Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/6tYbvbkO5tFuH4owf2ZbXMFoke8.roa
File: 6tYbvbkO5tFuH4owf2ZbXMFoke8.roa (raw, json)
Hash identifier: 2UL3jVduOkXjwioGPXkB3axpIHn+dGlhM1TA/fz1D4s=
Subject key identifier: EA:D6:1B:BD:B9:0E:E6:D1:6E:1F:8A:30:7F:66:5B:5C:C1:68:91:EF
Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial: 018E8027F121EC7D01CCAD4F9B0FDE84255C
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/6tYbvbkO5tFuH4owf2ZbXMFoke8.roa
Signing time: Wed 27 Mar 2024 13:44:45 +0000
ROA not before: Wed 27 Mar 2024 13:44:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42910
IP address blocks: 185.135.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 19:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:80:27:f1:21:ec:7d:01:cc:ad:4f:9b:0f:de:84:25:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Validity
Not Before: Mar 27 13:44:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ead61bbdb90ee6d16e1f8a307f665b5cc16891ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:28:91:dd:09:37:98:7a:97:9d:ad:c2:c0:2b:
5e:64:99:53:9a:14:83:56:39:c4:0c:fc:62:c4:b7:
74:07:86:57:fb:b2:69:c4:14:33:9a:27:0d:c9:8d:
07:50:8f:7f:22:34:e5:1c:ac:b2:08:48:68:64:51:
39:8a:97:87:04:16:cd:d3:81:ad:66:a9:c5:3c:f3:
c6:13:25:87:c4:68:c7:6b:7d:c0:da:a3:b6:06:c9:
05:6e:4f:59:e3:16:18:4d:20:ce:ac:24:7a:03:c3:
c0:fc:e0:0c:8d:ab:85:9a:06:90:80:9d:d3:0b:6e:
82:52:e0:06:e0:f8:1e:a4:ab:33:e0:bd:65:89:31:
7f:95:15:35:bf:59:9e:04:e2:7d:48:49:a1:10:25:
a7:01:b2:79:86:a3:d8:27:e5:d7:34:61:90:51:b7:
e7:0c:e6:84:25:a2:a6:5f:99:2d:10:dc:88:56:97:
78:00:72:ba:ad:19:bc:4c:b6:47:e3:1c:2c:c3:ef:
98:36:0b:7d:dc:39:4e:bb:e2:98:4d:cd:0b:6a:31:
66:40:ca:84:1c:1c:e3:7f:8d:8d:37:f2:af:85:76:
d0:69:a7:ed:65:a0:ce:70:8b:60:d9:e1:42:ca:18:
16:08:c2:c5:39:40:ae:23:fd:f2:19:90:3a:36:ec:
3d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D6:1B:BD:B9:0E:E6:D1:6E:1F:8A:30:7F:66:5B:5C:C1:68:91:EF
X509v3 Authority Key Identifier:
keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/6tYbvbkO5tFuH4owf2ZbXMFoke8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.223.0/24
Signature Algorithm: sha256WithRSAEncryption
49:b2:f4:3b:10:b5:07:21:30:13:4b:15:b4:46:3e:e0:b1:ac:
7e:b3:48:a2:b1:1c:69:72:4b:6f:8a:9d:85:e1:47:fe:9b:b1:
2b:48:ab:46:fb:20:16:03:dc:78:d7:94:a8:10:be:b7:90:85:
38:24:73:2d:fc:94:20:70:32:1a:9a:43:24:00:68:27:2e:e1:
df:03:24:a4:9b:7c:17:80:2a:0b:24:93:d9:6e:0a:44:93:43:
47:58:f3:e9:2e:1c:1f:c2:65:8f:75:5a:54:d9:e3:01:1e:4a:
0d:ac:b6:c9:dd:1d:a6:5e:77:78:e8:62:6c:d4:ff:27:fc:bf:
65:4b:95:5a:92:46:32:5d:d3:a3:6d:01:00:7d:f9:43:ce:af:
e8:54:51:cc:ab:5d:2b:52:f4:8a:1f:51:68:65:92:fc:fe:d5:
63:42:7b:a9:9a:35:53:95:dc:39:76:b5:37:0d:09:a8:31:65:
46:20:e1:90:25:70:0b:94:59:45:f1:d3:e2:e3:f4:b5:19:e6:
8a:8d:a9:42:5d:5f:18:99:f5:e4:28:40:74:fa:cc:1d:86:44:
2f:5e:18:5d:29:6d:68:67:4c:e6:77:33:24:52:db:54:e4:e1:
10:75:31:81:bb:68:d4:b2:9a:ac:35:4b:ac:6f:43:d1:62:eb:
81:c1:c0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:31:00 2025 by rpki-client