Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/AUbhsbOkXzpb8vYZ0l69AyUCWpo.roa
File: AUbhsbOkXzpb8vYZ0l69AyUCWpo.roa (raw, json)
Hash identifier: qsqM24V593AbWKl/Yn0U6i1+14fCVTQuKHouYl9DprM=
Subject key identifier: 01:46:E1:B1:B3:A4:5F:3A:5B:F2:F6:19:D2:5E:BD:03:25:02:5A:9A
Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Certificate serial: 018CC94D4ED03C4DEC835FD0D663B677AAB7
Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/AUbhsbOkXzpb8vYZ0l69AyUCWpo.roa
Signing time: Tue 02 Jan 2024 08:32:16 +0000
ROA not before: Tue 02 Jan 2024 08:32:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204479
IP address blocks: 185.107.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:4e:d0:3c:4d:ec:83:5f:d0:d6:63:b6:77:aa:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Validity
Not Before: Jan 2 08:32:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0146e1b1b3a45f3a5bf2f619d25ebd0325025a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:70:96:57:74:93:76:4a:28:67:2f:95:25:c5:
18:ac:b5:ee:94:de:99:35:75:9b:db:49:08:0f:a5:
fc:39:d4:f3:63:1b:89:a9:2b:39:b1:e1:bf:63:ae:
06:aa:c9:64:1a:82:ab:32:3f:01:a4:bb:83:ea:ea:
48:74:5c:75:26:9f:f3:ee:bd:81:f8:8c:a6:c6:19:
10:ed:b8:80:9b:c2:9f:e9:1f:6e:76:17:f0:38:ed:
63:52:c1:11:e9:66:96:7c:fa:33:20:46:2a:f7:10:
99:ce:16:0f:57:8d:91:e9:e7:bb:60:bc:1e:f5:97:
9a:a9:7a:4b:f8:9f:04:6e:75:76:97:55:81:00:5b:
e8:b2:da:d9:6f:09:cc:f0:f7:32:a6:41:bc:0a:ca:
10:cc:5c:b3:99:34:d4:64:ca:4a:19:43:24:39:48:
63:e2:8e:80:e4:4b:0a:93:17:d3:c2:5e:ec:74:2a:
21:d2:ee:5c:11:47:76:34:f3:f5:dc:d6:e3:76:a8:
9c:72:98:93:6a:36:f4:91:4d:1e:ba:f9:3c:62:57:
34:00:f8:1b:b3:a3:a5:3c:28:a1:2b:bf:c5:a7:f1:
6a:00:a0:73:b1:78:3b:62:54:0d:3b:86:e7:af:c5:
cc:fd:f4:71:aa:38:4e:cf:c5:c6:f4:d7:fe:d1:8f:
88:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:46:E1:B1:B3:A4:5F:3A:5B:F2:F6:19:D2:5E:BD:03:25:02:5A:9A
X509v3 Authority Key Identifier:
keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/AUbhsbOkXzpb8vYZ0l69AyUCWpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.67.0/24
Signature Algorithm: sha256WithRSAEncryption
07:80:7c:c6:f7:72:c2:59:0a:8b:36:a1:9d:ed:5d:7c:c6:b3:
2d:45:9d:dc:d9:5b:c0:cb:b3:bd:83:ee:0b:c3:9e:d5:3b:2c:
39:b1:2f:0f:55:30:65:0d:48:cc:20:5f:16:f9:a2:69:da:a8:
0e:c2:c8:13:d6:eb:2c:5c:5e:b2:62:f4:ae:06:7c:bf:34:d7:
06:45:26:b6:f7:c9:e5:43:48:3d:70:ad:9b:2c:c7:62:05:15:
1d:4e:d8:32:fd:f8:ff:b6:5c:00:34:b9:5e:a4:d9:97:15:f5:
32:02:ed:b1:b5:b1:2d:b7:72:97:72:b6:d9:4f:dc:b9:c6:de:
be:09:b4:de:51:0a:c6:03:ac:a6:bd:17:c0:d2:9b:56:45:4e:
b7:05:f5:fa:85:2b:ca:78:3e:40:99:cd:b0:72:c5:7e:1c:fb:
c6:54:00:58:d7:03:28:8d:73:39:58:5c:86:07:85:03:3a:55:
87:7c:41:50:0d:2c:c1:51:69:17:6b:db:1a:fe:af:35:a2:78:
bb:44:76:9e:67:d6:0a:34:aa:f6:50:26:b4:a7:d6:e4:83:67:
1b:92:69:3b:0c:6f:28:34:94:b3:e6:60:80:43:85:50:de:0e:
18:f2:3b:54:be:27:a4:57:33:6f:fb:cb:99:40:97:44:7b:77:
3a:34:b3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 04:27:31 2025 by rpki-client