Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/RvYuESsPIKybSO251rfJ9bIhExM.roa
File: RvYuESsPIKybSO251rfJ9bIhExM.roa (raw, json)
Hash identifier: jcsepeS2oZVN8c8j+/Aa7Z0Szc/p5Ue3By+Bzjhly00=
Subject key identifier: 46:F6:2E:11:2B:0F:20:AC:9B:48:ED:B9:D6:B7:C9:F5:B2:21:13:13
Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial: 0194258E8C75357CD8B6FE2A0BCB236DB9E4
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/RvYuESsPIKybSO251rfJ9bIhExM.roa
Signing time: Thu 02 Jan 2025 05:48:06 +0000
ROA not before: Thu 02 Jan 2025 05:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60341
IP address blocks: 185.32.232.0/22 maxlen: 24
185.45.116.0/22 maxlen: 24
185.47.20.0/22 maxlen: 24
185.50.92.0/22 maxlen: 24
2a00:c660::/29 maxlen: 29
2a00:c660::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 25 Feb 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:8c:75:35:7c:d8:b6:fe:2a:0b:cb:23:6d:b9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
Validity
Not Before: Jan 2 05:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46f62e112b0f20ac9b48edb9d6b7c9f5b2211313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:85:0f:7f:80:12:67:ec:b6:32:4c:1c:bc:c5:
e4:86:1e:23:6e:c6:69:33:be:9f:26:42:bd:ce:97:
98:d0:91:bf:97:e6:55:9a:d0:8e:ed:33:9b:a1:c5:
70:95:d8:ea:89:fe:83:f9:6d:24:62:f1:91:f8:3c:
79:64:e6:9d:b2:b4:41:54:19:9b:14:fb:ef:24:ed:
82:77:7d:e8:3e:0c:de:d6:54:f3:55:c8:da:17:54:
98:df:6b:82:e4:e6:5f:28:3d:47:ad:23:61:7b:e4:
b4:b3:8e:81:0d:ef:71:ef:a4:76:61:10:6d:7a:9e:
53:95:a2:22:e1:a6:0a:e5:8c:36:ba:d4:2f:c5:9e:
05:25:0d:1d:f0:c9:4c:31:5d:9b:8d:eb:6b:c3:14:
22:58:5e:85:46:3d:e9:94:73:eb:08:1e:9e:8a:25:
4a:a1:1e:dd:12:09:cb:17:f2:ea:e9:f4:f6:e2:26:
23:e0:9d:16:e6:2b:ee:4e:7c:ae:e0:60:e1:82:0c:
84:20:06:af:50:bc:85:c1:97:73:36:37:e5:a1:1a:
99:e7:f3:fb:0b:75:73:42:3f:09:47:37:c5:39:7a:
a6:0b:4f:d6:ab:67:06:c3:bb:59:89:ef:3c:83:a2:
c0:40:d3:4c:2f:3c:3a:43:cf:ee:fa:1c:dc:76:51:
23:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F6:2E:11:2B:0F:20:AC:9B:48:ED:B9:D6:B7:C9:F5:B2:21:13:13
X509v3 Authority Key Identifier:
keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/RvYuESsPIKybSO251rfJ9bIhExM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.232.0/22
185.45.116.0/22
185.47.20.0/22
185.50.92.0/22
IPv6:
2a00:c660::/29
Signature Algorithm: sha256WithRSAEncryption
ce:d3:95:11:d9:1e:7e:43:9e:79:44:7d:38:1f:02:59:a7:26:
1b:c7:33:ff:a8:fd:57:1a:12:a5:6b:9b:99:93:71:62:9d:e6:
1a:e7:fd:9b:70:23:75:55:90:5f:af:11:ea:bb:30:8a:66:ee:
aa:3a:60:ce:fc:18:99:52:47:7e:bc:1e:28:bd:24:e4:e9:7b:
0b:8b:46:d8:05:b9:5b:40:25:f6:72:bc:d6:13:40:16:07:6a:
c1:e0:50:66:c8:cd:95:29:63:4b:a2:e0:34:51:1e:a1:bc:7e:
75:c1:4b:32:66:55:3c:f0:b3:76:1c:0a:c5:1e:11:20:16:4c:
fd:9d:11:f9:9a:5f:d0:a6:6b:ba:83:bd:c5:78:a7:b2:99:b5:
43:98:e7:55:3a:06:67:d4:05:58:cf:65:07:c4:91:2d:72:94:
eb:8e:cc:8d:7a:7c:ea:76:e6:c4:16:1b:cf:61:0d:0b:da:3e:
66:49:6a:5a:74:8e:97:72:f5:1f:44:61:5d:ba:07:1d:62:ca:
41:d1:ba:e9:1d:30:58:c9:4a:c3:eb:09:54:bb:f7:c7:79:00:
b8:b6:78:8a:b9:77:d2:50:35:36:e4:f6:23:9f:39:f9:9a:98:
77:90:d3:84:c0:88:d5:e9:02:cc:df:dc:15:15:a7:93:09:ae:
ef:30:7a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:11:03 2025 by rpki-client