Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/iy6lCWuC7h7pAWtRoJiX3uM4MGA.roa
File: iy6lCWuC7h7pAWtRoJiX3uM4MGA.roa (raw, json)
Hash identifier: s1BH5bEi/WiExbKdLoATNpKYWnKYAVOgq/GJlqNMH/4=
Subject key identifier: 8B:2E:A5:09:6B:82:EE:1E:E9:01:6B:51:A0:98:97:DE:E3:38:30:60
Certificate issuer: /CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Certificate serial: 01941F8C084D5B76265A6F4666B068C368D9
Authority key identifier: C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/iy6lCWuC7h7pAWtRoJiX3uM4MGA.roa
Signing time: Wed 01 Jan 2025 01:47:38 +0000
ROA not before: Wed 01 Jan 2025 01:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206296
IP address blocks: 185.189.20.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 14:58:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:08:4d:5b:76:26:5a:6f:46:66:b0:68:c3:68:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Validity
Not Before: Jan 1 01:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b2ea5096b82ee1ee9016b51a09897dee3383060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:df:7a:d0:4f:5d:ea:df:1c:aa:b8:9c:9c:67:
1b:ca:ca:5c:3f:e0:df:dd:1d:6f:87:2f:b8:8f:80:
21:14:ae:72:d6:52:d6:07:3a:2c:fb:60:12:24:b8:
f5:07:94:a7:15:49:fc:f4:5b:94:46:15:59:3b:8b:
2f:35:e9:47:2f:df:96:aa:b6:a0:c2:36:66:31:b8:
65:9e:eb:15:6d:ed:40:b9:df:9b:a2:a1:9c:4d:cb:
8d:b0:94:a6:27:78:ae:8a:7c:55:32:85:a3:26:43:
02:2b:8d:6b:86:6d:a6:9b:2b:3a:c2:11:38:78:41:
05:19:5a:b5:99:68:95:41:59:e6:ee:af:10:ac:d3:
3e:f8:e3:6a:6d:7f:65:d9:a0:d3:d4:11:3b:c0:a3:
c7:7c:7e:d0:9e:bf:b8:d9:1c:73:09:c2:84:dd:a0:
81:cc:13:e8:74:ea:5f:5e:f4:48:2f:fd:1b:c8:d4:
8f:85:72:dc:ff:74:cd:53:00:61:85:18:2a:f8:67:
75:42:88:c1:71:e4:03:fd:81:85:9c:ab:cb:01:7b:
05:19:8a:2e:7b:c7:d1:83:0e:13:fd:bb:07:da:93:
c3:ce:69:41:75:48:29:89:ae:bb:c5:5c:a1:9c:58:
9d:06:e9:25:a3:bf:8c:05:5e:7f:6d:cf:10:f6:69:
a8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2E:A5:09:6B:82:EE:1E:E9:01:6B:51:A0:98:97:DE:E3:38:30:60
X509v3 Authority Key Identifier:
keyid:C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/iy6lCWuC7h7pAWtRoJiX3uM4MGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.20.0/22
Signature Algorithm: sha256WithRSAEncryption
39:11:34:17:66:34:54:1d:ef:1a:ac:06:ba:0e:27:f4:08:e2:
1d:2a:52:b7:03:ed:4e:79:0d:33:f0:64:2d:ae:1f:61:45:33:
22:15:5b:28:28:48:c9:8b:61:73:ec:2d:c7:92:ec:aa:60:74:
2b:d1:df:7a:8b:b9:67:38:36:3b:26:a8:1f:f6:a2:a4:b1:11:
fa:6e:91:3e:11:7b:f2:f1:12:32:45:e2:40:7c:d9:86:bf:1a:
ff:83:05:a6:b1:5e:5c:4e:2b:49:9e:6e:bb:08:3c:60:9f:54:
44:5e:14:cf:04:fb:cc:aa:b1:63:a6:bd:43:6e:b3:99:94:ac:
00:be:a6:11:e1:64:83:e9:53:ee:ec:e2:36:7e:cc:99:a7:39:
17:5d:b0:da:d8:4f:4b:c7:e5:85:65:74:34:76:d4:42:77:c4:
36:8e:e2:e1:f6:5c:a6:20:7b:bb:40:72:95:96:f4:54:7c:f3:
75:88:8c:50:db:bc:ed:dc:3c:e8:02:fd:dd:73:d5:ec:26:d3:
66:c9:af:02:09:7c:20:7d:96:fc:1b:99:c4:91:67:c9:64:9a:
e5:ad:46:d1:7e:58:04:58:cc:b9:9d:16:ef:71:3a:c0:fe:2b:
c9:d9:3b:83:32:06:6a:5b:34:84:7e:93:3f:ae:5a:2a:b6:3b:
61:2d:d1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:03:31 2025 by rpki-client