Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/6LcfmBrgRgH242lGDi2vIiaU6Bc.roa
File: 6LcfmBrgRgH242lGDi2vIiaU6Bc.roa (raw, json)
Hash identifier: gv0WwnIZ/Iv+WEUOIqwv4QLfB6vTEg3mYFNBueuZnkw=
Subject key identifier: E8:B7:1F:98:1A:E0:46:01:F6:E3:69:46:0E:2D:AF:22:26:94:E8:17
Certificate issuer: /CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
Certificate serial: 018CC2DAF58C242D437E95E2EA4E8C7094A2
Authority key identifier: C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/6LcfmBrgRgH242lGDi2vIiaU6Bc.roa
Signing time: Mon 01 Jan 2024 02:29:38 +0000
ROA not before: Mon 01 Jan 2024 02:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44656
IP address blocks: 89.58.96.0/21 maxlen: 21
89.58.64.0/19 maxlen: 19
185.232.40.0/24 maxlen: 24
2a11:fb80::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f5:8c:24:2d:43:7e:95:e2:ea:4e:8c:70:94:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
Validity
Not Before: Jan 1 02:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8b71f981ae04601f6e369460e2daf222694e817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:68:e3:ec:06:4c:81:8c:5b:e2:89:b1:a7:a9:
75:40:9a:a2:26:9c:a3:9f:f0:db:30:aa:53:fc:16:
96:c2:8f:d9:5b:5d:69:df:8a:0d:4d:f5:de:56:42:
22:b6:83:ef:d7:39:2c:f9:6d:bd:52:c9:bd:60:a6:
1e:f5:d2:26:bd:2b:05:b5:fa:ca:1e:ab:8b:b6:9c:
e6:5b:71:97:6a:75:02:81:27:43:44:54:02:d0:53:
1c:68:25:2d:11:e3:69:51:dd:ef:73:cf:79:a5:ff:
1e:6b:4e:c7:a6:13:c3:b4:df:0e:85:40:d8:c1:a2:
a3:73:47:c7:4a:f7:de:09:f7:95:19:e4:c8:1c:4b:
21:d8:8f:49:e2:85:a8:54:f6:b8:8e:69:0b:6f:06:
ca:0a:a1:3b:67:b7:cd:fa:7a:94:d2:cc:06:9b:9f:
13:fd:c5:6a:cb:31:c5:f6:11:55:d6:55:17:e2:b8:
93:44:6b:98:a0:94:94:16:12:98:40:b9:b3:7e:a1:
cc:be:6a:74:cb:97:4d:09:55:7d:63:48:ce:b3:7d:
7c:c8:4e:5b:11:52:63:f8:f9:b4:31:d4:ce:b0:b9:
61:9c:1c:28:36:70:b1:df:c8:9d:7e:a5:f6:bf:34:
67:a8:e0:a1:c2:e8:4a:55:b6:6c:c9:e2:2c:2e:29:
3c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B7:1F:98:1A:E0:46:01:F6:E3:69:46:0E:2D:AF:22:26:94:E8:17
X509v3 Authority Key Identifier:
keyid:C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/6LcfmBrgRgH242lGDi2vIiaU6Bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.58.64.0-89.58.103.255
185.232.40.0/24
IPv6:
2a11:fb80::/29
Signature Algorithm: sha256WithRSAEncryption
32:e7:38:2f:8d:79:24:19:7a:4a:cd:a4:82:d3:07:37:4b:9a:
61:b3:f6:d8:a0:2f:c3:ec:89:5a:7b:dd:82:05:09:8d:63:8c:
7e:6b:b7:9b:b5:d8:ef:f9:4e:e2:1a:df:18:9b:d0:e7:60:f2:
aa:78:09:e0:ee:51:89:87:4a:10:5d:07:48:d5:61:4a:51:1e:
bd:8d:ad:a2:d1:1d:90:cd:16:13:89:15:b5:3c:a0:26:ab:1d:
5b:74:35:f4:1f:15:27:e6:66:d8:74:ff:87:c6:32:d8:f8:28:
34:55:38:3d:7f:75:72:78:fb:28:6e:66:53:05:29:e2:c1:b3:
d4:a9:a6:55:cd:e5:e5:e8:de:3c:eb:cf:c9:0b:9e:4a:c7:d2:
38:33:4c:0a:cd:6d:63:40:40:9f:22:5c:98:b2:03:88:e6:25:
07:ce:41:14:c1:db:4e:83:7e:55:cf:98:34:48:8b:aa:e3:bc:
cb:fa:89:2e:3b:5b:01:2f:b0:81:43:bb:9e:5a:d5:ce:36:94:
69:a0:94:07:f9:49:a9:66:ae:14:98:74:be:d1:21:31:43:1a:
77:77:d6:d1:65:53:11:ab:03:df:ac:00:7e:47:67:09:3f:5f:
83:43:20:a0:8a:2e:84:1a:f0:86:49:9a:49:67:df:3f:eb:92:
f9:5f:bc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:39 2025 by rpki-client