Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/K5o5NDhMgEzaXHJDr2sWJq5bZYY.roa
File: K5o5NDhMgEzaXHJDr2sWJq5bZYY.roa (raw, json)
Hash identifier: bROJbWlGBa/EQzAwq+AhnyRITf6yIrKSrPT+yKv3WGk=
Subject key identifier: 2B:9A:39:34:38:4C:80:4C:DA:5C:72:43:AF:6B:16:26:AE:5B:65:86
Certificate issuer: /CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Certificate serial: 018CC7274C287BB6ED149AE1F85224CAF3E7
Authority key identifier: 30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/K5o5NDhMgEzaXHJDr2sWJq5bZYY.roa
Signing time: Mon 01 Jan 2024 22:31:30 +0000
ROA not before: Mon 01 Jan 2024 22:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.64.6.0/24 maxlen: 24
2a10:2307:fffd::/48 maxlen: 48
2a10:2307:ffff::/48 maxlen: 48
2a10:2307:fffe::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:4c:28:7b:b6:ed:14:9a:e1:f8:52:24:ca:f3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Validity
Not Before: Jan 1 22:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b9a3934384c804cda5c7243af6b1626ae5b6586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:14:3a:79:53:ce:7f:51:6f:42:ac:1d:d4:77:
5f:f2:e8:d9:b7:87:ab:e6:a2:7e:af:39:63:43:db:
9a:61:2f:05:79:ac:3c:9a:3d:7c:45:90:3a:95:b3:
21:1e:a1:84:c9:65:00:2c:61:69:78:e4:19:a8:a4:
7b:ac:2b:5c:ee:85:5d:65:86:1e:5c:c1:84:b1:e6:
d0:15:cc:47:6c:cb:1a:99:2a:88:13:75:a5:5c:d3:
d2:9f:f8:fc:1b:f0:16:fb:0c:77:6e:56:c1:57:4a:
04:16:30:14:0f:3b:03:aa:64:f8:92:1f:23:04:0e:
cd:7d:90:46:81:56:6a:17:06:45:cc:73:f2:aa:5c:
49:08:71:cc:fe:b4:06:7f:b1:60:03:01:31:70:76:
7f:c8:e1:2d:4a:f0:3a:20:53:44:0e:7a:4b:55:36:
47:6c:fb:41:4e:c9:52:57:7a:d4:7c:16:69:82:5e:
24:1d:8e:5e:28:12:9f:e0:b7:2d:db:74:c0:61:aa:
93:48:b6:60:0b:01:c0:95:0d:bb:75:64:ff:7d:f1:
88:96:a3:79:24:00:90:b9:78:85:6d:33:53:86:76:
d0:5b:ef:c8:29:80:a6:f5:33:f7:31:cd:94:65:67:
ba:e9:8c:eb:26:24:51:e0:56:a0:33:64:f6:0f:97:
55:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9A:39:34:38:4C:80:4C:DA:5C:72:43:AF:6B:16:26:AE:5B:65:86
X509v3 Authority Key Identifier:
keyid:30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/K5o5NDhMgEzaXHJDr2sWJq5bZYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.6.0/24
IPv6:
2a10:2307:fffd::-2a10:2307:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
50:8d:84:1c:d3:e1:ae:9d:ab:7c:d5:70:1b:40:bf:6f:31:81:
62:da:6b:dd:1b:1f:cc:d6:fe:a5:2f:b5:54:4b:15:73:c5:d8:
00:13:32:ce:89:87:f1:ab:c5:c1:b2:b7:76:20:e2:67:30:2b:
b0:35:41:bc:a8:5a:b6:42:c5:aa:e4:4d:42:b4:f5:7e:ac:70:
d4:bd:89:8f:87:6b:49:fa:c0:1f:d3:1c:a4:ca:cf:37:f9:c4:
74:e6:68:1e:da:ec:8f:ef:6b:92:c7:d4:4c:e6:17:0d:5f:02:
c1:b7:4c:64:c1:9a:66:99:16:0d:ac:37:d0:d2:33:83:b0:28:
d5:34:0b:47:6e:4b:08:eb:19:ea:a2:37:05:b9:5a:3f:59:70:
0b:70:a1:a2:dc:86:64:85:30:d9:4c:49:77:6b:b6:dc:97:a7:
fc:03:9c:01:2f:f4:ea:b0:d5:73:95:98:61:6c:0e:b8:7b:4a:
48:96:3a:29:a6:86:b5:6d:58:de:f2:c1:08:54:d2:db:95:e7:
1b:20:3f:26:4e:fd:a6:6b:a5:32:65:e4:54:17:de:7d:71:d7:
9f:4c:d2:75:9a:a2:0f:f4:7f:33:c6:2d:7b:0c:d7:56:30:27:
08:3f:c0:61:cd:84:30:0b:8c:3b:79:a4:7c:9d:4f:aa:b8:74:
06:95:6c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:45 2025 by rpki-client