Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/Wh8yLGiV1ZWRHf-iqTUsVV_Uno4.roa
File: Wh8yLGiV1ZWRHf-iqTUsVV_Uno4.roa (raw, json)
Hash identifier: 9kGP+K9vIEqlA7GcDLQuImco+J/Id2yOfCzBBQifQGo=
Subject key identifier: 5A:1F:32:2C:68:95:D5:95:91:1D:FF:A2:A9:35:2C:55:5F:D4:9E:8E
Certificate issuer: /CN=69720a9103e1ae00cc788c5decfe0948c84bcd1b
Certificate serial: 018CC86F5C9E779BE4985C22831FCA9BF5EE
Authority key identifier: 69:72:0A:91:03:E1:AE:00:CC:78:8C:5D:EC:FE:09:48:C8:4B:CD:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/Wh8yLGiV1ZWRHf-iqTUsVV_Uno4.roa
Signing time: Tue 02 Jan 2024 04:29:50 +0000
ROA not before: Tue 02 Jan 2024 04:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203908
IP address blocks: 185.150.240.0/22 maxlen: 24
2a03:ad60::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:5c:9e:77:9b:e4:98:5c:22:83:1f:ca:9b:f5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69720a9103e1ae00cc788c5decfe0948c84bcd1b
Validity
Not Before: Jan 2 04:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a1f322c6895d595911dffa2a9352c555fd49e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:92:2d:71:39:73:f5:f1:a5:66:72:bc:36:50:
1c:6f:f4:59:f6:ca:34:fd:b0:83:b3:a0:45:ea:9d:
69:f4:a0:e4:74:63:64:f0:2d:9d:6e:ab:39:ee:25:
c4:6d:27:f9:7c:48:12:f0:0f:1d:e8:15:cc:34:85:
d1:3d:06:19:78:75:bd:44:2f:72:a4:b6:b8:64:38:
b5:9a:34:b9:01:ec:1b:7e:9e:8c:e2:aa:63:8f:f1:
61:c2:e4:fb:db:c4:0f:6a:a4:b6:b9:aa:e0:c5:de:
86:7c:63:ab:8a:bd:11:49:63:c1:1a:cc:30:9b:d6:
d9:a3:2a:dd:ec:3f:ad:e7:8e:64:72:96:08:9c:3a:
0a:2d:8b:e7:d1:5d:3d:4a:e4:ff:c3:8a:11:5d:a9:
cd:f6:08:97:43:c5:49:fd:9a:56:e1:6c:2d:e7:04:
57:a9:f6:12:4c:16:23:ae:2a:4d:01:b6:b9:3b:cb:
10:d4:fe:1a:70:59:80:4a:2f:fc:27:9d:ff:13:6d:
ba:1d:fa:09:cd:ca:1f:b6:2e:59:96:aa:00:73:bb:
e6:36:2c:9d:82:21:cd:ee:9c:ac:e1:b1:82:1d:d0:
6e:5b:44:c7:e9:02:f9:58:e7:18:8c:77:cf:8e:5e:
35:66:f2:11:da:52:92:b0:4d:75:12:62:c2:39:03:
6a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1F:32:2C:68:95:D5:95:91:1D:FF:A2:A9:35:2C:55:5F:D4:9E:8E
X509v3 Authority Key Identifier:
keyid:69:72:0A:91:03:E1:AE:00:CC:78:8C:5D:EC:FE:09:48:C8:4B:CD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/Wh8yLGiV1ZWRHf-iqTUsVV_Uno4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.240.0/22
IPv6:
2a03:ad60::/32
Signature Algorithm: sha256WithRSAEncryption
a7:14:2f:7f:78:cf:6a:d1:81:bf:c2:73:9b:3c:c7:0d:fe:61:
90:ad:59:2f:50:d7:e2:88:04:22:34:32:f8:6e:39:0e:85:fa:
5d:cb:8c:97:f5:f7:66:51:ab:5d:b6:71:d0:0e:df:03:f5:e3:
13:06:fc:02:aa:15:39:ce:72:f9:aa:e8:b2:16:86:5b:ed:08:
8b:97:83:0d:74:0a:9c:9b:58:dd:f8:76:eb:76:f5:31:ca:48:
3c:72:d4:bb:c6:26:5a:df:65:5a:d9:47:7c:e9:27:d8:a7:0a:
40:84:74:2e:5b:f0:ff:a2:ea:48:21:98:a9:73:90:1e:81:39:
20:7e:d5:a3:28:19:9c:25:01:fa:c2:16:30:c6:66:8a:28:b2:
0d:d6:7a:ba:11:b6:f7:7e:68:ce:c6:1a:75:18:3d:6a:e8:bc:
1f:98:c1:a6:b3:28:09:eb:7c:61:12:14:dd:07:4c:b7:5e:51:
39:33:a9:f5:cf:a9:bc:ea:5b:a8:ad:d5:45:77:ff:59:0e:19:
5e:61:a6:60:ca:37:45:75:7e:3f:14:e8:45:76:ae:c9:b5:6d:
1c:12:85:db:79:85:db:14:35:53:58:73:ee:23:93:46:c8:0b:
01:18:db:67:26:22:4e:af:07:40:db:19:22:8f:05:aa:42:63:
bd:1e:92:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:40:33 2025 by rpki-client