Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/8ohJ4IjifYZ9l7MvDbw5H-2qnDU.roa
File: 8ohJ4IjifYZ9l7MvDbw5H-2qnDU.roa (raw, json)
Hash identifier: NqvYIOuqgZ6ATiny0l39sLqPbkHuRVcwi8PhsN6v5Sk=
Subject key identifier: F2:88:49:E0:88:E2:7D:86:7D:97:B3:2F:0D:BC:39:1F:ED:AA:9C:35
Certificate issuer: /CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3
Certificate serial: 018CC8DF9CC44B0FE292FC6A1C55B7BEFF01
Authority key identifier: D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/8ohJ4IjifYZ9l7MvDbw5H-2qnDU.roa
Signing time: Tue 02 Jan 2024 06:32:27 +0000
ROA not before: Tue 02 Jan 2024 06:32:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202005
IP address blocks: 185.216.252.0/24 maxlen: 24
185.216.252.0/22 maxlen: 22
185.216.253.0/24 maxlen: 24
185.216.255.0/24 maxlen: 24
185.216.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:9c:c4:4b:0f:e2:92:fc:6a:1c:55:b7:be:ff:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3
Validity
Not Before: Jan 2 06:32:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f28849e088e27d867d97b32f0dbc391fedaa9c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1e:76:72:6e:e0:50:e1:2e:06:4f:73:5f:b3:
69:ef:36:db:1e:17:60:b5:c0:2f:90:e7:e3:eb:47:
83:41:86:68:2c:c6:89:74:9e:e5:9e:6e:96:3f:a9:
7a:b9:65:1b:9b:7f:4c:79:41:91:fc:d4:2c:94:f4:
12:8d:0a:d8:f5:a5:96:08:9e:42:98:bf:83:d6:54:
fa:9a:a3:63:c7:e8:0f:b9:66:0e:38:20:a5:bd:db:
d0:40:d7:91:d5:35:bb:83:a2:7a:2e:f0:e3:b1:78:
ac:02:5c:a6:7f:a7:8e:d8:dc:41:d8:12:ed:75:c1:
ee:53:3f:37:de:63:c5:19:36:2d:de:6a:c8:54:8f:
11:6d:d9:f3:76:bb:67:3d:97:8b:40:a1:da:3d:92:
dd:c4:bb:cb:70:fc:21:af:a3:46:98:cb:8c:93:d2:
02:2e:3e:f5:9e:aa:c8:4b:0d:be:95:ea:6b:9a:bb:
da:30:16:32:2e:a0:c2:9f:ec:ca:a8:12:65:dd:67:
3d:68:89:75:60:cf:2b:46:fb:30:8c:e0:0d:a9:87:
f8:84:86:27:55:05:37:e4:78:d0:6f:13:e3:9b:3f:
ea:e3:f1:4c:cc:0f:d0:a3:38:d7:eb:e8:35:f7:fd:
60:20:e3:eb:3e:98:3f:8e:68:c3:80:89:d9:f1:18:
a2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:88:49:E0:88:E2:7D:86:7D:97:B3:2F:0D:BC:39:1F:ED:AA:9C:35
X509v3 Authority Key Identifier:
keyid:D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/8ohJ4IjifYZ9l7MvDbw5H-2qnDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.252.0/22
Signature Algorithm: sha256WithRSAEncryption
80:a6:aa:3e:98:fd:d5:6c:01:0d:1c:a0:37:33:1c:e8:e7:2a:
37:dd:f6:7c:f9:44:ac:a2:f8:c8:3f:5f:97:61:be:8d:1c:c8:
d5:29:25:e3:41:75:75:8a:fd:19:29:70:8d:86:8b:44:32:20:
ef:37:f6:fe:71:c8:31:a1:fe:fe:13:60:95:ad:69:a8:11:38:
e1:08:1d:7c:43:76:41:49:3b:0c:60:da:ef:d5:01:8b:93:fa:
5c:06:25:95:45:a7:b2:af:3f:59:67:60:cb:12:0e:80:22:59:
95:34:aa:f6:4a:72:28:ad:05:02:64:0f:5f:ab:ab:63:75:25:
25:cb:b6:c9:35:c8:d5:6f:3a:52:32:15:39:48:65:77:b7:3a:
22:1c:1f:36:b1:40:80:63:51:47:3e:5c:e0:18:44:d7:01:4e:
63:c4:bf:a4:c0:0c:3a:6c:8c:05:34:e2:96:9e:cd:81:01:3a:
61:b0:67:3a:d0:04:17:9d:77:09:5d:79:4c:ba:25:52:a4:d7:
30:45:e2:9c:ba:9a:f3:8a:1c:c9:34:1c:98:2c:57:36:77:50:
98:06:56:77:22:c4:16:c5:e8:9f:12:85:52:d0:6c:d0:a4:c9:
d6:5d:71:4a:21:99:63:8b:00:69:28:ff:c4:45:82:82:de:48:
2d:67:1c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:50:16 2025 by rpki-client