Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/wM9AJqsyZ5HxykDxZNxdOWuX0Q4.roa
File: wM9AJqsyZ5HxykDxZNxdOWuX0Q4.roa (raw, json)
Hash identifier: gFxq9ETUyMPkzj0p0aPzzl34i9ozUX6SFDw+JI4WMhA=
Subject key identifier: C0:CF:40:26:AB:32:67:91:F1:CA:40:F1:64:DC:5D:39:6B:97:D1:0E
Certificate issuer: /CN=b7a670e51c96419fc52028b12e45655ef914ddbb
Certificate serial: 0194266BA79608A553C483FBF2E144BEEBDE
Authority key identifier: B7:A6:70:E5:1C:96:41:9F:C5:20:28:B1:2E:45:65:5E:F9:14:DD:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/wM9AJqsyZ5HxykDxZNxdOWuX0Q4.roa
Signing time: Thu 02 Jan 2025 09:49:36 +0000
ROA not before: Thu 02 Jan 2025 09:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39650
IP address blocks: 185.66.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Feb 2025 22:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a7:96:08:a5:53:c4:83:fb:f2:e1:44:be:eb:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a670e51c96419fc52028b12e45655ef914ddbb
Validity
Not Before: Jan 2 09:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0cf4026ab326791f1ca40f164dc5d396b97d10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1c:73:f9:46:58:aa:7d:8c:8e:90:68:47:2a:
c5:a3:86:a2:1f:dc:cd:42:a0:9b:13:5a:d6:ce:33:
2a:13:5b:df:1a:13:94:68:12:41:52:10:fd:3b:b0:
f1:0b:92:dc:76:1d:22:d5:83:06:62:d6:04:19:a6:
7d:28:09:12:b4:87:ed:4a:ad:9d:65:bc:30:e0:0f:
b9:06:c8:21:c9:0b:51:f8:36:e0:32:4c:f5:bf:39:
d2:2a:56:9d:7f:e6:69:b8:cc:e1:bd:29:d4:63:8c:
de:bc:c8:cf:a4:90:b7:49:aa:34:f9:f6:9d:25:57:
58:61:ff:3e:1b:79:e2:d6:ba:fa:b1:a1:d9:bf:76:
74:19:10:8b:56:45:21:a8:ce:f8:7b:62:e3:2e:fe:
75:52:55:c0:76:93:16:ad:f3:b0:be:cc:78:79:55:
d3:12:d5:31:fe:00:29:5b:0b:99:d4:00:45:dd:bc:
ed:ad:c0:a7:1e:cb:e3:58:eb:23:6c:d8:51:54:e8:
42:48:e6:24:35:fa:14:86:bc:31:58:c3:10:f9:bf:
39:0b:74:6f:56:b7:0a:83:f3:b0:c3:38:e4:f7:8a:
eb:ea:81:88:2c:81:d4:1d:63:3d:a5:a3:cf:00:60:
0d:20:b6:c1:1d:fd:18:f2:02:5d:47:44:42:cb:16:
6e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CF:40:26:AB:32:67:91:F1:CA:40:F1:64:DC:5D:39:6B:97:D1:0E
X509v3 Authority Key Identifier:
keyid:B7:A6:70:E5:1C:96:41:9F:C5:20:28:B1:2E:45:65:5E:F9:14:DD:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/wM9AJqsyZ5HxykDxZNxdOWuX0Q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.226.0/24
Signature Algorithm: sha256WithRSAEncryption
19:34:d0:c3:87:5f:6c:70:00:ef:cb:17:11:d3:d8:0f:df:ef:
78:be:ea:aa:3e:10:21:6e:a7:73:eb:55:07:67:40:20:62:15:
90:4c:e5:3a:e8:8f:b7:5b:aa:27:bd:74:5c:1e:11:d8:02:75:
32:07:c0:25:a1:1c:ea:a2:d9:e0:f1:2f:4d:7a:ee:09:1c:bb:
e0:b2:f7:ac:8b:41:7f:02:ca:30:6f:bb:11:22:b7:2e:10:3c:
35:cf:4c:06:2b:e1:d2:de:b4:cb:9b:ed:e1:a7:0a:ba:62:87:
dd:92:6e:3e:ea:b8:d4:6e:a5:c3:9b:a8:01:45:f1:57:48:be:
26:0e:0d:2c:88:16:dd:9f:14:d9:d8:4e:bd:54:ce:e3:57:d6:
56:95:87:5e:7c:57:de:00:4e:d6:be:00:08:7f:b2:a7:02:18:
25:9d:4d:9a:4a:e1:a3:c4:e4:7b:c0:16:cf:3c:5b:be:dc:78:
de:0e:64:5e:60:a6:90:d3:9e:fd:3f:a2:d4:6b:db:2a:b2:d4:
13:64:36:79:1e:70:d3:17:30:a1:39:7f:d7:b5:7c:a3:94:7d:
1e:f3:4f:e0:01:6f:a0:fa:8a:65:81:27:3f:06:27:3d:be:61:
6a:11:16:0a:f4:86:42:31:16:b4:b3:ab:35:82:27:65:f0:a1:
e5:48:b8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:02:20 2025 by rpki-client