Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/oBTygKGwKj9GpV8w7kXgFFbBAyY.roa
File: oBTygKGwKj9GpV8w7kXgFFbBAyY.roa (raw, json)
Hash identifier: NRP2CeLFEZZJ08VAhvieKpvPkAZ/TiLmZY+f/uUJ6oo=
Subject key identifier: A0:14:F2:80:A1:B0:2A:3F:46:A5:5F:30:EE:45:E0:14:56:C1:03:26
Certificate issuer: /CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
Certificate serial: 018CC26D87195BDEC2721C6F8339DC5C5458
Authority key identifier: 8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/oBTygKGwKj9GpV8w7kXgFFbBAyY.roa
Signing time: Mon 01 Jan 2024 00:30:07 +0000
ROA not before: Mon 01 Jan 2024 00:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201160
IP address blocks: 185.60.225.0/24 maxlen: 24
185.60.224.0/24 maxlen: 24
185.60.226.0/24 maxlen: 24
185.60.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:87:19:5b:de:c2:72:1c:6f:83:39:dc:5c:54:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
Validity
Not Before: Jan 1 00:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a014f280a1b02a3f46a55f30ee45e01456c10326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:df:d4:7e:a4:cb:51:91:1c:20:dc:05:d5:87:
fa:36:47:db:b2:44:94:61:d2:08:19:9a:92:b1:34:
81:c0:46:63:11:33:d1:e7:b3:e7:91:cf:56:e9:d9:
91:4e:03:ec:87:5d:7e:fe:2b:70:35:54:61:00:88:
f7:fe:9c:bf:65:70:34:2f:6f:91:94:f3:86:e8:32:
7a:ef:4b:7e:e7:46:80:ea:8e:36:62:ed:f4:86:08:
4b:99:ce:b9:7e:7c:3f:a5:e3:71:45:03:3c:86:51:
f9:e2:3b:4e:92:cc:bb:a3:11:10:52:cc:a5:4f:6e:
22:8c:2c:2e:e2:3c:45:fb:62:cb:60:55:71:0f:23:
9c:ec:1b:28:9b:2d:e6:cc:e4:08:72:6f:67:a8:bd:
d5:ba:a1:19:b2:e9:7e:2a:fe:4d:a2:32:df:09:94:
00:9e:67:71:e2:7d:c1:74:41:c6:d6:e2:13:9e:a0:
06:e7:90:b5:50:04:bc:fa:5d:73:e3:59:09:00:49:
55:ad:ce:0d:82:83:13:60:eb:7d:3a:50:5e:ad:a6:
d5:8a:6b:50:4b:e9:f8:c2:8a:c1:33:c6:19:4f:ce:
b2:4c:b3:91:b6:5e:22:84:9d:f7:48:0e:9d:f5:ec:
8e:5b:24:75:fb:8f:27:a0:61:26:07:84:09:53:73:
49:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:14:F2:80:A1:B0:2A:3F:46:A5:5F:30:EE:45:E0:14:56:C1:03:26
X509v3 Authority Key Identifier:
keyid:8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/oBTygKGwKj9GpV8w7kXgFFbBAyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.224.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:65:4c:8d:0c:cf:54:91:12:75:45:e0:e8:dd:91:68:33:ae:
ff:9d:1d:22:f0:a0:25:1b:b0:e4:e3:91:a4:07:94:b0:73:2a:
1f:2f:0d:e4:70:54:71:c0:a6:f9:f4:07:08:c2:45:aa:ff:ad:
45:13:d3:38:f9:a9:56:63:eb:7e:ae:d1:51:a6:04:47:e3:26:
d1:01:1b:28:f5:c7:0f:b5:0c:42:53:94:b4:e4:3f:ff:57:86:
55:38:52:f0:9d:05:3c:c4:07:f0:43:72:d1:64:53:fe:6e:24:
90:d2:08:50:71:d7:16:d5:45:73:28:20:f8:10:2f:02:67:c4:
c7:76:2e:43:97:ba:67:c0:b1:76:b4:40:46:23:c5:db:2b:82:
09:88:bf:76:58:85:e5:1d:d4:0a:97:d5:a9:7b:12:d5:4b:51:
13:f3:cd:3d:ab:f2:16:dc:b9:80:de:e3:91:cb:51:d8:b4:6e:
84:44:b6:3f:0e:0c:5a:d2:fb:65:23:7a:3d:85:9d:f1:40:9a:
5d:6e:56:28:91:0e:be:b3:69:c7:80:40:05:49:b4:67:8b:1f:
28:a1:b8:58:76:f4:94:04:e7:da:5a:cb:05:2b:b4:3c:53:a4:
d3:60:c5:81:e8:34:aa:fb:8f:6c:fd:25:2b:aa:f2:1d:a7:67:
17:e5:09:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:01 2025 by rpki-client