Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/TCXfWrR82wb1_YrXEKsQezDs-qc.roa
File: TCXfWrR82wb1_YrXEKsQezDs-qc.roa (raw, json)
Hash identifier: 88QzGhs3QdXuya1fGynIDBu0XSkVOgyHh8cRT0dQ4dE=
Subject key identifier: 4C:25:DF:5A:B4:7C:DB:06:F5:FD:8A:D7:10:AB:10:7B:30:EC:FA:A7
Certificate issuer: /CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
Certificate serial: 019421B18DD0A4EE81D43707E3A1598579B2
Authority key identifier: 3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/TCXfWrR82wb1_YrXEKsQezDs-qc.roa
Signing time: Wed 01 Jan 2025 11:47:51 +0000
ROA not before: Wed 01 Jan 2025 11:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205225
IP address blocks: 185.117.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 28 Jan 2025 09:57:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:8d:d0:a4:ee:81:d4:37:07:e3:a1:59:85:79:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
Validity
Not Before: Jan 1 11:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c25df5ab47cdb06f5fd8ad710ab107b30ecfaa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:b3:f2:87:0c:cb:62:c8:40:a0:45:2a:41:
1c:9d:11:b0:a6:b1:20:b6:da:b8:fd:c6:1e:bc:8d:
18:6e:ac:33:0a:7e:3b:e2:b5:79:86:a0:30:e9:c0:
c8:b0:c7:c1:12:a1:36:8b:83:96:f8:ea:76:21:9d:
6d:b2:be:ef:45:fc:14:1f:73:3a:d1:8a:38:9d:92:
8b:74:4b:d3:20:ef:d4:49:80:53:54:eb:d6:56:f5:
59:1b:4c:bc:e2:b7:ad:12:2d:14:bb:03:50:65:0d:
7f:bc:f3:d0:5f:55:d4:74:2a:32:4b:07:09:8b:e5:
78:5c:f8:cb:da:c5:fb:f4:0d:9a:7c:15:ad:8f:62:
d4:ae:78:23:d6:b4:80:26:4a:b4:85:3f:20:bd:92:
51:c3:db:f5:80:e5:1d:df:c5:82:47:98:86:bc:90:
a3:f0:45:92:35:e5:2c:bb:a3:24:3f:7a:95:5b:b1:
a2:a3:df:77:d3:ff:59:9d:a3:c6:c5:c2:b8:79:2d:
88:88:7f:89:99:7e:83:d6:a9:24:0d:32:d4:b7:b1:
38:3a:73:8e:3a:8e:72:97:dc:2e:f3:9a:ef:98:58:
3f:3c:8c:b2:49:fc:fe:ab:c7:d3:7a:e3:b7:1c:74:
69:0f:90:55:50:8b:60:65:e2:b8:7a:ea:28:9c:88:
5e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:25:DF:5A:B4:7C:DB:06:F5:FD:8A:D7:10:AB:10:7B:30:EC:FA:A7
X509v3 Authority Key Identifier:
keyid:3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/TCXfWrR82wb1_YrXEKsQezDs-qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.60.0/22
Signature Algorithm: sha256WithRSAEncryption
18:21:82:07:ee:db:ef:f4:06:25:92:9f:69:7f:85:8c:1c:61:
17:a8:08:c3:42:4b:9d:fe:20:b7:df:33:00:8c:cc:4b:bd:b7:
5f:27:f8:c0:39:4e:4d:ea:74:cc:5c:1b:7c:f3:92:e8:d3:5e:
07:f8:2f:7c:9a:ec:ed:8f:38:b6:98:65:56:19:aa:32:86:5e:
72:d4:46:30:0c:22:2b:bb:d7:f4:40:e6:36:1f:c4:3a:48:c9:
5f:b2:fd:78:ac:d8:3b:28:87:d6:a7:fe:b1:69:c4:5a:96:2d:
09:5e:3a:fa:16:63:76:1e:ad:99:50:6a:94:5c:6c:f5:2c:e7:
9a:ce:0a:a9:77:62:f5:e8:1c:65:bb:bb:06:15:56:ab:02:e0:
16:6b:3e:69:68:1d:56:6c:3e:c9:23:d4:76:e1:02:28:a1:cc:
d3:11:c2:c6:4a:c3:e7:81:58:76:61:f4:d6:33:6c:80:f2:91:
bc:57:fc:61:19:74:4c:d8:0a:41:74:bf:f0:6c:34:ae:77:d3:
18:c2:0f:76:da:6c:b1:e4:06:98:71:96:bc:10:64:dc:c8:b7:
9b:0d:a6:4e:de:b2:60:b0:e4:34:27:c0:61:8a:59:09:47:f0:
9e:c8:6a:a3:31:28:95:0f:cb:ee:9b:67:68:1b:3c:9d:c8:f8:
e9:ba:55:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:58 2025 by rpki-client