Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/eeO-um7cExfDQ4DaixKLep4BfS8.roa
File: eeO-um7cExfDQ4DaixKLep4BfS8.roa (raw, json)
Hash identifier: LyIrq0qd7QSyXTJLApYnKdLUEKXRVk73MSO380qvd2Q=
Subject key identifier: 79:E3:BE:BA:6E:DC:13:17:C3:43:80:DA:8B:12:8B:7A:9E:01:7D:2F
Certificate issuer: /CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
Certificate serial: 01944632C25BF0EFD39CBB7B6E7908AD20E1
Authority key identifier: 96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/eeO-um7cExfDQ4DaixKLep4BfS8.roa
Signing time: Wed 08 Jan 2025 13:55:19 +0000
ROA not before: Wed 08 Jan 2025 13:55:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59771
IP address blocks: 185.205.24.0/22 maxlen: 24
185.205.24.0/24 maxlen: 24
185.205.26.0/24 maxlen: 24
185.205.27.0/24 maxlen: 24
2001:678:39c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 29 Jan 2025 00:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:46:32:c2:5b:f0:ef:d3:9c:bb:7b:6e:79:08:ad:20:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
Validity
Not Before: Jan 8 13:55:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79e3beba6edc1317c34380da8b128b7a9e017d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c5:7f:05:ec:f7:07:6e:68:ff:96:7d:61:ae:
a6:8a:eb:00:88:c7:70:8b:80:c5:c9:f6:3f:d7:93:
c9:ef:32:ee:c8:e7:27:ad:2d:1a:0d:a3:5a:2c:0d:
f9:99:d7:60:d4:9f:3f:4d:e7:bc:c9:17:00:e4:37:
4c:bb:ae:c8:49:48:a6:06:fe:7a:28:9b:00:a5:d5:
06:34:1e:40:31:fd:bc:7d:79:62:fa:c5:2b:fb:0b:
91:f5:06:03:fd:75:7e:5e:98:66:4f:24:ca:06:80:
bb:1b:74:f6:cf:34:91:5a:af:2e:f5:f2:52:05:6b:
70:86:c7:8b:da:b8:9d:13:1a:52:b0:5c:9c:17:99:
3e:85:12:4a:ac:0c:d6:36:12:0c:b7:ad:e9:10:69:
37:27:f3:4e:05:04:62:50:98:72:fe:42:7a:a3:b2:
1d:2d:37:04:87:2a:0b:f5:15:96:35:fc:70:df:c0:
7e:12:19:0a:7f:f3:66:2a:01:bf:f6:d7:dd:2e:ee:
41:28:24:bf:3e:8d:8b:b6:ae:09:3b:da:de:c2:2d:
6b:85:f7:8b:6b:57:b1:cb:32:6c:0a:78:99:02:9a:
52:f5:68:64:12:62:27:05:04:bb:c4:9f:dc:fe:68:
c0:7d:9d:19:61:3d:ba:3f:2f:d1:00:d8:22:9e:62:
c9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E3:BE:BA:6E:DC:13:17:C3:43:80:DA:8B:12:8B:7A:9E:01:7D:2F
X509v3 Authority Key Identifier:
keyid:96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/eeO-um7cExfDQ4DaixKLep4BfS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.24.0/22
IPv6:
2001:678:39c::/48
Signature Algorithm: sha256WithRSAEncryption
dd:a5:1c:62:e4:4a:5a:14:73:fc:42:53:f0:a3:87:37:69:b9:
e4:36:b2:bb:14:d9:d8:32:e4:02:60:9b:b5:e8:b6:e2:5f:65:
0a:28:84:17:e8:c4:03:28:45:f3:4a:9f:dc:33:a0:df:14:f8:
e7:5c:4f:d7:6e:71:92:13:c6:f5:b5:af:9e:d9:f9:ed:71:db:
ad:2b:6b:ae:fb:e3:76:71:68:c1:7c:39:3a:a4:dc:c9:47:04:
09:21:c8:fb:72:c3:b1:4d:69:91:c9:01:d0:aa:06:99:ac:ea:
09:6b:27:36:30:54:2f:74:8f:e0:36:f8:6b:11:c1:20:7f:06:
66:fd:9c:10:f9:62:5a:43:aa:66:95:1f:22:30:b9:76:b1:39:
d2:91:79:37:43:14:95:7f:19:8a:4d:6f:9a:2a:5d:2e:1c:75:
8d:31:0f:52:2c:33:1d:99:63:d6:b7:44:5d:cd:15:88:fb:df:
f8:b5:ac:1c:46:6c:cc:ed:93:af:0a:22:58:2c:9e:2a:b6:b7:
d3:c1:7d:f7:43:3b:bf:ee:de:fa:da:30:b6:af:e6:0d:27:d0:
bf:93:1a:f8:73:2e:ed:31:cf:b2:c1:67:b8:9a:3c:34:9f:15:
b9:b1:be:47:2a:a9:e5:d8:21:73:4e:4d:4e:30:4b:16:dd:25:
0b:06:05:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:13:16 2025 by rpki-client