Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/b0kCRa4GvI8S6GtHtepy4En9XSc.roa
File: b0kCRa4GvI8S6GtHtepy4En9XSc.roa (raw, json)
Hash identifier: bXz4Ab22EGiQhmQvJfSUqvZAOCAdRreKT+ZOvDdQurs=
Subject key identifier: 6F:49:02:45:AE:06:BC:8F:12:E8:6B:47:B5:EA:72:E0:49:FD:5D:27
Certificate issuer: /CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Certificate serial: 018CC349180FF37963669A6E8DF69AC08E2D
Authority key identifier: B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/b0kCRa4GvI8S6GtHtepy4En9XSc.roa
Signing time: Mon 01 Jan 2024 04:29:56 +0000
ROA not before: Mon 01 Jan 2024 04:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203315
IP address blocks: 92.53.240.0/24 maxlen: 24
92.53.243.0/24 maxlen: 24
92.53.241.0/24 maxlen: 24
92.53.244.0/24 maxlen: 24
185.64.12.0/24 maxlen: 24
92.53.242.0/24 maxlen: 24
2a00:85c0:4::/48 maxlen: 48
2a00:85c0:5::/48 maxlen: 48
2a00:85c0:3::/48 maxlen: 48
2a00:85c0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:47:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:18:0f:f3:79:63:66:9a:6e:8d:f6:9a:c0:8e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Validity
Not Before: Jan 1 04:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f490245ae06bc8f12e86b47b5ea72e049fd5d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:35:3c:d4:6b:41:89:2a:72:a1:9f:d1:22:
89:b7:3e:a3:2c:2f:e1:44:1f:1e:ce:fc:c4:85:0c:
60:ea:fb:18:45:96:02:4c:d5:89:c2:61:81:69:2f:
78:a0:ca:5e:7b:21:65:3c:9a:d4:a8:fd:d0:cb:0a:
43:4a:84:8c:18:51:a3:c7:f1:bd:70:1d:00:6a:58:
7d:53:53:7e:78:79:91:47:6c:86:47:fc:a0:15:63:
b4:bf:4b:28:3e:a1:26:a1:e1:c8:eb:6c:6c:bd:94:
ab:77:a3:61:00:b0:b6:16:c3:f8:4e:c1:ce:ee:04:
a7:7b:6d:9d:bf:4c:3d:d9:33:1b:cb:a4:be:dd:56:
24:ee:7e:be:e0:bc:cc:81:4e:94:f6:a1:a9:fd:18:
fb:ab:a0:58:3a:6d:86:cb:09:c9:f2:7b:f6:eb:19:
53:07:e9:0d:65:19:96:c9:b9:f6:3c:f2:04:c8:6c:
e4:96:16:d0:a8:b7:83:3b:bd:96:e3:89:59:dc:36:
7b:92:16:17:2d:e6:0b:47:e7:4e:11:fc:65:f2:ca:
5b:ef:60:6e:8e:ee:75:f1:ad:32:ed:d2:20:0e:30:
42:dd:1f:44:da:31:01:60:d2:b1:a9:72:ab:4b:f4:
e9:3b:92:63:5d:1c:3c:93:05:d1:84:65:19:80:5f:
51:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:49:02:45:AE:06:BC:8F:12:E8:6B:47:B5:EA:72:E0:49:FD:5D:27
X509v3 Authority Key Identifier:
keyid:B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/b0kCRa4GvI8S6GtHtepy4En9XSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.240.0-92.53.244.255
185.64.12.0/24
IPv6:
2a00:85c0:1::/48
2a00:85c0:3::-2a00:85c0:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
75:8a:45:5c:3c:8f:d6:27:f3:5c:c0:e6:94:59:3e:2a:37:ea:
70:75:70:ff:d7:77:67:3e:fa:fd:68:c6:34:6a:da:d9:48:38:
2e:36:65:99:56:2f:de:3a:a6:0f:b6:c3:2d:5b:bf:7f:18:4b:
d0:c9:30:c8:76:56:99:2a:22:34:f1:ff:73:10:48:77:0f:0a:
01:af:26:5b:8d:cd:44:e8:68:3e:71:d5:73:f3:77:d4:5d:c3:
3b:be:10:6c:b2:a9:cd:16:d8:a2:20:fe:a9:88:93:b5:84:c9:
6c:dd:67:2d:8e:5b:d1:03:91:9d:3c:ec:08:b6:dc:19:7f:2a:
dd:e9:f6:ff:15:3b:af:de:bf:b4:f6:04:b4:33:f5:f2:ac:aa:
ad:d1:06:34:e3:a1:97:b3:69:d5:72:f6:76:39:56:2f:cd:6c:
b2:ce:22:60:86:2c:92:72:14:f8:85:a3:a9:d0:2e:c1:0b:11:
63:1f:65:ca:55:86:af:7e:d3:f6:2c:ff:a5:7a:91:2f:d7:d6:
5e:7f:12:69:8e:26:73:2d:59:91:24:c7:d0:96:dd:89:d6:22:
dd:be:0a:67:de:0a:e2:8c:81:02:49:01:37:d4:fa:76:6f:d1:
c7:cf:c3:f8:94:e6:7b:4a:b8:32:af:83:63:57:7e:fe:1f:0d:
28:bc:ea:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:30:32 2025 by rpki-client