Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/vP8tsa2NBhzhjPXtMmkyYzGXJio.roa
File: vP8tsa2NBhzhjPXtMmkyYzGXJio.roa (raw, json)
Hash identifier: o9F2QGvrVX1U/Nv3P0nlpeVCzrdy5dEFSSO3t+UogqM=
Subject key identifier: BC:FF:2D:B1:AD:8D:06:1C:E1:8C:F5:ED:32:69:32:63:31:97:26:2A
Certificate issuer: /CN=b7a670e51c96419fc52028b12e45655ef914ddbb
Certificate serial: 019494FF4B626716935226F1404ED0F0834F
Authority key identifier: B7:A6:70:E5:1C:96:41:9F:C5:20:28:B1:2E:45:65:5E:F9:14:DD:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/vP8tsa2NBhzhjPXtMmkyYzGXJio.roa
Signing time: Thu 23 Jan 2025 21:09:06 +0000
ROA not before: Thu 23 Jan 2025 21:09:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59914
IP address blocks: 185.66.224.0/23 maxlen: 23
185.66.224.0/24 maxlen: 24
185.66.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Feb 2025 22:38:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:94:ff:4b:62:67:16:93:52:26:f1:40:4e:d0:f0:83:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a670e51c96419fc52028b12e45655ef914ddbb
Validity
Not Before: Jan 23 21:09:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcff2db1ad8d061ce18cf5ed326932633197262a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:23:33:99:45:d9:28:94:f1:ff:6c:75:99:
32:09:75:1c:96:b4:cb:5b:cc:58:5c:7d:be:9f:72:
92:d8:74:e1:9a:06:0d:7b:54:20:d4:0e:56:55:d8:
0d:61:d1:37:7a:98:ff:c9:19:0f:10:b0:0e:75:f5:
1e:73:5f:4f:1f:81:77:71:fb:ce:0e:c3:a2:66:70:
90:7b:0b:6f:eb:ef:77:ab:3d:c5:55:f2:35:06:a2:
50:b7:c2:b5:b8:a0:b7:af:46:07:c0:89:98:37:18:
58:92:30:22:0c:df:88:8e:cb:7b:9d:d7:e5:6c:af:
37:f2:69:38:d4:d7:80:c7:2a:77:24:0b:78:e0:b5:
dd:49:24:eb:e9:54:21:35:48:20:e4:e5:17:ad:dd:
d0:5f:e0:b8:37:82:f8:8e:94:37:24:19:63:a5:62:
f2:51:07:f4:5b:b5:c4:5e:66:9d:02:ed:ed:84:e7:
72:2c:e6:f4:eb:94:0f:2e:cb:5c:54:d4:10:ad:28:
cd:30:28:e5:c3:be:d3:26:8f:7e:91:81:26:0d:22:
d1:6a:83:e6:82:96:77:0d:20:fb:b0:cc:3b:97:ef:
a2:83:a9:f8:d6:05:71:df:53:38:49:d6:78:62:06:
2a:4f:3a:06:1d:1a:8b:8d:c0:b9:a6:33:35:7d:07:
df:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FF:2D:B1:AD:8D:06:1C:E1:8C:F5:ED:32:69:32:63:31:97:26:2A
X509v3 Authority Key Identifier:
keyid:B7:A6:70:E5:1C:96:41:9F:C5:20:28:B1:2E:45:65:5E:F9:14:DD:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/vP8tsa2NBhzhjPXtMmkyYzGXJio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.224.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:0e:4f:ee:65:f8:d1:c5:e0:eb:4f:ed:67:3e:96:72:0a:f1:
08:43:9d:af:9d:71:97:74:bd:56:50:62:73:5d:46:22:0a:0b:
56:db:82:f8:d9:56:66:21:e2:3d:26:63:1a:f1:1d:3d:10:ab:
85:27:de:38:d7:a6:98:aa:11:47:63:16:8f:f0:16:45:ee:ad:
a9:d6:1c:80:05:de:e2:5d:c6:7b:80:61:e5:fa:a2:e0:68:be:
1c:ff:4c:bd:13:84:88:d5:b6:c8:13:2f:de:14:4b:b6:fb:27:
d3:56:7c:1c:8d:64:b2:cc:14:f3:94:2e:1f:f6:ad:47:a3:17:
29:90:d2:26:d2:58:d6:cc:f6:0f:c3:1a:db:d5:6e:cc:69:22:
9d:22:f9:b6:79:ca:e1:d9:89:23:b7:ab:f4:21:e8:e4:d5:cd:
b3:12:8c:2f:13:be:36:6e:54:e3:89:7c:b5:c7:8a:a5:f4:2c:
97:ed:3b:ee:16:1e:43:48:56:d0:60:7a:54:74:eb:d5:aa:d3:
cb:8c:30:06:f6:8a:94:e8:17:77:96:c4:1c:c2:e1:c8:3e:66:
6f:3b:df:21:79:09:c8:0e:0f:f6:32:d9:4d:5b:c7:46:09:87:
0c:76:6e:9e:c8:6b:76:44:78:de:f7:19:22:15:cb:35:98:5e:
0e:8e:4c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:45:00 2025 by rpki-client