Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/B6zWJRkQ9JRqnVSRiC0Df7IV3K8.roa
File: B6zWJRkQ9JRqnVSRiC0Df7IV3K8.roa (raw, json)
Hash identifier: i3rXkqgwq/n67DiKJISRuwUzjjLijqzfpun9f2J89Rg=
Subject key identifier: 07:AC:D6:25:19:10:F4:94:6A:9D:54:91:88:2D:03:7F:B2:15:DC:AF
Certificate issuer: /CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Certificate serial: 01939692B957E2E67811340909B2595DAFBA
Authority key identifier: 7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/B6zWJRkQ9JRqnVSRiC0Df7IV3K8.roa
Signing time: Thu 05 Dec 2024 11:26:58 +0000
ROA not before: Thu 05 Dec 2024 11:26:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51786
IP address blocks: 185.117.12.0/24 maxlen: 24
185.117.13.0/24 maxlen: 24
2a06:8280::/44 maxlen: 44
2a06:8280:10::/44 maxlen: 44
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:96:92:b9:57:e2:e6:78:11:34:09:09:b2:59:5d:af:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Validity
Not Before: Dec 5 11:26:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07acd6251910f4946a9d5491882d037fb215dcaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d3:b5:cc:26:1a:38:75:4c:f1:e5:3f:4b:93:
d3:ee:c5:15:71:d4:2b:13:97:2d:43:cf:54:fa:0c:
ff:25:be:7e:10:21:3c:1e:38:18:2e:a3:6d:ef:2c:
b0:f5:f2:a5:c6:9e:40:1a:36:44:7b:1c:6c:34:41:
06:d4:70:1a:7b:80:7a:c0:a6:5d:21:5b:b5:56:05:
6b:37:24:10:d7:44:e1:60:93:75:8f:ac:c5:76:8b:
94:ba:45:85:fe:fa:18:be:8c:52:f4:5d:3f:5a:a5:
1c:87:e6:83:68:a4:09:fb:c7:17:d5:e7:ba:b1:c6:
69:b9:8a:c4:8f:d3:60:e2:cb:fb:fa:93:92:04:88:
7e:47:02:76:21:9a:a9:b1:c8:e1:b5:22:7e:83:01:
03:53:87:a2:e5:03:ab:0c:07:bd:ea:d5:6d:33:32:
00:57:63:54:a3:a2:10:ef:d3:8f:38:5a:72:49:3d:
3b:b5:5c:7f:05:bf:bd:f5:50:18:13:b0:0d:2f:e3:
84:5d:63:86:f1:61:4a:d7:60:a1:3c:05:46:91:a7:
d4:52:b0:55:e8:16:89:db:6d:2a:96:b6:04:28:a9:
00:4f:b4:c7:b3:fe:1c:dd:74:be:bb:56:bc:3f:3b:
aa:fd:e8:1f:4f:93:31:ec:fa:8e:0d:60:1e:1c:82:
4b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AC:D6:25:19:10:F4:94:6A:9D:54:91:88:2D:03:7F:B2:15:DC:AF
X509v3 Authority Key Identifier:
keyid:7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/B6zWJRkQ9JRqnVSRiC0Df7IV3K8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.12.0/23
IPv6:
2a06:8280::/43
Signature Algorithm: sha256WithRSAEncryption
c5:97:f0:6e:d7:fb:b7:21:5d:4b:58:fe:a5:bb:7c:c4:89:ec:
4c:f4:3c:4f:4b:5c:52:a9:47:ac:5e:71:46:c9:2c:d3:a3:eb:
ab:20:cf:c4:93:a6:05:7d:92:f0:36:ca:be:29:d1:e6:22:8f:
a4:56:ec:02:5d:5c:06:66:47:d1:66:04:1a:90:a3:d3:f4:a4:
6a:fc:76:4c:61:05:7f:d2:9f:2a:d4:cf:60:f0:f7:cc:ae:9a:
67:50:bd:02:77:7a:6e:40:96:46:d7:dd:65:07:1e:0e:28:65:
b4:26:1f:53:ab:d7:69:1e:0b:0b:ce:53:de:73:a1:90:49:89:
0f:80:85:bc:46:1f:17:b6:00:65:25:c5:0e:37:cd:4f:2c:4b:
f0:25:e5:b1:ec:29:8a:13:bc:18:c6:57:55:d4:2c:f2:ee:75:
8c:83:19:0f:2d:fb:49:a7:9b:12:e2:bc:c3:ab:d4:b4:f3:b0:
a7:ab:59:13:86:b9:63:b2:55:71:3e:18:ab:29:32:5e:e7:8f:
c4:6d:c8:7f:9d:8c:04:94:2a:5d:9f:3e:f1:19:a6:b4:4d:59:
79:ae:0e:74:d6:d5:1b:e4:2a:16:60:4d:b4:14:f5:49:1e:dd:
df:44:0e:a8:2f:23:b2:3a:a6:dc:77:fc:dd:2c:0b:de:48:05:
c0:b7:b3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:42:59 2025 by rpki-client