Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/H6YlNdHPqIG1uKlWdWwCEhDWSvI.roa
File: H6YlNdHPqIG1uKlWdWwCEhDWSvI.roa (raw, json)
Hash identifier: TLzpqF6e3lbUsIYg0HPi4BoUqSzuOp2n61XEj/4Fb0E=
Subject key identifier: 1F:A6:25:35:D1:CF:A8:81:B5:B8:A9:56:75:6C:02:12:10:D6:4A:F2
Certificate issuer: /CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Certificate serial: 018E2CC14F9E6611F9546F6CD49EAC64134A
Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/H6YlNdHPqIG1uKlWdWwCEhDWSvI.roa
Signing time: Mon 11 Mar 2024 09:04:10 +0000
ROA not before: Mon 11 Mar 2024 09:04:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57348
IP address blocks: 185.67.148.0/24 maxlen: 24
185.67.149.0/24 maxlen: 24
185.67.150.0/24 maxlen: 24
185.67.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:53:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2c:c1:4f:9e:66:11:f9:54:6f:6c:d4:9e:ac:64:13:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Validity
Not Before: Mar 11 09:04:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1fa62535d1cfa881b5b8a956756c021210d64af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3c:ee:d5:c7:cf:b6:6e:ea:53:4a:a4:46:45:
fe:ab:d0:69:c1:93:c9:66:56:f0:20:7c:56:28:42:
62:2c:64:06:55:b5:81:0e:60:ec:30:90:cb:c5:72:
75:e5:20:16:34:83:40:a4:38:47:67:ac:3d:e6:1c:
c2:e6:92:12:7a:26:e3:a3:c2:6c:08:7b:f8:bf:fd:
1f:88:ed:e6:fb:ff:1b:23:98:88:75:b1:87:42:c3:
20:15:cb:6c:0c:bb:9b:b8:0d:59:19:ad:c4:e4:f7:
5c:41:4e:c2:18:c8:dc:23:c2:34:40:5d:36:a7:e2:
42:f5:e3:2d:de:ce:23:1e:fb:f0:01:eb:ff:c9:54:
96:ea:cb:d2:5c:d5:2b:1a:da:ff:e5:75:ae:f9:f2:
ff:32:82:9e:e8:55:4d:85:9f:f0:cf:14:a6:ea:e8:
d3:38:d0:d0:fd:fe:4f:5a:f0:6d:2e:fd:44:d6:cd:
e1:2b:c7:bf:42:7a:34:de:85:e4:71:c2:c6:03:7c:
51:fa:f8:bb:77:ab:6b:0c:04:37:d4:b0:53:bb:65:
1e:cd:3c:2e:b2:f8:36:a2:06:26:af:c9:13:ae:27:
de:9b:33:69:1e:56:e4:ee:ef:cd:d2:59:98:19:15:
87:8e:0c:c6:eb:0f:bd:ae:64:c7:30:cc:c6:00:80:
bf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A6:25:35:D1:CF:A8:81:B5:B8:A9:56:75:6C:02:12:10:D6:4A:F2
X509v3 Authority Key Identifier:
keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/H6YlNdHPqIG1uKlWdWwCEhDWSvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.148.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:15:8f:36:44:8a:04:d5:50:30:cc:5f:ad:46:19:dd:d3:42:
6f:a9:db:66:4b:e7:6d:9b:e7:82:20:65:4a:ac:28:32:41:79:
f2:7e:e0:8f:5a:3c:06:ee:0d:26:da:17:3b:a3:00:1a:c2:6a:
81:71:af:49:11:9b:80:6d:78:17:88:ed:5d:5f:8b:eb:5f:17:
13:8e:55:57:5d:b7:48:ac:e7:62:18:b2:b4:2f:2d:f9:e7:7f:
78:45:2b:9f:88:08:c9:0f:a7:1a:bd:ba:ab:9d:ae:cc:6a:1b:
de:dc:4a:b7:15:03:cd:a4:89:de:40:d2:e6:2d:49:78:f1:23:
e1:e1:b9:5f:5d:d0:27:fb:de:a6:4e:ee:25:30:93:dc:42:f7:
be:f9:48:23:f9:ec:b3:f5:be:03:45:5d:59:30:75:2f:e9:94:
8b:02:23:77:39:0a:f1:1d:b6:0e:04:a1:c7:1c:7c:7b:2c:9e:
32:65:77:1e:03:26:67:37:1e:e8:47:7b:ce:d8:ce:ce:46:bb:
cc:e2:7d:c8:12:b4:3e:79:75:bf:8d:f1:78:11:60:4f:e8:52:
11:58:fc:7d:89:2d:d9:69:6b:60:71:7a:22:01:f8:b9:29:37:
2c:1e:1a:9a:10:b6:d8:12:9d:86:d5:4c:4a:82:76:ce:d2:58:
6e:56:82:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:30 2025 by rpki-client