Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/sUK6gaRK6bFcDepeKBxTsgZdUL8.roa
File: sUK6gaRK6bFcDepeKBxTsgZdUL8.roa (raw, json)
Hash identifier: xn16jKCemhhh6VGXJEONHI3n4Xs9dq659kSQh3cLatY=
Subject key identifier: B1:42:BA:81:A4:4A:E9:B1:5C:0D:EA:5E:28:1C:53:B2:06:5D:50:BF
Certificate issuer: /CN=64757185472f16d53eeb68a140e3513fa31c31d8
Certificate serial: 01952889512C08D2E6120B7F6323CD4B396C
Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/sUK6gaRK6bFcDepeKBxTsgZdUL8.roa
Signing time: Fri 21 Feb 2025 12:44:02 +0000
ROA not before: Fri 21 Feb 2025 12:44:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39010
IP address blocks: 185.70.224.0/24 maxlen: 24
185.70.225.0/24 maxlen: 24
185.70.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Mar 2025 08:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:28:89:51:2c:08:d2:e6:12:0b:7f:63:23:cd:4b:39:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8
Validity
Not Before: Feb 21 12:44:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b142ba81a44ae9b15c0dea5e281c53b2065d50bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:52:24:7c:83:ad:d8:44:31:77:b1:b6:9a:
74:f6:98:78:cc:2f:92:d2:96:3f:a7:e7:ed:0f:59:
b7:78:c7:c5:23:90:0a:c3:7a:16:e7:62:ec:fc:80:
2f:d6:1f:ae:0c:a3:60:a8:ed:48:d3:f1:b5:2f:47:
4f:47:0a:4f:6c:c6:8a:34:61:e2:54:2d:f1:b6:70:
e8:23:f0:53:29:e5:7c:ad:d4:85:b4:cd:ec:51:90:
98:83:74:04:a9:f5:00:58:29:3f:d2:f5:3d:b0:f5:
3d:24:29:cf:63:32:a5:50:14:18:ec:88:a7:c5:e3:
36:43:55:8f:a7:aa:be:d3:f3:7f:4e:21:fa:45:eb:
0f:fd:8a:53:30:1d:1d:c4:15:f9:3f:e8:9f:e0:07:
0e:04:48:82:3f:13:a6:32:3a:60:ab:97:51:ee:69:
0a:79:8d:73:b1:e2:30:37:ac:5a:a0:f0:03:73:94:
92:17:85:0a:cf:db:dd:25:4a:50:c2:6b:ec:98:71:
87:5f:e3:61:b3:ca:cb:50:4f:80:32:9e:a0:d2:be:
47:8d:0f:3f:a9:0d:64:50:61:50:6f:16:2f:83:84:
44:5c:f4:1e:22:77:83:fb:d9:ff:7e:00:04:3d:f5:
23:91:1b:07:c2:3a:a7:26:a2:8d:1e:79:82:af:e8:
7a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:42:BA:81:A4:4A:E9:B1:5C:0D:EA:5E:28:1C:53:B2:06:5D:50:BF
X509v3 Authority Key Identifier:
keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/sUK6gaRK6bFcDepeKBxTsgZdUL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.224.0-185.70.226.255
Signature Algorithm: sha256WithRSAEncryption
0a:8c:28:94:44:f8:27:0e:58:af:ab:c5:29:bd:c4:be:2e:b2:
b6:88:16:a9:29:02:cc:de:06:ca:db:d0:15:01:df:5c:c9:78:
73:6f:be:37:4a:87:b1:b1:66:cd:02:69:6b:d8:f1:96:c9:7a:
15:37:56:7a:4f:60:00:b3:28:bd:18:49:d9:c1:bf:85:c4:87:
6e:0b:8a:fc:3b:19:65:9e:c0:7a:92:92:f9:e2:59:3f:cd:4c:
5c:64:fc:d4:09:d8:46:82:40:66:4b:ee:9a:34:c0:dc:8c:1f:
bc:2a:0a:66:59:77:e8:80:f3:11:e5:aa:9e:03:22:32:0a:27:
ac:16:34:0e:ab:66:9f:85:2a:ef:e9:1c:6a:c1:cd:44:67:bd:
22:aa:04:2c:25:34:36:86:eb:bc:bc:88:23:b3:cc:b2:8d:a9:
d7:04:49:04:39:da:c9:d0:46:9c:56:b6:1f:cb:12:3f:6e:a1:
10:1d:31:7a:02:f7:e8:fa:de:22:15:5c:50:77:f3:40:a2:c7:
e8:4c:71:16:bd:78:ff:58:c3:1b:c5:66:6e:b4:67:08:77:a5:
a1:39:6d:21:2d:32:ae:42:e3:a8:16:bf:c2:d1:84:aa:a5:ef:
4a:f3:67:b1:9d:42:9b:f1:63:7b:10:f3:c1:d1:8d:76:e2:45:
10:4f:de:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:25:29 2025 by rpki-client