Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/Ri6XhjkTEmlBmgzQz9-0oHPZxT8.roa
File: Ri6XhjkTEmlBmgzQz9-0oHPZxT8.roa (raw, json)
Hash identifier: bdpElEDrd6MRocQZwuVa2H0SG1k60ltZXTJKUlqb9Ko=
Subject key identifier: 46:2E:97:86:39:13:12:69:41:9A:0C:D0:CF:DF:B4:A0:73:D9:C5:3F
Certificate issuer: /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Certificate serial: 0191718144430ECDAB6B916EC68529D5CDD6
Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/Ri6XhjkTEmlBmgzQz9-0oHPZxT8.roa
Signing time: Tue 20 Aug 2024 20:36:22 +0000
ROA not before: Tue 20 Aug 2024 20:36:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30893
IP address blocks: 185.84.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 08:51:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:71:81:44:43:0e:cd:ab:6b:91:6e:c6:85:29:d5:cd:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Validity
Not Before: Aug 20 20:36:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=462e978639131269419a0cd0cfdfb4a073d9c53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2b:ba:63:4b:99:4a:03:b6:b6:0c:66:79:ee:
da:28:92:b3:8d:8c:64:fe:e8:c8:d3:4b:72:42:c8:
b0:05:f1:0b:c7:43:1c:36:ea:c0:76:10:21:e3:17:
1a:ae:24:32:09:1b:bc:cb:c6:2c:2f:c7:58:33:e5:
54:90:ed:7e:6c:2c:72:2d:50:8c:d7:a7:cd:1f:25:
93:90:71:5b:9d:f8:b7:d6:7b:96:c8:6e:0e:c1:51:
9e:58:8e:8c:54:47:43:34:db:5f:dd:12:f8:92:3e:
db:9b:a5:38:d1:e5:b0:39:8b:48:96:6e:31:86:3a:
41:7e:74:9f:a4:48:61:e5:3a:45:b5:5d:77:09:34:
dd:e4:74:37:20:65:99:06:d5:37:79:1c:b1:d8:75:
e0:73:96:52:68:06:aa:85:27:92:e0:be:d4:d7:18:
ed:9d:b4:ec:f1:af:c2:b1:af:e1:67:62:13:79:33:
68:64:70:d1:96:32:ba:8f:98:54:6b:8c:c6:06:c7:
53:e5:8f:f0:70:45:a4:e9:3f:c5:67:ab:e7:92:3a:
9e:77:0f:2a:5e:a8:6e:20:7f:57:ab:88:97:c3:a1:
b2:98:f9:95:03:2e:39:41:eb:3c:ee:27:25:a8:8b:
03:91:5a:9d:09:99:29:0b:48:b5:1f:6a:42:6e:b0:
b9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2E:97:86:39:13:12:69:41:9A:0C:D0:CF:DF:B4:A0:73:D9:C5:3F
X509v3 Authority Key Identifier:
keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/Ri6XhjkTEmlBmgzQz9-0oHPZxT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.241.0/24
Signature Algorithm: sha256WithRSAEncryption
45:d6:54:c3:2f:ac:0d:c8:13:41:d4:c6:e7:d1:ff:44:9a:45:
ad:8d:d6:7d:41:4e:63:4e:57:fb:c3:4b:17:1a:a4:e1:78:23:
48:d4:0b:0e:3d:b2:5d:3d:fb:6a:c7:52:34:c7:31:bd:55:4d:
d5:d8:23:16:29:a6:6b:f7:87:d3:d5:f0:71:79:1b:de:62:df:
58:b8:bb:d5:63:0d:06:f3:12:2a:57:28:97:e5:26:a5:36:2a:
ad:55:4d:ac:bd:36:bf:08:59:e5:3d:23:7a:9b:7a:e8:18:ea:
e8:b7:d5:c5:a3:d7:7f:6c:b5:ad:0c:5f:ba:fa:72:11:45:26:
15:6d:b4:78:6e:8b:33:c3:59:bb:5f:08:80:01:0f:8d:2b:fe:
01:bd:30:c9:5d:f3:21:71:eb:7e:23:e6:2a:72:cb:ec:ba:25:
c3:fe:cc:bf:b0:22:93:68:53:c9:87:58:7b:83:e6:c0:78:bd:
53:c6:0d:dc:af:70:cc:93:4e:33:d9:c1:6b:d3:83:b4:ac:82:
6d:23:e4:82:b2:d5:5d:97:84:07:3e:d7:4b:4f:78:f1:23:be:
5d:63:89:df:d4:77:dc:de:69:2f:8a:62:ec:32:af:e9:95:4e:
61:d1:cb:19:5f:8e:52:b4:a9:5b:c8:da:8e:15:06:cd:01:c2:
4a:e8:e3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:16:00 2025 by rpki-client