Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/yx28HK91FDyQ9mc1BW8Fxi_dcB8.roa
File: yx28HK91FDyQ9mc1BW8Fxi_dcB8.roa (raw, json)
Hash identifier: z80DaEnpTYk71FsVMdqtYBcF3zlMIB+EWS2JDZeD9+o=
Subject key identifier: CB:1D:BC:1C:AF:75:14:3C:90:F6:67:35:05:6F:05:C6:2F:DD:70:1F
Certificate issuer: /CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Certificate serial: 018CC5DC6C25723133977D04181AA6B7E7B1
Authority key identifier: AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/yx28HK91FDyQ9mc1BW8Fxi_dcB8.roa
Signing time: Mon 01 Jan 2024 16:30:06 +0000
ROA not before: Mon 01 Jan 2024 16:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204094
IP address blocks: 185.113.141.0/24 maxlen: 24
185.113.143.0/24 maxlen: 24
185.113.140.0/24 maxlen: 24
185.113.142.0/24 maxlen: 24
185.231.233.0/24 maxlen: 24
2a03::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:6c:25:72:31:33:97:7d:04:18:1a:a6:b7:e7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Validity
Not Before: Jan 1 16:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb1dbc1caf75143c90f66735056f05c62fdd701f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:6a:3f:f1:f6:46:11:34:fd:71:f1:ad:a6:
02:52:b6:da:58:b0:27:5f:53:ef:a7:b9:03:db:c3:
94:50:62:fd:ba:b2:5b:fd:1c:38:66:56:6c:c7:b3:
4b:d1:12:02:c8:5e:c6:96:d7:26:0e:a3:71:93:c7:
cd:fe:8b:18:a1:47:c8:51:bd:ee:1d:0d:ff:e2:b0:
7c:de:a7:59:1c:d6:4e:ec:c1:86:08:04:d3:73:31:
8a:a7:68:ae:d8:0d:02:ad:e6:c8:9c:ff:a3:09:6d:
dd:a1:d9:dc:61:d0:70:b0:40:c0:0a:a1:b8:89:9a:
6c:80:38:92:a2:5b:a9:02:9b:bd:f7:89:f7:b3:bd:
11:50:b8:e8:f9:12:3d:15:cc:6c:bb:33:8f:99:c9:
a6:bb:35:b8:45:42:59:32:de:b8:ef:bc:d4:56:b9:
8b:c1:e3:9a:78:01:d6:0f:06:31:2a:9c:61:23:2d:
c1:13:34:70:f8:e1:db:3b:ad:13:96:e1:ec:ea:8f:
b6:ef:ee:6c:da:5f:4f:7b:67:5b:10:71:aa:68:6f:
a3:ab:25:77:ae:75:ec:ee:7c:53:3a:b5:a6:48:1c:
be:a0:1b:99:39:52:04:6d:70:a6:73:f4:e5:60:71:
40:38:fd:d3:4d:c0:f2:c8:4e:1b:bb:e5:26:38:64:
44:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1D:BC:1C:AF:75:14:3C:90:F6:67:35:05:6F:05:C6:2F:DD:70:1F
X509v3 Authority Key Identifier:
keyid:AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/yx28HK91FDyQ9mc1BW8Fxi_dcB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.140.0/22
185.231.233.0/24
IPv6:
2a03::/32
Signature Algorithm: sha256WithRSAEncryption
09:02:d7:3b:1d:55:a2:aa:70:d9:e9:aa:f6:69:a7:95:fb:37:
8a:71:f0:18:7e:14:fa:f3:3c:de:04:e5:4a:ac:f3:00:b2:40:
f4:91:e9:0b:ac:de:0d:21:f2:1b:d5:a0:fa:9f:70:18:d2:69:
56:f6:19:ae:c1:c2:c9:8b:a5:e2:98:cd:6a:fd:a6:c7:5f:9c:
f9:04:ea:35:a5:de:fa:ab:f5:52:34:22:87:4b:85:f4:8d:c5:
0b:d6:f9:bc:88:f0:e4:99:41:74:f6:51:f5:fa:af:82:95:0e:
6f:08:fd:0d:e2:e4:8b:fb:d3:b1:b1:00:e2:7e:dc:28:50:15:
3a:c9:bc:12:2a:67:11:9c:06:b5:f0:d5:8f:c2:e1:9f:9a:c9:
72:a6:ec:ef:de:88:22:99:9a:3c:31:33:b0:50:d4:90:f2:a5:
29:e8:2b:c2:65:52:b6:02:49:8a:2a:cb:5a:bc:a1:17:94:09:
56:45:7b:e4:82:39:18:9e:e3:f8:3d:62:18:26:88:4d:05:6c:
1d:a1:93:28:e0:32:bf:b2:98:ae:1f:e0:35:db:36:7c:6e:57:
85:df:c2:11:97:1f:ad:99:11:94:27:b1:73:b2:95:c8:41:03:
cc:07:d6:28:66:3f:8a:81:77:9e:24:21:02:df:39:da:35:cc:
e8:26:f5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:58 2025 by rpki-client