Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/671DjV3_8siwxt370qcxtRCo_LI.roa
File: 671DjV3_8siwxt370qcxtRCo_LI.roa (raw, json)
Hash identifier: Hd4IZ96nsPPfSkd7n6hRRdNFVZcNJVaONNRch+FpbKs=
Subject key identifier: EB:BD:43:8D:5D:FF:F2:C8:B0:C6:DD:FB:D2:A7:31:B5:10:A8:FC:B2
Certificate issuer: /CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Certificate serial: 0196E8A50312B6A5A68A378B8B1BD01785CC
Authority key identifier: 6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/671DjV3_8siwxt370qcxtRCo_LI.roa
Signing time: Mon 19 May 2025 13:04:10 +0000
ROA not before: Mon 19 May 2025 13:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197731
IP address blocks: 185.148.20.0/22 maxlen: 22
185.148.20.0/24 maxlen: 24
185.148.21.0/24 maxlen: 24
185.148.22.0/24 maxlen: 24
185.148.23.0/24 maxlen: 24
2a03:27a0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 19 May 2025 14:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e8:a5:03:12:b6:a5:a6:8a:37:8b:8b:1b:d0:17:85:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Validity
Not Before: May 19 13:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebbd438d5dfff2c8b0c6ddfbd2a731b510a8fcb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:95:0d:68:e8:89:a7:6c:3b:ba:bb:85:86:77:
94:d4:2e:96:f6:da:85:e9:4a:4c:4b:8d:2c:b8:72:
32:ab:b1:00:db:a1:86:c2:33:ee:12:6c:0c:1f:8d:
20:c3:61:69:fd:48:8e:99:4e:96:bb:d7:c5:6c:27:
b9:cc:a1:b2:12:e0:3e:c3:d3:cd:a1:56:02:f9:d7:
e5:af:d6:87:25:46:84:39:6c:46:67:88:1f:3c:14:
b0:44:36:e9:fc:46:2d:2a:5a:cb:58:9e:5d:fc:55:
ea:0c:da:b4:2a:94:eb:0c:9c:60:02:1c:c5:78:66:
34:b3:c1:b5:92:71:2b:b5:56:aa:97:20:d1:0d:c3:
b7:81:e3:e1:53:4a:7a:49:17:3d:da:04:6d:92:27:
c1:36:86:c0:84:57:86:bc:08:2e:5c:a4:18:7e:1e:
a1:7a:69:d2:fd:da:37:3f:52:da:f5:5a:60:a2:ba:
d9:26:02:d7:d6:85:1c:4a:4b:6f:e6:aa:b5:46:2d:
ae:fd:0e:a9:9c:0e:be:b6:c3:f9:40:04:ef:6c:36:
4e:70:c0:ff:c7:e3:2c:0e:b3:c3:86:d7:94:52:1a:
1f:3a:51:45:e6:21:fa:22:64:46:e9:80:d6:6a:d2:
a1:b5:b6:e8:c6:ba:a6:f8:dd:56:7a:f5:64:05:fc:
18:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BD:43:8D:5D:FF:F2:C8:B0:C6:DD:FB:D2:A7:31:B5:10:A8:FC:B2
X509v3 Authority Key Identifier:
keyid:6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/671DjV3_8siwxt370qcxtRCo_LI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.20.0/22
IPv6:
2a03:27a0::/32
Signature Algorithm: sha256WithRSAEncryption
3e:55:2a:4a:5f:b4:e6:4c:23:a2:8b:99:cf:6b:34:19:9e:e3:
18:12:1e:6b:69:0a:c7:51:d2:fa:78:cf:c6:52:97:c4:78:3d:
e8:8e:32:99:20:e1:b6:e1:20:51:e9:d8:6a:18:14:5a:d9:8a:
6d:64:00:87:57:40:29:7a:32:8d:8a:1f:ee:98:96:1f:f1:92:
c4:97:b7:64:f7:fc:2f:fb:f4:98:44:0e:f7:73:2e:0f:c0:2a:
cb:c3:0c:67:2d:40:f4:c2:db:a6:85:71:67:dc:63:3b:98:09:
15:3a:6e:43:b9:9a:ea:54:99:e2:24:19:47:42:9b:89:8d:a2:
67:e4:63:44:57:bc:08:28:32:a4:83:50:44:91:83:19:d3:9b:
db:69:ab:fc:72:b6:03:30:60:ec:5a:5e:28:02:26:a5:6f:d8:
d1:94:34:35:24:15:3c:6d:eb:38:65:dd:82:50:9f:50:b3:3f:
de:5e:70:db:54:b5:ab:01:90:2e:c9:b1:e4:4b:de:db:d9:98:
5c:3f:b6:d4:74:06:42:0b:be:7f:93:62:a7:e8:57:7c:62:08:
43:f7:2e:50:dd:25:7d:0c:2f:c7:bb:c2:0c:a4:06:25:3f:eb:
1a:4d:f8:8d:44:d9:3e:1b:6c:dd:0c:eb:76:63:a8:e3:ea:47:
23:3b:58:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:42:49 2025 by rpki-client