:a8:a2:12:
2a:1b:85:f2:35:0d:c9:11:52:ab:51:78:56:a5:25:
39:ae:f3:47:b2:1a:27:97:1f:c0:a3:46:04:c9:16:
32:18:2a:e9:72:e5:8b:a7:dc:33:38:b3:aa:6c:51:
23:58:7c:2f:48:46:c2:d9:f6:8b:2f:ca:f7:a0:59:
4d:71:32:65:27:ea:56:7f:b5:84:89:b9:01:05:61:
3a:61:d8:89:41:77:5b:90:f0:54:97:7f:14:d1:70:
8d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:42:F5:2F:43:4C:ED:2D:47:28:CB:EC:8E:7A:08:75:06:04:48:4E
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/u0L1L0NM7S1HKMvsjnoIdQYESE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.206.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:d3:52:ad:57:25:bb:3f:ba:1d:a6:5c:c0:fb:7a:98:15:3d:
a1:3d:54:c1:d6:46:cc:ba:aa:74:e1:32:ca:f9:0e:74:43:f2:
6b:5c:e5:05:25:00:20:57:cc:98:50:44:2d:7c:84:d8:6a:b9:
44:17:74:66:51:65:4e:96:2d:4f:eb:9a:94:99:b2:c9:20:af:
ba:e3:45:03:08:d1:fc:a3:59:e8:39:97:a2:c2:00:6e:24:5f:
18:9d:51:57:2c:6e:87:b0:95:27:82:b4:e8:fc:57:67:c0:80:
b7:5b:db:d3:f3:45:b0:d4:3d:2e:1e:37:25:f9:a4:2a:8d:54:
43:81:5a:62:81:a3:6f:8f:6e:56:e4:a9:38:9a:e7:c3:ab:c2:
8e:81:93:56:ae:16:ca:57:e2:4c:3d:2a:c3:a8:c9:c6:62:ce:
c4:49:f5:b3:07:8a:af:1d:7e:02:e2:8b:ad:39:0d:2e:25:7a:
ac:9a:2b:f1:99:39:7b:42:b0:d0:e1:bd:9c:ec:78:91:13:fc:
ab:ce:09:7e:7e:9e:21:54:f5:53:8d:04:d1:7b:f4:0f:86:72:
a8:3d:82:af:67:bf:df:07:d9:8f:da:0e:b2:1f:e9:e6:67:37:
43:5c:48:eb:bc:f0:a0:ca:60:5d:fb:bc:14:e8:6f:0f:78:9c:
79:08:0d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:54:06 2025 by rpki-client