Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/PpnBe3Bg_rESHK85TJam94b9H9g.roa
File: PpnBe3Bg_rESHK85TJam94b9H9g.roa (raw, json)
Hash identifier: FkwnL+Y/jzCN9zrRvY16moFZl9SFtez6ua+QtglEv78=
Subject key identifier: 3E:99:C1:7B:70:60:FE:B1:12:1C:AF:39:4C:96:A6:F7:86:FD:1F:D8
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B25125B4C8AC42EE895173170C686E
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/PpnBe3Bg_rESHK85TJam94b9H9g.roa
Signing time: Wed 01 Jan 2025 11:48:41 +0000
ROA not before: Wed 01 Jan 2025 11:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216445
IP address blocks: 85.208.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Jan 2025 19:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:51:25:b4:c8:ac:42:ee:89:51:73:17:0c:68:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e99c17b7060feb1121caf394c96a6f786fd1fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:65:87:a6:c4:33:f8:3e:64:b6:ee:97:f5:5a:
e4:50:2a:d9:9d:1c:8d:92:1d:6c:bb:9b:3c:a8:0c:
bd:1f:ab:68:fc:7b:3f:d1:5e:23:48:8b:4b:64:09:
f7:e3:ae:58:fb:17:39:86:fb:e0:00:64:04:de:27:
cb:b3:d2:05:b1:af:ed:3b:dd:9f:37:e4:06:3a:e5:
fe:17:0a:9a:08:56:4a:ce:45:40:6a:ad:e0:64:3e:
4b:76:fa:78:92:47:c7:da:1b:ca:30:a3:d9:51:21:
44:85:90:a2:26:f1:43:07:47:9d:2c:e4:83:e5:d6:
0b:b4:7a:39:c5:5f:8d:83:a6:bd:96:1e:22:28:25:
57:62:d3:93:e0:be:b9:62:41:bf:87:42:73:7b:78:
cc:10:35:95:b1:66:f9:35:bc:97:ab:89:a2:98:cc:
e4:52:a7:04:42:03:ea:16:6d:0e:46:40:df:db:a0:
03:2f:38:c5:35:58:c3:5f:12:d6:8c:05:69:c1:47:
13:9d:68:02:13:20:a0:ac:6d:c0:1d:58:17:8c:c7:
5d:ea:2f:ed:7d:44:4e:36:b2:17:c7:3a:56:10:42:
c7:c0:c0:bd:d7:b7:45:c5:15:b9:de:49:b1:fb:8e:
b5:7c:f7:51:e5:ea:da:07:03:16:ad:64:3f:b2:da:
d5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:99:C1:7B:70:60:FE:B1:12:1C:AF:39:4C:96:A6:F7:86:FD:1F:D8
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/PpnBe3Bg_rESHK85TJam94b9H9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.106.0/24
Signature Algorithm: sha256WithRSAEncryption
59:a6:b8:ec:90:7d:96:36:b9:37:f2:8c:1d:e6:20:49:95:50:
80:9a:5e:bd:1a:97:c1:33:31:53:18:e5:21:42:cc:d7:f5:cb:
a2:c3:05:42:78:bb:b4:4b:eb:f3:9e:af:ab:48:2b:49:9a:04:
b4:f2:46:cd:db:d8:57:93:83:04:2a:82:71:76:5b:7d:73:b1:
90:49:af:40:c1:dc:5e:fe:28:e7:9c:b6:e5:69:0d:2b:1c:58:
13:39:f2:39:d8:a7:06:83:e4:69:1b:a3:45:c4:08:ea:a5:50:
82:3a:48:68:d2:56:0f:bf:8c:c6:11:be:3a:f2:f7:74:1b:9a:
c6:b6:a0:14:e9:64:5d:c2:fd:0c:43:40:5a:05:9a:15:a3:f7:
95:69:83:ed:53:53:69:f0:ea:f6:28:7a:37:fc:b5:4a:9d:d6:
f3:aa:f3:3f:59:10:cc:bc:49:a9:85:dc:8b:44:fc:16:2a:18:
b6:36:19:fc:b2:0d:d0:33:2b:a2:c7:dd:07:22:3a:b9:43:4c:
57:a8:67:01:ad:a5:92:69:01:6e:6e:d4:0a:d6:ad:20:8f:b0:
f9:89:7f:42:fd:07:35:ec:58:61:a3:fb:81:d2:75:04:d3:42:
e5:f2:f8:56:2f:63:ab:66:73:87:49:ac:a5:0c:56:ec:f7:1d:
db:4b:d9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:41:19 2025 by rpki-client