Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/A6kTtDcEpoRJd5NG5kIMc5yu9u8.roa
File: A6kTtDcEpoRJd5NG5kIMc5yu9u8.roa (raw, json)
Hash identifier: oC8p+I2hel+f+RsviOc3f+WRQ85KtabGxSJ19ygSjac=
Subject key identifier: 03:A9:13:B4:37:04:A6:84:49:77:93:46:E6:42:0C:73:9C:AE:F6:EF
Certificate issuer: /CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Certificate serial: 018CC7953914D09B5475FDCC4B5235E1E7D4
Authority key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/A6kTtDcEpoRJd5NG5kIMc5yu9u8.roa
Signing time: Tue 02 Jan 2024 00:31:34 +0000
ROA not before: Tue 02 Jan 2024 00:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43016
IP address blocks: 195.181.192.0/20 maxlen: 20
185.121.216.0/22 maxlen: 22
2a06:a0c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 23 Sep 2024 13:48:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:39:14:d0:9b:54:75:fd:cc:4b:52:35:e1:e7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Validity
Not Before: Jan 2 00:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03a913b43704a68449779346e6420c739caef6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:32:99:fa:d8:87:ea:6c:76:8f:7e:19:d3:d7:
50:a0:3d:ec:92:c0:dd:af:85:53:ce:eb:00:c2:20:
4f:c4:3b:89:a7:0a:95:98:0b:59:cc:84:40:a1:26:
29:fa:f8:42:27:94:43:b0:0c:79:0c:3c:98:6f:04:
25:83:e3:8b:d3:2a:d1:8d:8a:be:40:48:8c:2d:e9:
e4:2b:7c:28:88:40:68:49:a8:1f:2f:92:c1:81:da:
f6:fd:8e:d6:3d:48:4c:5b:9c:45:d1:d1:c8:7a:b7:
87:51:5f:a7:32:31:2d:a0:d2:e0:2b:5b:73:08:d3:
b4:0a:f0:1e:a9:56:b7:b2:97:86:a4:e5:b7:44:fd:
1e:c4:c8:9f:2a:bd:c7:35:b5:2d:c2:e0:e1:ab:fa:
b3:ef:bc:9c:1f:07:a9:a7:32:51:da:d7:8f:f7:18:
0a:59:6a:c0:72:fb:e6:d3:74:3f:e5:8e:2e:41:74:
da:73:30:60:d8:da:11:0b:a5:97:e4:18:1b:23:b6:
dc:96:d1:cd:30:81:0a:d3:ec:31:da:14:dd:d2:d9:
ef:45:39:2c:47:eb:a8:f3:14:06:04:8e:df:6d:01:
af:aa:f8:88:ce:59:b6:a1:be:c0:d7:28:44:0e:d6:
2b:76:08:3a:07:a2:ec:bd:76:7e:a8:09:21:8d:ce:
b4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A9:13:B4:37:04:A6:84:49:77:93:46:E6:42:0C:73:9C:AE:F6:EF
X509v3 Authority Key Identifier:
keyid:E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/A6kTtDcEpoRJd5NG5kIMc5yu9u8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.216.0/22
195.181.192.0/20
IPv6:
2a06:a0c0::/29
Signature Algorithm: sha256WithRSAEncryption
19:7b:d2:0b:fb:e3:a3:a6:ea:d6:1a:b1:3f:3f:76:b5:ee:14:
63:69:d2:e6:22:b6:b3:5b:b5:d5:f1:c6:a8:37:d1:d2:0e:31:
3d:09:df:b4:60:c0:ad:be:e7:87:9c:2b:64:df:a1:f7:a2:cc:
7a:59:2e:0a:2a:f1:86:c9:72:f7:53:86:49:bd:ec:fb:3a:7c:
2d:9b:b8:29:41:e6:e2:11:3f:27:90:62:43:10:75:1b:58:3e:
5d:8f:c4:ab:cf:0a:c0:7a:97:6c:d7:2c:1b:cf:9c:07:17:68:
9a:e0:de:14:26:8e:9f:88:43:8a:08:ba:2b:77:09:f3:9a:83:
dd:ce:7e:b7:d4:f5:7d:2e:70:c0:df:4c:7f:2b:a4:ba:d8:61:
f3:da:5a:81:2a:42:4b:6d:a5:2b:74:2f:33:fd:d8:fa:2d:5d:
de:9f:23:95:c3:aa:fa:20:fd:71:4b:0e:51:7e:da:cb:25:66:
a6:8a:5c:52:48:4a:67:71:b4:02:04:cd:1a:4d:e3:d0:98:41:
4d:78:1c:8e:25:0e:74:98:d8:18:13:3f:00:8d:8c:9f:bc:88:
0e:fe:93:ab:25:8d:7b:64:fa:8b:1c:35:d4:71:40:04:75:21:
ed:86:5e:58:d8:e2:7e:38:15:df:95:b0:7e:49:d7:cd:78:ca:
80:1a:09:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:44:22 2025 by rpki-client