Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/Nh4YJJr1skdtwBI4jHVUlOvQgpM.roa
File: Nh4YJJr1skdtwBI4jHVUlOvQgpM.roa (raw, json)
Hash identifier: MIfRTjWXi+HHxMhusoQ00Ly789J2prwoTjGFcwWzaeI=
Subject key identifier: 36:1E:18:24:9A:F5:B2:47:6D:C0:12:38:8C:75:54:94:EB:D0:82:93
Certificate issuer: /CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c
Certificate serial: 018CC4932BF07BF979467D9538049BB12C35
Authority key identifier: F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/Nh4YJJr1skdtwBI4jHVUlOvQgpM.roa
Signing time: Mon 01 Jan 2024 10:30:28 +0000
ROA not before: Mon 01 Jan 2024 10:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202330
IP address blocks: 185.255.21.0/24 maxlen: 24
185.255.20.0/22 maxlen: 22
185.255.22.0/24 maxlen: 24
185.255.23.0/24 maxlen: 24
185.255.20.0/24 maxlen: 24
185.25.105.0/24 maxlen: 24
2a13:d680::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:47:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:2b:f0:7b:f9:79:46:7d:95:38:04:9b:b1:2c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c
Validity
Not Before: Jan 1 10:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=361e18249af5b2476dc012388c755494ebd08293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d2:95:f2:64:53:2a:eb:5e:fb:0b:bc:e0:0e:
f5:1e:a9:83:04:6f:16:94:83:52:e9:99:7d:3f:1f:
3f:64:9a:fc:63:5c:8b:de:ac:a1:a5:4e:9d:cd:da:
d4:03:75:3e:c7:75:c2:e8:e7:83:8a:3f:ac:37:2d:
75:c1:52:a6:0b:52:62:bf:d7:45:70:4b:e4:76:31:
b6:36:4c:86:87:44:21:0b:fd:b9:05:b2:85:f3:fd:
1f:32:22:d8:92:32:0c:0f:73:93:57:24:1f:32:f1:
ab:92:5b:e7:15:fa:5b:19:36:8d:69:82:22:44:ce:
20:f2:7a:99:ea:3d:62:51:05:1b:db:8a:ff:55:e5:
4e:16:fb:a1:44:dc:2d:d4:17:8a:5d:7f:ba:2f:0e:
6c:22:60:e6:e7:fd:79:bb:83:84:b9:bb:c3:6b:b8:
b5:b7:01:46:50:93:3d:49:6b:c0:d3:86:1c:59:f2:
0f:3f:fe:5d:29:ad:39:f5:41:60:5b:25:59:9e:85:
77:58:84:84:e3:99:f0:f6:9b:d3:83:00:ee:4e:3d:
44:3a:6e:0f:e4:09:35:7f:6c:4b:e3:57:d5:b3:66:
db:c4:cc:fe:04:4a:f1:d9:9b:8d:5a:0d:fa:0c:ac:
a3:95:37:37:fa:dc:a3:7e:0a:7d:98:eb:10:1f:ce:
ab:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1E:18:24:9A:F5:B2:47:6D:C0:12:38:8C:75:54:94:EB:D0:82:93
X509v3 Authority Key Identifier:
keyid:F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/Nh4YJJr1skdtwBI4jHVUlOvQgpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.105.0/24
185.255.20.0/22
IPv6:
2a13:d680::/29
Signature Algorithm: sha256WithRSAEncryption
03:e7:65:22:40:8a:95:84:24:0a:ba:3f:93:39:0a:ae:7f:92:
5f:12:df:58:90:d9:ad:f7:ef:61:fd:d9:05:45:45:9e:9f:ec:
27:2e:08:1d:99:d6:73:d9:1b:84:d1:7f:21:f7:a7:08:bf:88:
14:99:73:c1:34:d3:df:83:43:72:b8:6c:e4:3e:66:2f:22:84:
a4:62:71:ce:88:04:fd:b3:e7:55:e0:d9:cd:1c:b8:a7:1c:2a:
ed:89:1f:cc:8c:54:35:b9:fa:57:4c:9b:2d:f4:71:2b:04:43:
11:15:8d:af:53:da:be:f6:f2:c5:c4:3d:08:b1:b9:df:52:ef:
34:e5:e7:ac:fa:f7:bd:11:e8:2a:e5:dd:67:0e:5c:03:23:bf:
4d:d8:69:98:d4:f2:51:d4:35:6d:82:b1:67:8a:16:7a:84:dd:
9c:a6:87:93:88:f7:77:af:1e:b5:eb:30:e6:60:de:ad:20:6f:
07:9a:e9:ba:4c:6e:88:4b:3e:af:05:0d:79:78:9b:95:8c:0a:
67:a5:a8:be:60:3b:57:17:2f:82:cd:8b:ee:7d:e5:59:2e:64:
0c:73:54:c5:6b:c8:bb:91:36:49:e6:ec:5c:5b:7e:46:4b:26:
bb:25:e5:10:27:b7:28:63:b7:4b:1b:a7:aa:c1:88:cd:7c:32:
6a:4f:79:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:52 2025 by rpki-client