Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/h-YXJLMHYRBq6Gz40ODA6PXciTU.roa
File: h-YXJLMHYRBq6Gz40ODA6PXciTU.roa (raw, json)
Hash identifier: WiLbfyHyZS1Yf/YtIYL4hCbS+4zyQlwvmvSNI/cb2YY=
Subject key identifier: 87:E6:17:24:B3:07:61:10:6A:E8:6C:F8:D0:E0:C0:E8:F5:DC:89:35
Certificate issuer: /CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Certificate serial: 018F80786804CAED376B25F12E6E469E6C83
Authority key identifier: C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/h-YXJLMHYRBq6Gz40ODA6PXciTU.roa
Signing time: Thu 16 May 2024 08:15:25 +0000
ROA not before: Thu 16 May 2024 08:15:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47585
IP address blocks: 185.250.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jul 2024 07:13:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:80:78:68:04:ca:ed:37:6b:25:f1:2e:6e:46:9e:6c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Validity
Not Before: May 16 08:15:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87e61724b30761106ae86cf8d0e0c0e8f5dc8935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:74:92:70:b9:6b:31:d0:67:3b:b0:4c:09:d1:
89:4f:c6:97:a7:80:38:7a:f6:70:f0:e4:c1:a5:6c:
a5:11:d1:a2:4d:14:2e:9f:02:f2:37:ce:e2:a5:0c:
c4:a6:c4:ab:78:f3:19:42:df:bb:01:a6:35:5f:1b:
dd:82:1b:7d:83:4e:24:ec:b0:03:f5:c6:ae:f5:f0:
94:a6:ff:02:b6:11:dc:93:ef:f1:3b:b9:e2:d4:1a:
18:8a:5a:6f:77:df:1d:e6:7f:f4:39:bc:ee:c8:8f:
e2:b5:c6:f7:4b:61:57:6f:f0:15:8c:7a:d0:6e:ac:
c8:fa:01:71:73:51:d2:43:35:e8:1c:20:c8:33:19:
7b:15:92:3c:81:3b:1f:3a:37:ea:14:12:23:33:dd:
d2:f5:2b:74:e2:96:73:e5:54:ac:83:fb:6f:1a:c5:
63:ad:f2:f2:ff:f8:44:26:84:87:db:a1:d2:0d:13:
78:5f:74:e9:85:99:26:2a:05:5b:cf:b8:30:45:79:
da:1c:da:68:7e:d9:85:75:b1:df:16:c7:0c:0e:0a:
4d:bc:52:f5:0b:c3:74:94:2f:e5:01:8c:dc:b6:5c:
76:cb:70:42:c2:97:36:60:7d:85:d4:31:8d:c3:41:
ea:e8:dc:88:31:10:61:7a:30:4d:44:b5:85:ef:32:
22:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E6:17:24:B3:07:61:10:6A:E8:6C:F8:D0:E0:C0:E8:F5:DC:89:35
X509v3 Authority Key Identifier:
keyid:C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/h-YXJLMHYRBq6Gz40ODA6PXciTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.241.0/24
Signature Algorithm: sha256WithRSAEncryption
59:15:2a:89:01:c6:c8:70:2a:50:ea:46:7c:3e:ca:3c:00:c7:
8f:05:27:6a:6b:c1:d0:d7:34:7c:c6:2b:cd:0e:cc:58:02:8d:
44:07:88:bd:04:19:2a:78:0f:fb:20:5c:49:55:7c:34:a0:3b:
08:3f:0f:63:a4:b5:76:de:e5:6e:3b:9f:ab:5d:24:9c:4a:b0:
4f:e1:d8:64:dc:e9:58:91:a7:5a:b6:40:c0:81:74:e7:ea:57:
f1:40:64:fa:7b:d7:d3:de:f7:3d:09:37:91:09:1b:1b:25:ea:
08:0c:8f:be:1f:d6:b8:89:52:5e:87:66:81:a0:7c:8a:9f:de:
dd:ff:99:ee:bc:32:03:39:5d:e4:d7:5d:2e:15:ee:5f:9c:77:
67:57:8d:52:e6:d5:fb:e9:95:59:75:2e:5b:8d:60:61:88:9c:
45:59:b9:99:cf:05:25:17:1c:61:18:e5:a2:85:af:fd:b9:55:
66:6d:06:72:2b:74:55:8e:62:f7:6c:f6:d6:0b:41:89:8c:76:
f3:0f:a8:be:73:2b:03:94:4f:d2:9e:d9:99:14:68:5b:16:e0:
a7:16:b5:87:88:c5:40:2a:56:39:d5:0a:40:f7:58:82:55:cf:
ab:c3:a5:b1:61:0b:65:f4:14:f1:c3:f2:56:60:df:d3:b1:df:
b0:f5:46:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:27:39 2025 by rpki-client