Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/a0xWMCRe9JX3lV2Ea6WvyWY061I.roa
File: a0xWMCRe9JX3lV2Ea6WvyWY061I.roa (raw, json)
Hash identifier: 5BiuPxr5sWTYpKC81ZX1KYtJ0b5llFUDz3N+kdK/7Y8=
Subject key identifier: 6B:4C:56:30:24:5E:F4:95:F7:95:5D:84:6B:A5:AF:C9:66:34:EB:52
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 01954D222B7F274988F27FE1C469E74BC018
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/a0xWMCRe9JX3lV2Ea6WvyWY061I.roa
Signing time: Fri 28 Feb 2025 15:17:19 +0000
ROA not before: Fri 28 Feb 2025 15:17:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60672
IP address blocks: 185.137.220.0/24 maxlen: 24
185.137.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Mar 2025 03:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4d:22:2b:7f:27:49:88:f2:7f:e1:c4:69:e7:4b:c0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: Feb 28 15:17:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b4c5630245ef495f7955d846ba5afc96634eb52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:6b:75:3e:09:5a:fc:20:ea:cd:e4:71:93:
84:44:29:a5:92:a1:20:72:9b:7d:9f:2f:59:46:b4:
1b:0b:c0:c2:c0:b2:25:45:3d:e6:c3:ab:59:8b:c8:
f3:37:d8:4d:5a:2f:19:14:dd:d9:dc:0b:83:7a:0a:
49:b4:22:62:1f:4f:7a:55:76:e4:2c:61:a3:8a:f5:
f9:e2:19:19:ee:37:db:2e:be:5b:56:1d:75:32:97:
6c:e7:cc:5d:61:f9:af:0f:bf:76:20:55:61:57:d1:
7f:3c:de:65:cb:ec:b1:ae:cd:ef:d0:51:8d:42:05:
ff:09:48:fd:9f:9d:d9:8d:d6:ed:e1:0c:fc:e0:b4:
ff:f0:e6:be:6b:0c:50:b7:c4:d5:31:c1:3a:a6:ba:
58:70:7d:c7:4f:5e:06:e2:8d:a1:bd:82:c5:38:ea:
50:9a:e5:3b:36:5a:74:28:ec:8d:7f:57:bc:5b:ff:
e0:0f:0d:39:56:2f:df:84:a0:a9:77:ae:b9:22:07:
ae:32:c8:ad:11:7e:16:ad:6d:4e:22:15:c9:a3:aa:
80:46:95:b1:5e:03:49:e3:c4:ee:e8:47:6d:35:10:
a6:5d:d1:0f:f0:19:de:95:17:af:35:42:f0:25:d7:
ec:d4:42:fe:97:f7:04:f9:a2:50:c5:33:f5:50:9e:
2f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4C:56:30:24:5E:F4:95:F7:95:5D:84:6B:A5:AF:C9:66:34:EB:52
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/a0xWMCRe9JX3lV2Ea6WvyWY061I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.220.0/24
185.137.222.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:86:a0:78:01:c5:ce:23:ab:16:00:1e:3c:1d:e5:7a:ca:aa:
f2:94:35:e3:2d:57:c6:80:8e:9b:38:fa:f7:50:e6:a7:5e:e1:
6a:57:94:1c:fb:33:35:9e:45:73:ca:4f:8c:d4:e9:96:37:bd:
55:e4:d8:ad:28:6d:3c:10:59:d2:3f:e1:a8:e4:77:90:57:6f:
82:1a:32:19:17:1c:fc:f0:be:f2:7b:8e:7c:7d:37:99:a7:27:
72:e3:d2:ca:1c:9b:86:5f:63:65:f3:39:7b:2d:8e:0e:1e:f0:
c5:9e:57:d8:d5:2b:ab:63:f1:6b:31:36:90:a3:5e:3c:9a:f5:
93:52:ef:00:e5:7c:0f:99:7d:13:15:c9:25:0f:32:d7:1f:2d:
6a:a7:15:b4:67:4a:26:2d:d3:cf:e8:b8:e8:bc:a9:3a:43:12:
f4:5f:0e:f3:91:f0:1b:cb:0f:52:26:a3:4a:28:ec:29:e3:20:
69:3e:92:62:49:00:7f:90:70:bd:cf:32:6d:de:96:5a:fe:37:
2e:d7:72:15:de:d0:9b:1b:48:ab:0a:7d:de:5b:22:cd:e0:94:
e8:e1:01:fe:46:bc:b8:dd:50:88:2e:64:71:9f:80:26:4e:84:
e2:ef:82:42:9d:80:fd:b4:d6:3f:7f:5f:e4:36:9d:3e:fd:de:
c1:92:02:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:47:09 2025 by rpki-client