Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/R6CZu8M8ZodQuBIrW-jQDVFyAPA.roa
File: R6CZu8M8ZodQuBIrW-jQDVFyAPA.roa (raw, json)
Hash identifier: U5RGI6wnuJnpDbmTAmmwYqnFA2lwv9ntL9CuQg8D1nU=
Subject key identifier: 47:A0:99:BB:C3:3C:66:87:50:B8:12:2B:5B:E8:D0:0D:51:72:00:F0
Certificate issuer: /CN=493289256e3388777d95e4d531567ce3672a149a
Certificate serial: 018CC424F64178622E9BBBBB85B0BF760701
Authority key identifier: 49:32:89:25:6E:33:88:77:7D:95:E4:D5:31:56:7C:E3:67:2A:14:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/R6CZu8M8ZodQuBIrW-jQDVFyAPA.roa
Signing time: Mon 01 Jan 2024 08:30:05 +0000
ROA not before: Mon 01 Jan 2024 08:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24971
IP address blocks: 194.145.180.0/22 maxlen: 22
185.85.164.0/22 maxlen: 22
2a03:7460::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:f6:41:78:62:2e:9b:bb:bb:85:b0:bf:76:07:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493289256e3388777d95e4d531567ce3672a149a
Validity
Not Before: Jan 1 08:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47a099bbc33c668750b8122b5be8d00d517200f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:7f:62:b3:28:31:f1:e5:16:aa:68:d9:61:
db:97:34:00:eb:43:ff:5e:a2:c7:b2:c9:ee:61:62:
03:90:aa:87:b6:0c:45:b5:aa:68:0b:e1:8a:bc:22:
16:1c:8a:c0:56:1e:45:76:ec:94:7f:6f:25:69:e2:
c7:c4:12:8e:26:a7:3b:d1:4b:97:8f:24:57:a0:0b:
2b:54:c6:45:4c:12:a4:2e:d2:a5:2c:16:97:b5:7c:
fc:85:54:93:6b:87:aa:ac:ec:d4:a6:16:82:1f:46:
ff:25:20:dd:0b:b4:e1:ad:71:3a:9f:ec:3e:8e:3d:
27:50:d6:b3:0e:ef:54:3c:a1:db:b1:1e:52:13:43:
82:c2:70:22:b0:39:5d:c6:fb:40:38:fa:95:92:7a:
aa:16:ae:fa:4e:47:38:4b:86:d5:be:33:61:28:99:
8f:c0:a6:8f:0b:48:e9:bf:83:7f:f4:75:ff:5a:8c:
55:d1:51:ca:29:4c:01:e8:41:95:a9:1a:2d:e5:0d:
a6:ee:0b:c1:36:a6:b6:b6:65:f3:46:bf:43:bc:9b:
f5:cd:dc:b7:ed:5d:70:77:72:50:d8:78:c1:f5:f5:
4c:32:b5:43:e2:ca:4b:1f:0d:e7:1f:05:40:ee:ac:
c2:fc:d3:6a:37:b6:e2:f5:25:5d:10:e1:67:5f:b5:
fb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A0:99:BB:C3:3C:66:87:50:B8:12:2B:5B:E8:D0:0D:51:72:00:F0
X509v3 Authority Key Identifier:
keyid:49:32:89:25:6E:33:88:77:7D:95:E4:D5:31:56:7C:E3:67:2A:14:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/R6CZu8M8ZodQuBIrW-jQDVFyAPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.164.0/22
194.145.180.0/22
IPv6:
2a03:7460::/32
Signature Algorithm: sha256WithRSAEncryption
45:24:41:69:40:6f:7d:8d:bb:53:05:52:84:3d:7e:19:59:79:
26:b7:c3:f1:00:53:e6:aa:f9:2d:30:76:6a:e7:f6:1b:91:98:
3e:d5:87:78:e4:d4:4a:1b:e9:7d:eb:b7:b1:70:4c:c9:d1:e1:
48:c1:f3:82:81:ed:be:ed:75:40:df:45:0a:2e:68:7f:c9:8e:
73:ff:4d:5a:8c:2c:46:69:e9:14:f1:20:0a:ce:87:09:da:ef:
2c:36:bd:97:62:45:ec:41:e4:a7:c5:54:2a:4b:a5:74:d7:35:
10:20:64:00:26:1a:d8:7d:58:6c:8a:54:87:87:20:16:af:7a:
8a:de:7f:be:c2:22:d0:7c:09:88:de:e5:a4:52:84:1f:37:ac:
fd:d5:ca:52:ad:1b:0a:0b:ed:ba:51:2c:b6:64:0f:7e:a1:0a:
a5:58:73:fe:73:eb:97:c8:a4:c0:21:00:3b:2f:0c:21:ae:b9:
6d:f4:62:d4:c1:5e:c0:ac:96:0a:d8:21:19:8c:b8:db:d6:a8:
5c:ef:2b:cd:70:73:e9:e5:35:de:e9:fc:ce:c5:36:16:50:9b:
8b:05:4c:bf:e6:33:d7:3d:8c:c0:ec:87:76:44:f0:19:a7:19:
b3:d0:67:a2:0a:de:74:e9:0a:de:7b:f0:d5:f0:ff:de:07:f6:
fe:2a:49:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:42:30 2025 by rpki-client