Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/2I6TlEo7fe1zUGqWpjpYie-fD0A.roa
File: 2I6TlEo7fe1zUGqWpjpYie-fD0A.roa (raw, json)
Hash identifier: LxTfYNjhF+ycDS50AQnUP4HhajwC9JOPMYGMPRTcVis=
Subject key identifier: D8:8E:93:94:4A:3B:7D:ED:73:50:6A:96:A6:3A:58:89:EF:9F:0F:40
Certificate issuer: /CN=421e49e1c755fde038bd1875c7f397a568646014
Certificate serial: 018CCA2A69CF5F9C6420C0BE0E27F91DD06C
Authority key identifier: 42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/2I6TlEo7fe1zUGqWpjpYie-fD0A.roa
Signing time: Tue 02 Jan 2024 12:33:46 +0000
ROA not before: Tue 02 Jan 2024 12:33:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209985
IP address blocks: 185.170.66.0/24 maxlen: 24
2a0b:fbc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:69:cf:5f:9c:64:20:c0:be:0e:27:f9:1d:d0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421e49e1c755fde038bd1875c7f397a568646014
Validity
Not Before: Jan 2 12:33:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d88e93944a3b7ded73506a96a63a5889ef9f0f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3f:7c:d3:c0:42:6d:25:85:f5:d4:7e:60:c4:
98:91:cf:d9:8c:e7:70:53:82:95:0b:8f:17:65:12:
3a:1c:b9:e2:52:25:57:1b:37:22:89:3c:85:aa:ae:
08:7a:37:2c:a7:71:f1:ab:cb:87:70:ad:9e:a7:3c:
7f:c6:83:83:db:54:f8:06:23:1f:1e:61:d8:80:09:
01:94:aa:c9:63:02:4e:9f:5c:60:3b:4a:7c:3c:eb:
1a:74:e0:98:d5:fb:46:0d:55:18:d3:87:62:10:64:
51:cc:93:75:9f:82:1b:9f:9f:97:b0:9f:9c:f1:54:
f9:1b:94:2a:4a:5c:53:5d:45:a7:cb:27:25:b2:19:
df:b1:d8:75:2a:37:9f:63:e5:db:8c:04:25:e2:5e:
ea:e6:88:e2:31:09:17:fe:4b:e8:71:a6:20:a1:b7:
ef:d3:b0:90:d2:93:d5:e3:78:f1:0e:13:41:16:46:
e0:f6:c3:d9:8d:2a:ee:30:81:f9:c3:2e:94:2d:19:
dd:3a:8d:d7:f1:bf:85:5b:c2:e0:27:31:a9:6c:be:
4f:86:aa:0f:0b:4d:b4:52:a6:52:48:c9:14:05:ce:
28:bb:69:94:65:2b:c6:e3:60:14:a5:a2:e0:25:88:
f8:29:73:57:28:72:5f:9b:11:f2:d2:21:45:50:eb:
bd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8E:93:94:4A:3B:7D:ED:73:50:6A:96:A6:3A:58:89:EF:9F:0F:40
X509v3 Authority Key Identifier:
keyid:42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/2I6TlEo7fe1zUGqWpjpYie-fD0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.66.0/24
IPv6:
2a0b:fbc0::/32
Signature Algorithm: sha256WithRSAEncryption
6e:b5:4b:3d:84:d6:f5:7b:e0:fe:4a:ed:a6:16:56:47:e3:a2:
2a:7d:e1:f9:71:d0:f3:6f:76:4e:ea:5b:30:84:22:de:56:d3:
a2:a7:86:62:2d:ac:c4:9f:7f:42:1a:12:1b:e7:e9:90:5e:02:
0b:27:ee:a5:39:1c:2d:e1:01:4c:53:bc:fd:fc:84:14:90:9b:
41:e9:13:0d:c4:a0:66:3e:f2:a4:12:b5:33:c5:9d:54:a7:3b:
84:bd:c6:9e:ac:b8:9f:b4:74:52:bd:db:53:13:07:b6:b9:f2:
1e:cd:c2:c0:90:3a:8d:d1:ce:36:73:30:9f:54:1f:11:52:3e:
5c:57:be:f7:6e:7f:6d:a9:e7:dd:f1:05:6f:d1:da:7b:be:c0:
ad:47:e3:eb:10:ae:a2:97:0d:2e:07:9d:a4:ee:72:75:42:78:
39:b3:e9:de:85:9c:b1:23:87:19:13:93:05:c3:14:05:86:4e:
f9:74:9c:64:d8:6b:95:11:7d:fb:20:dc:93:37:f2:96:a2:e9:
0b:d8:c2:5f:f3:ba:20:e2:21:3b:1d:66:5b:05:37:17:7f:d5:
85:b3:27:e3:30:02:25:01:85:59:a7:04:20:f5:f0:86:3b:7f:
15:6b:8c:7e:7d:43:e6:bf:ae:0b:25:41:68:54:94:65:11:c8:
99:c4:56:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:04 2025 by rpki-client