Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/bPSg5as01reYO9BAcrbl2u9jQNM.roa
File: bPSg5as01reYO9BAcrbl2u9jQNM.roa (raw, json)
Hash identifier: gnkK/qYNXM0cT/fzkLZeIKd+wT0znMyU0+FakiqjuZY=
Subject key identifier: 6C:F4:A0:E5:AB:34:D6:B7:98:3B:D0:40:72:B6:E5:DA:EF:63:40:D3
Certificate issuer: /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial: 018E320002F1D62E27FF020D92DDE4B4EB3A
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/bPSg5as01reYO9BAcrbl2u9jQNM.roa
Signing time: Tue 12 Mar 2024 09:30:45 +0000
ROA not before: Tue 12 Mar 2024 09:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64289
IP address blocks: 185.225.24.0/24 maxlen: 24
185.225.26.0/24 maxlen: 24
192.189.157.0/24 maxlen: 24
2a14:3f80:8::/45 maxlen: 45
2a14:3f80:10::/45 maxlen: 45
2a14:3f80:18::/45 maxlen: 45
2a14:3f80:20::/45 maxlen: 45
2a14:3f80:28::/45 maxlen: 45
2a14:3f80:80::/45 maxlen: 45
Validation: Failed, certificate revoked on Wed 13 Mar 2024 08:37:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:32:00:02:f1:d6:2e:27:ff:02:0d:92:dd:e4:b4:eb:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Validity
Not Before: Mar 12 09:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cf4a0e5ab34d6b7983bd04072b6e5daef6340d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a4:68:1d:b6:ae:d2:a9:64:a7:26:53:fe:fb:
06:25:33:17:52:4c:df:98:5f:4c:07:4b:f0:00:8f:
43:dc:4a:e2:32:b7:f5:51:c5:15:34:0d:9f:da:20:
46:7f:07:ae:b5:63:a8:63:ef:07:b4:75:9d:ed:2b:
c7:40:32:cf:59:fc:19:38:23:45:87:4a:96:53:56:
d1:40:e7:56:f5:9c:32:fa:f3:34:9d:91:5b:8b:9f:
f2:ac:42:9d:8d:2e:18:2d:71:c0:0a:59:e3:a7:13:
3a:bf:ac:3a:04:fe:d9:e0:5e:92:59:ac:a0:c6:79:
e4:e9:51:a6:b0:9c:71:78:6e:ac:68:e3:b1:f9:ba:
f7:cb:3c:03:54:d0:aa:6c:f9:de:e4:51:c0:64:65:
a8:aa:28:fe:7f:8a:a1:4d:6e:3d:0e:35:b8:1e:54:
4b:2d:e9:ec:63:f1:d4:79:b4:7f:58:f6:8d:1a:18:
a3:9c:53:4d:32:fa:80:bd:25:ae:e3:98:e8:b3:31:
b9:60:30:91:37:20:de:4d:83:d9:3b:88:e5:93:2c:
43:1b:20:a4:2b:91:62:fa:e4:ee:b9:bc:5d:06:a9:
90:82:60:18:55:90:d8:99:25:16:80:40:10:90:72:
f8:b4:cb:61:ae:be:0e:47:76:54:8a:a6:58:e4:30:
b1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F4:A0:E5:AB:34:D6:B7:98:3B:D0:40:72:B6:E5:DA:EF:63:40:D3
X509v3 Authority Key Identifier:
keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/bPSg5as01reYO9BAcrbl2u9jQNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.24.0/24
185.225.26.0/24
192.189.157.0/24
IPv6:
2a14:3f80:8::-2a14:3f80:2f:ffff:ffff:ffff:ffff:ffff
2a14:3f80:80::/45
Signature Algorithm: sha256WithRSAEncryption
ac:53:ba:5d:8e:7e:b0:d0:59:7b:4b:7d:07:0b:35:eb:9f:99:
6e:d2:ba:4b:90:1b:13:65:de:de:97:7d:6d:7b:a0:c0:7a:05:
9f:32:2d:b3:dd:88:16:35:b0:4e:08:42:67:4f:63:68:f2:f1:
59:87:9d:5f:cf:a0:2f:54:71:b9:b7:74:7f:3a:54:df:fa:6e:
1f:23:9b:3d:9a:13:72:71:21:c0:28:43:f3:e7:84:d6:33:f5:
25:05:9a:be:7a:a2:b4:ac:0b:bc:31:83:37:88:55:4e:07:3a:
4c:77:2b:f1:b9:ae:f1:ee:6c:94:4c:e7:a4:89:e0:44:ae:e0:
c9:77:ed:af:63:5f:3e:f9:02:83:a1:31:d7:38:11:cc:fd:9f:
e3:e4:fb:f2:b7:fe:fe:27:d3:29:73:c9:af:e3:b3:17:3c:56:
c3:9f:b5:a9:d3:1c:21:94:81:23:3b:09:71:98:48:47:2a:b9:
4a:5e:32:d9:63:4a:65:33:36:e5:4f:9c:a6:28:54:18:99:a8:
0f:aa:f1:c7:43:e2:ff:0e:f2:02:17:4c:9f:d8:a3:7e:ad:7b:
60:ef:fb:54:7d:a4:9c:d1:09:ce:4a:7a:84:bb:df:0f:fe:d1:
4a:da:67:da:b5:bf:b4:21:fd:77:f4:57:64:2f:da:cc:29:91:
aa:0f:0d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:14 2024 by rpki-client on console-fra.rpki-client.org