Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/_k-_E262LJTA0hIQUB1-IZxZHBU.roa
File: _k-_E262LJTA0hIQUB1-IZxZHBU.roa (raw, json)
Hash identifier: WT8v7YhEcQcpYnr2iZj4Bckge97nVpB486yzSekZcYE=
Subject key identifier: FE:4F:BF:13:6E:B6:2C:94:C0:D2:12:10:50:1D:7E:21:9C:59:1C:15
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 01939C56FAD8B559C618FECE05EB353B01A1
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/_k-_E262LJTA0hIQUB1-IZxZHBU.roa
Signing time: Fri 06 Dec 2024 14:19:26 +0000
ROA not before: Fri 06 Dec 2024 14:19:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50129
IP address blocks: 185.104.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9c:56:fa:d8:b5:59:c6:18:fe:ce:05:eb:35:3b:01:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Dec 6 14:19:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe4fbf136eb62c94c0d21210501d7e219c591c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:82:5c:59:0d:b6:1b:1b:de:b3:1b:a4:bd:8a:
4b:17:e2:cc:49:1b:d9:de:9b:2d:f4:f8:e3:79:41:
8f:66:e2:ca:84:27:41:21:61:ae:e7:8a:d6:2d:d7:
ab:a7:89:2f:a5:47:f2:fb:43:7e:92:ab:12:ae:a7:
be:bd:3e:16:b8:e3:11:ae:c4:2d:26:c1:ad:27:26:
e6:17:ea:4e:00:70:89:96:4b:34:f7:bb:84:02:70:
ce:03:cd:e4:28:16:69:d2:ce:06:03:ad:c6:14:c0:
fc:28:15:ee:18:41:d7:d9:e5:9d:54:8a:76:76:35:
d7:ea:54:b8:c5:9c:c0:d7:93:28:5e:fc:78:0f:ce:
7d:58:20:73:fd:bb:af:43:ba:4b:ba:5c:bf:d3:2f:
a9:51:6a:4e:52:60:c2:ab:40:ef:83:35:2a:58:6c:
c2:38:bc:87:9e:88:14:d5:57:5f:e2:aa:60:e5:27:
21:34:30:e7:d2:4b:fd:36:1b:5d:69:92:97:35:ef:
22:25:79:0f:69:fa:84:2f:93:f5:04:1e:83:9b:5a:
98:96:4a:1c:58:bc:f5:a7:f3:9d:34:37:42:0e:ad:
f5:d9:9b:0a:8b:7a:a3:27:ac:2b:5e:4c:ea:30:f5:
82:f4:0d:86:47:71:2e:8b:d3:de:9a:c3:c9:58:11:
30:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4F:BF:13:6E:B6:2C:94:C0:D2:12:10:50:1D:7E:21:9C:59:1C:15
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/_k-_E262LJTA0hIQUB1-IZxZHBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.153.0/24
Signature Algorithm: sha256WithRSAEncryption
11:46:0d:45:cb:d1:76:9a:d8:ef:dc:9b:9d:b2:33:e1:88:6e:
6e:a5:2b:b6:e6:58:a4:1c:c9:e2:1b:0e:00:64:b1:2e:f2:39:
89:99:54:3d:4b:48:55:c3:b8:7a:1e:76:0e:f3:7f:20:71:27:
49:67:8b:af:03:b0:50:a5:af:ae:a1:2f:31:a0:5e:3a:18:d1:
ba:4e:23:da:e6:10:c3:50:6e:a9:e3:01:53:8a:14:8f:be:57:
45:94:0b:98:0b:f4:4b:da:98:b6:78:db:eb:27:64:c8:d2:af:
5b:68:b9:69:05:3d:17:ad:46:44:49:cb:a7:f7:a4:13:6d:df:
d6:37:45:13:6e:3a:32:4b:a6:32:76:5e:05:04:e1:0a:f3:5f:
0d:f8:c3:94:96:66:af:e9:d7:b7:81:5c:b2:f6:fe:3e:24:69:
7c:1b:e6:26:15:ce:e2:e8:97:56:45:d0:d5:76:30:f5:d8:50:
41:ed:17:b2:ad:b5:17:ec:2d:fa:40:d5:d2:eb:ab:6c:42:db:
3d:33:c7:c9:d2:46:0e:8b:c4:f7:78:00:a7:8e:9d:03:93:0c:
a9:e0:17:1f:4a:39:91:cf:30:0b:3b:d8:41:78:ae:9b:f7:5e:
d8:0f:77:1c:b2:68:70:92:ec:b3:4b:d0:c2:d3:41:7d:5c:37:
3f:80:a5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:10:14 2025 by rpki-client