Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/K-1nPbPaFGrLG844RBW5MdqmZpA.roa
File: K-1nPbPaFGrLG844RBW5MdqmZpA.roa (raw, json)
Hash identifier: dDxafcgVjqmsRo5KArabS7YzLQ6qEK311dnaLqYkiwE=
Subject key identifier: 2B:ED:67:3D:B3:DA:14:6A:CB:1B:CE:38:44:15:B9:31:DA:A6:66:90
Certificate issuer: /CN=e7334ad9b3fc521030be99a5157211b663216c94
Certificate serial: 018CC34896D382561017BBF4052FBA07D9A9
Authority key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/K-1nPbPaFGrLG844RBW5MdqmZpA.roa
Signing time: Mon 01 Jan 2024 04:29:23 +0000
ROA not before: Mon 01 Jan 2024 04:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208649
IP address blocks: 185.75.221.0/24 maxlen: 24
2a0d:a640::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:96:d3:82:56:10:17:bb:f4:05:2f:ba:07:d9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7334ad9b3fc521030be99a5157211b663216c94
Validity
Not Before: Jan 1 04:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bed673db3da146acb1bce384415b931daa66690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:c0:7d:34:00:99:e8:b5:7b:a3:fd:cf:a8:
2e:50:0e:1a:30:52:2b:0d:6f:38:f8:9f:0e:d6:c5:
64:94:4f:20:f0:b6:17:42:3c:bb:27:1f:e9:cc:57:
9b:5b:0a:18:41:a0:1b:5a:fd:18:dd:92:d5:9e:d3:
91:f8:dc:73:06:d1:b6:5b:56:68:36:28:d2:f7:b7:
90:50:a5:82:70:71:58:e6:0c:32:61:54:55:8b:d2:
0d:98:80:d9:e9:b6:92:8b:47:0c:4e:a7:f6:a3:c8:
aa:ce:35:37:70:58:7f:11:22:67:5b:5a:ca:7b:26:
38:8b:d8:bc:5d:a4:c9:eb:b3:67:bf:01:cf:34:73:
4b:0a:65:fe:35:9a:6c:a4:9a:65:92:f6:0e:64:16:
f9:d8:34:93:c5:17:15:83:eb:da:9c:e7:ee:e0:11:
1c:eb:44:c9:32:67:4c:24:d6:91:1c:71:cf:ad:bf:
f2:fc:1d:13:f1:c1:d5:59:cf:a2:ce:a6:1c:3f:37:
3a:0e:6f:e5:02:74:51:62:76:f8:74:ba:2c:b0:bf:
59:79:21:39:b6:17:01:29:49:f5:1c:4c:02:0d:00:
25:14:18:74:f3:a1:cf:e6:06:b1:c9:76:8e:e8:9b:
7a:2d:7c:fa:d9:6c:5a:6e:65:e8:2d:fb:24:af:82:
9e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:ED:67:3D:B3:DA:14:6A:CB:1B:CE:38:44:15:B9:31:DA:A6:66:90
X509v3 Authority Key Identifier:
keyid:E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/K-1nPbPaFGrLG844RBW5MdqmZpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.221.0/24
IPv6:
2a0d:a640::/29
Signature Algorithm: sha256WithRSAEncryption
94:cd:28:6f:f1:dd:a1:3e:36:37:cc:d3:cf:f3:65:66:d3:b0:
d2:14:30:98:e1:e3:2a:22:5a:e1:70:b6:be:3c:27:23:00:81:
4d:17:53:3a:90:f6:cf:7d:a9:4f:e1:f1:79:de:9e:25:f6:cd:
40:56:76:c6:02:f5:fa:58:eb:30:e3:53:42:0e:1b:b3:c3:01:
99:6f:44:0f:14:43:a3:46:86:2c:d9:47:91:0c:48:21:91:ba:
eb:e6:45:08:46:c1:3e:17:1c:4c:6e:60:ee:d1:86:d6:ab:a1:
15:90:e5:c4:8b:4f:41:6b:52:20:20:12:f9:4f:83:99:82:10:
f8:1d:c3:e4:86:ba:6c:81:5c:0c:2f:be:4b:de:3d:b5:e0:d1:
fb:14:e1:38:03:0a:34:e2:db:58:ca:f2:3f:7a:62:ac:43:3f:
42:9a:54:34:b6:3d:26:19:59:26:6a:ce:1d:07:f5:ab:c1:6e:
48:84:46:8d:90:62:e6:4b:dc:89:c8:f9:bb:1c:40:51:b4:40:
27:a7:17:7b:25:38:9a:4c:63:2c:47:47:40:44:bf:20:e3:0a:
2d:c2:aa:c7:6f:f1:33:ab:1f:18:41:13:61:41:b8:10:53:25:
ce:0e:a7:51:52:ba:bc:3d:1c:0a:1d:a0:75:2c:34:a9:86:aa:
67:e1:df:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:26 2025 by rpki-client