Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/s29bQ7PRgYxDqhUGIYIDrIVy9_s.roa
File: s29bQ7PRgYxDqhUGIYIDrIVy9_s.roa (raw, json)
Hash identifier: q3zHkU6zET7k+0xyPI7XYN78K+STfENEq1IeNExRXZE=
Subject key identifier: B3:6F:5B:43:B3:D1:81:8C:43:AA:15:06:21:82:03:AC:85:72:F7:FB
Certificate issuer: /CN=6b8bacd95f1f4bd675527d326d299956862c321a
Certificate serial: 018D64A5FCF853DCE9EB1D0808FF79F16F46
Authority key identifier: 6B:8B:AC:D9:5F:1F:4B:D6:75:52:7D:32:6D:29:99:56:86:2C:32:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/s29bQ7PRgYxDqhUGIYIDrIVy9_s.roa
Signing time: Thu 01 Feb 2024 12:30:16 +0000
ROA not before: Thu 01 Feb 2024 12:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207595
IP address blocks: 185.225.227.0/24 maxlen: 24
2a05:ba00::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:64:a5:fc:f8:53:dc:e9:eb:1d:08:08:ff:79:f1:6f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b8bacd95f1f4bd675527d326d299956862c321a
Validity
Not Before: Feb 1 12:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b36f5b43b3d1818c43aa1506218203ac8572f7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3d:e2:e7:11:93:25:5a:18:5b:aa:4d:ba:17:
4e:26:a8:8e:87:09:cf:40:36:70:a6:5b:96:3e:c5:
bb:32:54:59:b7:31:bc:db:08:c5:98:b7:6a:08:07:
c1:7b:06:c1:35:9b:b1:a2:85:ff:c0:7a:d2:e0:de:
23:7a:54:74:93:0c:7d:41:9c:d8:76:28:21:1d:2e:
ff:b4:a0:95:38:7c:c9:e9:18:81:44:8a:88:42:e1:
8d:0b:65:26:3b:89:2c:b4:84:55:63:95:52:a5:5c:
82:48:72:47:db:1d:a6:68:ca:60:5a:c5:04:30:37:
7f:10:5b:43:50:82:ff:50:89:8f:d2:4d:b7:39:69:
40:ea:7d:ea:2a:49:d6:25:a1:b6:af:89:09:51:5b:
62:df:f7:94:1d:fd:ba:36:a8:a1:6e:a0:50:4d:cb:
77:b0:f9:b2:40:d8:e5:9c:98:9c:af:f1:a1:8f:13:
82:81:b1:26:b2:95:9b:9b:21:2b:7d:ad:15:47:f6:
a7:3c:65:30:a8:7a:97:92:9d:0c:dc:51:87:af:21:
fd:bd:c2:00:f2:f5:11:59:d5:30:61:2a:aa:b1:0a:
96:61:34:cb:69:79:bc:c2:42:de:67:a5:78:c6:60:
ab:40:46:6e:95:79:b9:7d:51:08:f0:7d:5c:61:fe:
b0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6F:5B:43:B3:D1:81:8C:43:AA:15:06:21:82:03:AC:85:72:F7:FB
X509v3 Authority Key Identifier:
keyid:6B:8B:AC:D9:5F:1F:4B:D6:75:52:7D:32:6D:29:99:56:86:2C:32:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/s29bQ7PRgYxDqhUGIYIDrIVy9_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.227.0/24
IPv6:
2a05:ba00::/32
Signature Algorithm: sha256WithRSAEncryption
60:8a:fd:b5:c0:06:17:e5:8b:5a:14:89:27:ea:ac:9b:52:e0:
c6:a8:4f:2c:93:40:c7:58:58:c6:6c:20:d2:de:9d:13:e8:7c:
68:6e:dc:d2:0c:f3:75:e7:bd:9b:e0:a3:0c:00:48:f9:c3:22:
9c:3f:45:77:ea:dd:90:06:64:e4:ac:7f:de:f3:11:76:27:87:
0d:db:2e:b7:9f:83:8f:5d:9b:32:55:ca:41:45:b8:2b:f5:7c:
e7:4a:42:f8:b5:f3:be:16:e6:e2:2f:d1:c5:89:68:f7:44:4c:
a9:0f:04:98:58:7e:d2:7d:05:c1:9d:69:ab:c2:74:b1:f1:ff:
42:3e:31:eb:0d:e8:1a:c7:34:0a:04:67:e5:16:9e:69:30:de:
f8:1e:3f:5d:65:be:b2:0b:f6:62:c4:ce:ae:11:1c:1e:94:bc:
86:fa:1f:cc:1a:3c:19:26:43:59:34:65:1d:86:e0:ff:58:87:
6b:25:74:e5:5c:28:0a:ea:64:5e:67:8a:c5:d0:f9:af:36:c5:
04:08:28:ab:43:57:c2:08:76:e7:40:e4:06:44:78:a3:da:ed:
a5:f1:5f:47:67:7d:52:2c:06:4d:8b:22:55:1a:94:ea:58:ef:
35:f4:f7:2f:28:db:ed:1b:a3:a8:17:27:d0:e2:c3:36:51:35:
63:65:e6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:15 2025 by rpki-client