Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/vwS407rgk4mTtqxJ3Wsb2NZYkS8.roa
File: vwS407rgk4mTtqxJ3Wsb2NZYkS8.roa (raw, json)
Hash identifier: YNtFwzEzetSBzEDppTjx17TTaq6el8+eLC5sCRF+AVc=
Subject key identifier: BF:04:B8:D3:BA:E0:93:89:93:B6:AC:49:DD:6B:1B:D8:D6:58:91:2F
Certificate issuer: /CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Certificate serial: 018CC501078E53FEBCD3DFEC472E92E1C217
Authority key identifier: 85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/vwS407rgk4mTtqxJ3Wsb2NZYkS8.roa
Signing time: Mon 01 Jan 2024 12:30:28 +0000
ROA not before: Mon 01 Jan 2024 12:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208332
IP address blocks: 185.135.240.0/22 maxlen: 22
185.135.240.0/24 maxlen: 24
185.135.242.0/24 maxlen: 24
185.135.243.0/24 maxlen: 24
185.135.241.0/24 maxlen: 24
2a06:f700::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:07:8e:53:fe:bc:d3:df:ec:47:2e:92:e1:c2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Validity
Not Before: Jan 1 12:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf04b8d3bae0938993b6ac49dd6b1bd8d658912f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:89:35:04:5a:7a:77:27:ea:5d:f5:20:e5:7b:
94:23:b7:e7:2e:48:79:1a:89:6d:b3:1c:1c:e0:63:
65:d8:7f:71:ce:61:ce:d9:6c:57:5f:d8:1c:4e:dd:
e4:3f:5d:35:d0:02:e6:19:ac:a7:26:90:38:37:6b:
23:7c:6a:af:54:1d:be:bb:cd:c6:7c:68:5c:82:ad:
5a:0a:67:88:f2:fe:af:ba:d2:2d:d7:13:d3:23:40:
7c:1f:d1:fd:f5:d6:a5:59:19:b4:99:db:f4:85:e0:
98:81:10:8c:13:43:c2:55:f1:a7:90:44:27:45:f0:
85:c9:d1:6c:46:4a:8c:2b:c4:b8:e0:51:45:81:2b:
07:3e:e8:a0:9b:8b:bd:10:6a:ba:1a:80:8b:a0:3f:
d9:e1:e4:ba:b9:0f:c7:cc:ad:c4:cc:fd:5e:d0:d4:
b7:e9:c1:e6:c8:7b:c6:d2:8e:9c:19:4a:d8:a9:f0:
fc:38:13:3a:fc:78:99:87:d1:b6:e1:34:74:53:1b:
97:0e:7c:0e:36:a5:4e:c2:ab:47:b7:07:63:5a:84:
5d:ec:a5:f1:7d:e6:86:99:9c:ee:ba:10:81:e6:96:
e5:d7:18:ee:ec:83:15:7d:52:62:cd:47:b6:9c:45:
1e:57:35:be:16:f1:27:7c:19:b7:f5:47:53:cb:41:
5c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:04:B8:D3:BA:E0:93:89:93:B6:AC:49:DD:6B:1B:D8:D6:58:91:2F
X509v3 Authority Key Identifier:
keyid:85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/vwS407rgk4mTtqxJ3Wsb2NZYkS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.240.0/22
IPv6:
2a06:f700::/29
Signature Algorithm: sha256WithRSAEncryption
17:1f:ff:db:9c:60:da:2e:62:eb:8d:a4:a5:61:44:e3:70:fb:
eb:72:4f:8b:80:73:7d:fc:9c:2c:d7:21:04:6b:6d:d1:7b:cd:
9f:fc:5a:f0:30:ad:89:81:d8:08:31:72:9b:97:42:e4:a4:9c:
b6:8c:c5:f6:8f:22:6e:d6:96:6c:4f:e0:62:d3:ca:4a:7c:c9:
7b:70:56:10:ca:6b:1c:b8:5f:0d:bc:e7:46:17:2f:bc:4c:16:
e2:38:fd:9b:50:a3:cb:1a:1b:fb:13:a7:46:7c:c5:26:b5:6e:
33:94:8d:7b:ec:88:51:e7:9e:51:11:55:cc:f7:bb:9e:e7:09:
9a:bb:29:98:50:9b:39:be:75:5a:97:9b:47:40:30:d8:67:cc:
57:b5:8b:ef:77:8f:73:4d:4c:c6:a3:b7:8a:1b:58:3d:e6:1f:
59:ed:be:df:98:4d:7d:29:ee:41:a7:39:85:e1:c6:bf:42:51:
8c:e6:a0:1e:59:ac:f8:62:56:6e:74:fe:2f:ab:12:15:2d:4f:
0d:be:b3:00:94:2d:0f:77:a3:e7:8d:c9:a4:f5:a7:1c:34:38:
9d:de:8f:4c:85:20:5b:c1:fb:0a:16:06:8d:c5:8a:06:ec:ca:
68:55:b7:c9:c9:45:13:b3:51:b6:4b:e6:e3:06:d6:2a:6c:78:
22:d8:85:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:35:49 2025 by rpki-client