Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/F2sWwBEfhVwEkOWjxwSpInqNk4E.roa
File: F2sWwBEfhVwEkOWjxwSpInqNk4E.roa (raw, json)
Hash identifier: s1Fp8pOpwxQujjqkMOIPskJfh4SxqSBpf9o7ombRXLE=
Subject key identifier: 17:6B:16:C0:11:1F:85:5C:04:90:E5:A3:C7:04:A9:22:7A:8D:93:81
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 01952E04D2713B0FB6F3DB74074559B59DB4
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/F2sWwBEfhVwEkOWjxwSpInqNk4E.roa
Signing time: Sat 22 Feb 2025 14:17:02 +0000
ROA not before: Sat 22 Feb 2025 14:17:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48693
IP address blocks: 185.248.168.0/24 maxlen: 24
185.248.169.0/24 maxlen: 24
185.248.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 14:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:2e:04:d2:71:3b:0f:b6:f3:db:74:07:45:59:b5:9d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Feb 22 14:17:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=176b16c0111f855c0490e5a3c704a9227a8d9381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:56:b5:c3:e8:26:98:d4:e9:6b:e5:89:47:c7:
fd:3d:3a:50:bc:2d:d7:56:a3:78:ab:55:1a:e4:49:
77:ba:94:f6:01:ca:55:d6:fc:6e:fa:9d:d2:33:93:
16:f1:97:7e:d9:b7:58:db:03:30:c8:dd:d2:d4:72:
8a:6a:33:6f:7a:a8:c4:9b:ae:cd:e8:c6:3c:f2:0d:
da:0b:ec:6d:b1:eb:6c:12:83:7f:26:5b:dd:a0:bb:
d0:43:65:c3:61:76:98:f8:71:91:58:42:a5:d6:30:
33:3f:45:ce:46:ac:d4:cb:8a:c4:c5:98:b2:b4:9f:
13:9a:20:ce:70:6b:7e:06:f0:89:c0:6e:a1:08:ef:
2d:48:97:13:5b:3f:1e:55:82:b6:d2:00:29:18:65:
b7:28:cd:86:62:db:43:0a:81:49:9f:c4:87:15:33:
27:16:a8:4d:e3:1b:c3:6d:3e:6a:9c:17:aa:96:1c:
b9:ec:54:d0:09:f3:c5:dd:42:bf:91:df:cf:f4:eb:
cb:33:ed:59:61:fd:9e:79:8e:ee:c7:8f:eb:74:43:
dd:cc:62:a6:2d:39:da:42:74:71:9b:ca:72:0f:a8:
9b:58:d2:3f:02:66:f8:05:5f:16:64:8c:be:a7:50:
48:ea:cd:9d:3b:89:a6:86:e1:bc:2d:1e:65:07:4d:
57:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6B:16:C0:11:1F:85:5C:04:90:E5:A3:C7:04:A9:22:7A:8D:93:81
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/F2sWwBEfhVwEkOWjxwSpInqNk4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.168.0-185.248.170.255
Signature Algorithm: sha256WithRSAEncryption
a9:41:b0:84:5c:78:b9:e8:00:d5:c3:bc:29:16:ef:eb:c6:dd:
96:07:b0:cc:cb:71:d9:f7:c3:f5:ee:0e:a4:53:6e:fb:c3:40:
6a:2f:1f:f5:e8:30:e8:af:7e:54:3b:76:4c:0c:00:61:75:d0:
dd:b2:a8:1b:6d:f7:c2:29:78:5d:e6:b2:4f:34:d2:64:35:fb:
00:6c:e9:8e:5a:71:01:98:9c:18:fe:78:7f:1a:66:d4:4f:a8:
5b:0f:15:5c:e7:a2:c8:c0:b4:95:25:e6:3f:87:ca:19:87:47:
f5:8f:d7:07:a0:50:00:31:86:0a:df:1b:3c:73:ec:a7:9e:41:
f6:4c:15:c5:3c:45:49:b3:68:8f:8a:6f:46:77:8e:86:fd:a8:
de:f9:76:19:5b:29:11:32:28:4a:78:88:63:49:a2:94:fb:de:
f4:3a:a3:b3:87:63:44:b5:07:91:09:f5:ab:85:39:da:2e:b5:
7d:2a:4d:5a:c9:fc:68:b0:7a:5d:3f:7d:e9:3c:a9:19:60:b7:
c0:65:82:86:ac:aa:28:32:33:41:3e:eb:23:bc:47:e6:c9:8f:
71:08:e1:9a:87:1e:6e:71:87:b1:bc:1a:12:34:ed:fb:c2:c5:
f6:08:f5:55:e3:f8:d9:5c:22:7a:6e:6e:9e:14:5e:aa:04:b3:
81:7e:0b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:23:55 2025 by rpki-client