Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/EWGXBCs0A1PIu2GilpM8uKF-E5o.roa
File: EWGXBCs0A1PIu2GilpM8uKF-E5o.roa (raw, json)
Hash identifier: H78hy60jmxhN0tPQbqI7oExpNcymn6FjFi6wduopsaM=
Subject key identifier: 11:61:97:04:2B:34:03:53:C8:BB:61:A2:96:93:3C:B8:A1:7E:13:9A
Certificate issuer: /CN=6de8ac4959725e4fed1c330d22b5cd060241a514
Certificate serial: 0194A741FAE1517FAFC28BA7494248645695
Authority key identifier: 6D:E8:AC:49:59:72:5E:4F:ED:1C:33:0D:22:B5:CD:06:02:41:A5:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beisSVlyXk_tHDMNIrXNBgJBpRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/EWGXBCs0A1PIu2GilpM8uKF-E5o.roa
Signing time: Mon 27 Jan 2025 10:15:06 +0000
ROA not before: Mon 27 Jan 2025 10:15:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208484
IP address blocks: 185.206.230.0/24 maxlen: 24
2a11:9c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 31 Jan 2025 06:46:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:41:fa:e1:51:7f:af:c2:8b:a7:49:42:48:64:56:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6de8ac4959725e4fed1c330d22b5cd060241a514
Validity
Not Before: Jan 27 10:15:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=116197042b340353c8bb61a296933cb8a17e139a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:30:93:7b:d1:ce:05:c1:68:70:ff:30:aa:b9:
57:25:9e:79:71:52:60:a1:9f:af:90:e7:bc:bb:3e:
72:24:89:74:84:14:4e:c1:99:07:82:43:b8:c4:73:
3d:aa:49:99:21:db:5a:e8:9c:60:3b:b4:2e:88:c3:
c0:72:00:f2:27:ac:c9:85:00:07:5b:d3:5a:2f:39:
be:12:fa:f3:33:99:05:32:6d:1c:d1:8f:fe:ba:84:
d3:b3:8c:61:2e:25:38:2b:14:26:14:49:1c:8c:34:
2f:00:cd:4d:22:dc:db:8b:d0:11:f2:61:bb:47:c1:
b0:fc:44:2d:52:3f:5e:01:c9:eb:0a:2b:ba:80:05:
57:eb:15:f3:92:51:fb:e9:a9:69:64:2a:13:b6:97:
e7:b1:b9:05:f8:64:db:0c:8e:04:27:10:1b:20:8e:
5b:c4:9d:2f:26:26:3b:8b:b9:e2:7a:1e:36:0f:f7:
6b:be:a0:7e:5c:86:d6:9c:3c:12:ce:36:ca:80:59:
40:fb:d3:3e:12:c6:6c:62:eb:4c:6f:7e:10:d8:df:
39:0b:09:40:c3:34:71:6c:96:28:c9:fd:4d:ed:c9:
43:5d:29:5b:fd:1b:45:1a:10:57:0e:14:67:07:db:
c0:3c:2c:f9:65:38:2c:3f:c8:c7:8d:38:5f:4d:0e:
fc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:61:97:04:2B:34:03:53:C8:BB:61:A2:96:93:3C:B8:A1:7E:13:9A
X509v3 Authority Key Identifier:
keyid:6D:E8:AC:49:59:72:5E:4F:ED:1C:33:0D:22:B5:CD:06:02:41:A5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beisSVlyXk_tHDMNIrXNBgJBpRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/EWGXBCs0A1PIu2GilpM8uKF-E5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.230.0/24
IPv6:
2a11:9c0::/32
Signature Algorithm: sha256WithRSAEncryption
86:10:16:82:ad:44:17:db:66:8c:1c:ae:44:40:e7:5d:66:af:
8d:de:86:e4:c3:ee:ea:9d:d4:99:1b:7a:af:99:ce:44:39:71:
88:17:8b:33:f0:94:77:7d:ed:64:59:c6:c4:08:13:e3:cd:68:
d1:2b:3b:62:d1:44:cc:ee:8b:99:92:75:55:78:7b:7e:86:ad:
67:61:bc:01:0d:83:11:8f:6a:c9:11:da:aa:8a:e4:71:20:3a:
38:5c:4b:f3:26:84:21:42:c4:81:35:75:56:b6:f3:7b:1e:34:
6c:eb:e5:ea:03:8c:23:07:f7:0c:b1:70:ae:a6:a3:75:15:13:
9b:47:35:df:b2:ed:82:85:43:8d:31:0b:0f:78:1a:f9:cb:54:
31:4c:5a:95:2b:e4:11:7d:d6:e9:08:7e:5d:e3:c2:c9:41:86:
b2:e8:57:f8:65:57:ad:08:ff:af:fe:28:68:f2:3a:7d:7c:ff:
f2:53:e5:40:79:e4:13:0b:59:4c:6f:07:ec:14:6d:5d:31:77:
57:cb:39:4e:3a:c8:8e:d9:97:ab:27:00:f3:7b:06:81:54:b2:
f6:92:20:db:ad:19:1d:3a:21:54:45:2c:51:8b:30:ea:8a:f2:
3d:03:c4:e0:89:aa:c6:21:70:91:e9:24:be:72:b6:41:82:cb:
96:37:a1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:13:26 2025 by rpki-client