Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/sKWsy27_HmUptw8uKE-oY6zbUGA.roa
File: sKWsy27_HmUptw8uKE-oY6zbUGA.roa (raw, json)
Hash identifier: DIPYVFKX5H0t16QppBOwYUm7ob4DFZD3WCf3Sv9TOHM=
Subject key identifier: B0:A5:AC:CB:6E:FF:1E:65:29:B7:0F:2E:28:4F:A8:63:AC:DB:50:60
Certificate issuer: /CN=10f1d0dbe093c722350618f4045c25ba94317f87
Certificate serial: 018CC8DE62B5D8A7696CC482A9C4EAD1E0A0
Authority key identifier: 10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/sKWsy27_HmUptw8uKE-oY6zbUGA.roa
Signing time: Tue 02 Jan 2024 06:31:06 +0000
ROA not before: Tue 02 Jan 2024 06:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213054
IP address blocks: 185.221.244.0/24 maxlen: 24
2a04:3f83:44::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:62:b5:d8:a7:69:6c:c4:82:a9:c4:ea:d1:e0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f1d0dbe093c722350618f4045c25ba94317f87
Validity
Not Before: Jan 2 06:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0a5accb6eff1e6529b70f2e284fa863acdb5060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e5:30:b6:4d:21:7d:b8:92:5d:dd:03:4c:f5:
b4:2c:d4:03:11:e2:25:e4:65:fb:c5:4c:d1:31:ac:
f7:11:90:9f:66:be:ac:0f:ac:19:86:30:65:49:77:
d2:d4:ba:3c:ae:b0:47:b4:c1:41:a2:7a:67:b8:75:
0c:48:32:7b:fa:24:6d:ef:89:4b:21:1e:60:2e:bc:
2a:8c:74:af:fd:d2:bb:2d:1e:cd:1e:08:8a:ef:14:
4b:25:4b:9d:0d:d4:c2:6b:e0:07:d3:c1:bb:83:df:
8c:47:73:4f:de:21:4a:ec:40:3f:81:a9:82:82:1b:
18:9e:c2:6c:69:c7:df:5e:4b:7a:b0:26:3e:89:bf:
c9:ac:59:03:b1:29:12:fd:ee:51:df:17:d4:95:50:
16:7c:8a:f8:93:f0:4f:bb:9a:ec:b6:7e:67:20:7a:
1b:39:80:0e:9a:96:a9:89:ac:9d:a5:ce:56:bf:23:
29:93:47:e8:b4:f5:39:44:68:67:4f:07:cf:f4:fd:
2f:7d:b2:f2:14:48:75:c8:32:04:de:6b:b8:11:6f:
a2:ce:a9:86:1b:ec:a6:57:32:49:60:f8:72:d5:8f:
50:a8:c3:04:15:26:66:b2:67:fe:0c:1c:c6:d2:56:
65:bd:cd:50:6f:7d:53:b4:4c:6b:db:0e:41:61:c7:
e4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A5:AC:CB:6E:FF:1E:65:29:B7:0F:2E:28:4F:A8:63:AC:DB:50:60
X509v3 Authority Key Identifier:
keyid:10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/sKWsy27_HmUptw8uKE-oY6zbUGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.244.0/24
IPv6:
2a04:3f83:44::/48
Signature Algorithm: sha256WithRSAEncryption
0f:c8:84:95:47:e9:ed:bd:ea:8e:19:21:d5:6f:33:8d:5d:41:
b0:7a:79:b4:9a:24:d0:2a:4e:02:45:32:1f:6c:c0:cc:be:9a:
36:c0:41:09:bd:03:9e:04:77:9d:ab:2a:43:29:56:d8:bb:a3:
38:8b:95:e3:ac:24:5d:bd:a7:29:16:c4:57:3c:aa:da:23:8d:
80:92:16:0d:dc:57:9c:b8:cd:c5:27:01:8f:13:e0:e0:c1:3f:
b5:d9:68:43:d0:23:3e:ed:37:19:6b:98:f6:3f:c2:d3:3e:a9:
35:49:6b:3a:a5:c5:9f:46:55:1d:24:62:73:d9:b0:8d:0f:bb:
6f:e8:59:a4:c0:66:6d:f3:02:41:5f:7b:c8:0e:f1:7f:83:1d:
f8:7b:30:0d:ce:37:b2:00:6b:26:e2:b9:ea:f8:26:b1:91:4a:
1c:97:3e:b3:8a:ba:b8:3e:c4:a9:5a:2e:62:d2:8d:1e:2a:25:
0c:86:62:c0:45:37:31:2a:c0:21:72:63:61:fe:c8:2b:58:4f:
68:49:a2:57:46:1e:f3:b6:a2:bd:25:8c:6b:08:01:5a:37:4f:
bf:b7:c8:be:0b:49:22:2c:26:57:0b:df:35:bb:5c:e2:06:66:
39:5e:53:71:14:aa:8b:fb:b6:22:2b:7e:cf:14:1e:94:31:8b:
d0:aa:16:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:42:14 2025 by rpki-client