Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/84z33H9-xcK8yxFVt0jHUPEwjyg.roa
File: 84z33H9-xcK8yxFVt0jHUPEwjyg.roa (raw, json)
Hash identifier: pudE8T6L6397Lm9ZY2DDaEEMu7ko5GgZw080UzQNLKo=
Subject key identifier: F3:8C:F7:DC:7F:7E:C5:C2:BC:CB:11:55:B7:48:C7:50:F1:30:8F:28
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194222053DBFAC9F27D57A3A529A9E77DCF
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/84z33H9-xcK8yxFVt0jHUPEwjyg.roa
Signing time: Wed 01 Jan 2025 13:48:51 +0000
ROA not before: Wed 01 Jan 2025 13:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214654
IP address blocks: 185.206.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 14:51:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:53:db:fa:c9:f2:7d:57:a3:a5:29:a9:e7:7d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f38cf7dc7f7ec5c2bccb1155b748c750f1308f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:53:9a:1f:e9:1c:46:41:0d:88:f1:b3:7b:40:
f3:ce:85:74:e9:9b:43:b2:90:40:92:fc:5e:d2:e7:
4d:82:75:a5:9c:cf:5f:d8:39:94:e4:77:60:7c:b3:
93:b2:e4:a1:1e:8c:91:86:ff:63:c4:3b:a0:1d:09:
5d:60:a1:34:4c:05:d1:69:ae:d9:91:e2:ec:e4:14:
55:c9:7b:92:6c:5d:3e:c5:fc:ef:da:9b:d0:b2:d9:
ba:51:dd:0d:c4:75:86:f7:63:f2:f8:84:b5:81:0c:
23:f6:bc:77:b0:c1:df:3c:47:77:77:2c:06:99:c7:
3a:5b:5f:94:f8:58:4a:d8:b4:29:aa:6b:8a:95:2e:
6b:e4:10:48:74:af:36:1f:be:3d:e2:ee:48:95:57:
b0:0a:dd:29:9c:c8:99:57:36:41:f9:5a:e7:ef:3d:
11:0b:00:f2:77:45:e7:0e:3e:39:26:03:3d:94:01:
c1:f2:35:97:4f:0a:e9:a0:d4:9c:bc:f7:42:a9:c2:
10:dc:5c:75:7e:7b:d5:de:15:66:e9:d7:a5:f2:62:
96:2a:43:3b:22:0c:3a:f8:8f:26:a2:b8:04:25:08:
c3:f1:57:e3:f4:f1:03:65:37:28:fc:bd:5d:fe:c7:
a5:9b:db:0b:eb:0e:9a:64:52:d4:70:eb:1a:60:58:
62:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8C:F7:DC:7F:7E:C5:C2:BC:CB:11:55:B7:48:C7:50:F1:30:8F:28
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/84z33H9-xcK8yxFVt0jHUPEwjyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.250.0/24
Signature Algorithm: sha256WithRSAEncryption
04:cf:40:ee:83:2d:2b:e6:15:ba:04:f4:84:30:b7:b3:b2:a6:
16:ae:06:52:5c:f7:00:c7:43:1b:e0:e2:20:a0:fa:e4:46:75:
33:45:f2:03:7c:f3:6f:7f:63:23:27:9e:15:e6:b5:30:48:8f:
f0:a5:df:f9:06:3b:00:70:d6:53:8f:5e:7a:93:62:8a:9e:e6:
87:cd:5c:cc:0b:28:12:c3:a5:0f:d7:08:42:c8:fb:f3:ec:9d:
28:ab:9b:06:88:3b:bb:90:1c:5e:b3:61:90:da:e5:65:0a:a0:
cb:60:1f:6b:5c:58:6b:56:42:20:c7:8e:90:65:67:79:47:93:
d0:1f:71:37:14:8e:0c:9e:c0:02:78:68:7d:82:ed:23:1a:5b:
e3:a8:83:21:2a:dc:33:be:42:0f:b5:a9:05:98:f5:fd:d4:17:
6d:81:e4:3d:33:87:35:ce:66:a4:c8:15:45:29:11:aa:8f:d5:
89:a2:26:91:e1:e9:41:04:b4:67:46:bf:a4:5b:75:1b:64:e7:
f0:89:02:88:9c:71:c2:6a:3f:c9:f5:e6:8d:87:a3:aa:81:f9:
60:7f:64:63:63:18:e8:28:60:f0:97:43:9c:57:97:e0:21:73:
95:b7:c0:e8:b8:69:78:83:28:a5:dd:e6:be:c5:07:c1:cd:c3:
fa:f5:3e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:37:43 2025 by rpki-client