Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/bgmw9gVxfcWZ9ug-oakL9-yMVHM.roa
File: bgmw9gVxfcWZ9ug-oakL9-yMVHM.roa (raw, json)
Hash identifier: dvPeiPv29k+DRHnOjPYTgdpzYycGMXBpc9Wc+FnDGnM=
Subject key identifier: 6E:09:B0:F6:05:71:7D:C5:99:F6:E8:3E:A1:A9:0B:F7:EC:8C:54:73
Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial: 018CC493691E85D8256E64F86275AF9C6CD5
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/bgmw9gVxfcWZ9ug-oakL9-yMVHM.roa
Signing time: Mon 01 Jan 2024 10:30:44 +0000
ROA not before: Mon 01 Jan 2024 10:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203063
IP address blocks: 185.145.0.0/24 maxlen: 24
185.145.3.0/24 maxlen: 24
185.145.2.0/24 maxlen: 24
185.145.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 09:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:69:1e:85:d8:25:6e:64:f8:62:75:af:9c:6c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
Validity
Not Before: Jan 1 10:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e09b0f605717dc599f6e83ea1a90bf7ec8c5473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5d:bf:10:c2:91:21:11:5c:37:55:30:8c:70:
82:45:3a:ab:db:dc:36:ba:f0:c7:7a:60:db:6d:5d:
45:2e:99:f2:2b:fa:4e:5b:6c:91:89:1c:f5:49:e7:
8e:62:cc:00:f0:2b:9b:ed:a1:b0:a8:c1:58:d1:d3:
eb:c3:e5:80:58:3e:3f:80:f5:a5:82:31:8e:77:cd:
c4:57:14:1f:69:26:8c:1a:ac:fa:65:1a:39:4a:ac:
da:98:05:89:17:8f:c6:f8:b8:0b:0c:78:ad:2f:46:
38:b8:a1:1b:81:c4:94:4e:80:5b:e7:29:8c:67:da:
3e:2c:18:1d:50:41:f5:44:fd:2e:bb:4e:58:ee:f0:
cf:83:73:d7:40:2a:b0:3b:9f:72:c2:15:30:38:3c:
62:b6:0e:30:89:37:19:6f:3a:c8:39:5d:8d:63:52:
a2:c2:5b:52:c0:48:56:b1:fa:50:7b:73:19:b7:57:
1a:7d:d7:34:63:6d:ef:48:a9:5e:7c:17:50:9e:d5:
b2:44:6f:ba:50:ef:1c:30:1b:f4:95:79:bb:da:27:
9d:ab:31:d8:e4:23:53:4e:88:e1:05:cf:b2:e6:5b:
44:3b:db:80:44:db:3d:92:b9:01:bb:ac:75:81:e5:
38:56:ee:bb:46:30:0f:88:ea:75:75:31:58:b3:97:
17:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:09:B0:F6:05:71:7D:C5:99:F6:E8:3E:A1:A9:0B:F7:EC:8C:54:73
X509v3 Authority Key Identifier:
keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/bgmw9gVxfcWZ9ug-oakL9-yMVHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.0.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:f7:34:72:ce:3d:58:fb:82:1e:8d:22:c6:36:94:14:11:54:
f6:61:a8:01:07:e0:54:99:b9:85:40:d5:39:07:1b:73:d5:06:
3b:05:64:ed:6d:08:1b:4f:e7:38:51:f8:fa:6f:7a:3f:0d:45:
9c:a8:f3:97:01:fc:c3:bd:a5:8b:96:c5:3d:8d:08:0a:4a:c1:
0f:e3:6c:f7:18:9d:95:3a:b7:50:ab:71:b1:d4:ed:26:64:cb:
f4:c2:84:31:2a:a4:f7:0f:d9:72:ae:ba:09:e2:b6:32:af:b2:
c0:8e:b6:4b:c1:d6:e9:53:79:cc:4b:30:b0:c5:b8:56:d5:54:
9f:55:c6:cd:5f:5b:d4:3d:20:19:9b:07:4e:c5:1b:33:e4:b8:
da:95:e7:ba:4b:b2:7f:56:27:bc:d9:69:9d:fc:d9:75:7f:00:
2f:9c:a1:2d:47:bb:da:94:be:74:71:05:3b:4f:78:54:78:ec:
45:4c:98:4f:65:31:1a:f3:0d:45:f4:dc:16:9d:d7:99:e9:dc:
9c:b4:df:dd:f3:b3:60:4a:c1:98:15:8f:92:6a:9c:3d:33:7b:
09:18:41:77:2f:5d:d0:87:d8:c5:01:b1:cd:1a:fd:6d:9a:e9:
ae:4a:53:18:55:d9:ae:c7:1b:58:02:57:75:d1:7a:1b:d3:67:
24:16:f8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:41 2025 by rpki-client