Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/lOlHgJl-hiwPO5LbSYYpr9KU59Q.roa
File: lOlHgJl-hiwPO5LbSYYpr9KU59Q.roa (raw, json)
Hash identifier: NXYqrFle4QEvXaWg5zm8ScsXITQgrpgq9nTpyreGtPA=
Subject key identifier: 94:E9:47:80:99:7E:86:2C:0F:3B:92:DB:49:86:29:AF:D2:94:E7:D4
Certificate issuer: /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial: 01942825431D8B20EC856D18EA23171D3803
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/lOlHgJl-hiwPO5LbSYYpr9KU59Q.roa
Signing time: Thu 02 Jan 2025 17:51:58 +0000
ROA not before: Thu 02 Jan 2025 17:51:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201453
IP address blocks: 185.74.192.0/24 maxlen: 24
185.112.78.0/24 maxlen: 24
185.163.166.0/24 maxlen: 24
185.163.167.0/24 maxlen: 24
185.178.80.0/22 maxlen: 22
185.178.80.0/24 maxlen: 24
185.178.81.0/24 maxlen: 24
185.178.82.0/24 maxlen: 24
185.178.83.0/24 maxlen: 24
185.183.16.0/24 maxlen: 24
185.183.17.0/24 maxlen: 24
185.183.18.0/24 maxlen: 24
185.194.24.0/24 maxlen: 24
185.194.26.0/24 maxlen: 24
185.194.27.0/24 maxlen: 24
185.219.216.0/22 maxlen: 22
185.225.148.0/24 maxlen: 24
2a05:4ac0::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 31 Jan 2025 17:44:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:43:1d:8b:20:ec:85:6d:18:ea:23:17:1d:38:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Validity
Not Before: Jan 2 17:51:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94e94780997e862c0f3b92db498629afd294e7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:25:3b:e8:82:61:81:6c:09:f9:7d:fd:9c:1d:
40:ab:9b:d5:d5:8a:ac:cb:73:90:9d:c7:28:d7:c7:
d3:fd:0c:74:12:18:f3:2c:d6:c4:d3:15:a0:f0:26:
3c:70:75:20:5a:dc:5c:28:c1:96:20:75:27:8b:36:
77:4d:a4:f0:32:34:e7:f5:ec:12:2d:33:3c:ef:b2:
ab:91:b1:dd:79:66:b4:d9:3c:8b:db:1b:cf:31:bd:
f9:a7:99:96:e2:5a:e5:b2:a9:4e:cc:ba:b4:73:76:
85:d7:c2:57:9b:f2:73:ca:03:5e:f6:39:a3:b2:d9:
fd:0e:f3:bb:0a:22:c1:6a:23:a3:3b:17:39:a0:07:
07:0c:bd:c4:8e:c2:ef:82:b1:93:9c:0e:9d:fb:9d:
3d:e5:7f:40:00:81:7c:00:63:14:55:9e:3c:6d:3e:
d6:4f:23:e2:c1:5d:2a:fe:bf:70:88:2e:bf:c5:1a:
24:3a:c0:5d:2d:9b:9b:bc:f2:94:53:21:98:f9:bf:
1f:3a:02:24:0e:ce:8e:14:17:d0:81:38:f3:09:a3:
6a:90:96:9a:91:1b:c3:0e:3d:09:85:4c:c3:29:8f:
ec:c9:82:24:53:4d:c4:dd:8d:1f:59:00:6d:99:1c:
b4:4a:08:b6:6f:f6:44:47:20:9b:89:0a:24:19:e8:
5c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E9:47:80:99:7E:86:2C:0F:3B:92:DB:49:86:29:AF:D2:94:E7:D4
X509v3 Authority Key Identifier:
keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/lOlHgJl-hiwPO5LbSYYpr9KU59Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.192.0/24
185.112.78.0/24
185.163.166.0/23
185.178.80.0/22
185.183.16.0-185.183.18.255
185.194.24.0/24
185.194.26.0/23
185.219.216.0/22
185.225.148.0/24
IPv6:
2a05:4ac0::/32
Signature Algorithm: sha256WithRSAEncryption
48:9a:64:06:2e:5a:06:44:ae:5c:92:15:3a:20:4e:11:a9:25:
d0:67:6a:fb:28:33:43:3c:9f:d5:0d:c3:24:38:fd:9f:41:0e:
e4:4f:2b:b7:80:20:39:79:1f:92:f3:21:40:0a:2c:77:7a:c0:
d6:54:ed:65:5f:c5:0d:46:9d:88:b8:e0:a2:f0:21:b4:a2:28:
eb:17:7e:0c:02:e5:72:d1:ef:1c:f4:cd:3c:90:e9:55:4e:f1:
2e:cc:61:a3:e3:2b:31:4b:b3:8e:18:42:20:65:e6:3d:18:d0:
5f:82:f4:97:4b:b5:e8:68:cc:11:89:f7:8b:62:94:dd:43:8b:
ca:f4:45:69:fb:9f:43:59:a2:1d:e6:84:b4:f5:34:a3:5a:92:
c4:d7:5e:65:31:02:21:ab:65:b0:fe:c4:bc:4e:53:68:2d:99:
0c:22:a1:1d:3b:d9:98:b2:9d:16:15:e1:02:dc:94:09:1a:13:
d3:a9:da:ab:66:bd:24:8a:bd:0e:74:41:0e:13:a0:24:dc:bc:
3f:5c:67:a5:51:64:b6:d6:d7:c8:4a:a4:85:cf:24:da:61:53:
88:2c:ea:e4:f7:c4:af:49:a3:4e:70:81:82:dc:b7:30:5f:04:
d7:eb:fe:b6:32:f5:a1:0e:a8:c5:2d:56:b6:44:02:07:5d:4c:
11:15:fc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:39 2025 by rpki-client