Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/9A0dWWF1b9SXhkJ02fTwurAEaQg.roa
File: 9A0dWWF1b9SXhkJ02fTwurAEaQg.roa (raw, json)
Hash identifier: t5Q85+FHCcai2OHyLDgaoF5nxhOPscCF6vBihJAAxb0=
Subject key identifier: F4:0D:1D:59:61:75:6F:D4:97:86:42:74:D9:F4:F0:BA:B0:04:69:08
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194A2C3299DD07DDDD8FFD3512F309879E9
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/9A0dWWF1b9SXhkJ02fTwurAEaQg.roa
Signing time: Sun 26 Jan 2025 13:18:06 +0000
ROA not before: Sun 26 Jan 2025 13:18:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50053
IP address blocks: 185.121.13.0/24 maxlen: 24
185.121.14.0/24 maxlen: 24
185.202.207.0/24 maxlen: 24
185.232.204.0/24 maxlen: 24
185.239.141.0/24 maxlen: 24
185.239.142.0/24 maxlen: 24
185.254.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 16:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a2:c3:29:9d:d0:7d:dd:d8:ff:d3:51:2f:30:98:79:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 26 13:18:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f40d1d5961756fd497864274d9f4f0bab0046908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:16:6d:b3:cd:aa:9b:c5:68:e8:13:6a:ae:37:
d1:54:ff:26:c1:e0:f0:d8:02:0c:30:3c:01:19:5b:
ab:bc:e4:21:67:f9:15:e8:f4:b0:d1:db:bd:e0:43:
f6:99:e3:18:18:42:74:4f:83:05:79:e4:d9:11:32:
d7:a6:f7:fe:a4:14:ec:7d:f2:ab:ed:1e:da:74:7f:
d2:2b:ca:d7:f9:f2:67:d0:16:df:d5:3d:92:d4:fe:
19:66:f8:40:80:22:27:6c:fe:44:5e:3d:55:4a:46:
e0:19:6b:d9:3d:22:65:34:f8:1e:7b:df:24:54:89:
49:ea:2a:a0:a4:b7:eb:f6:14:cb:83:80:fa:bc:ee:
59:58:4c:2b:85:95:a2:54:7a:16:14:2b:a0:80:72:
9d:d8:ba:d7:7b:56:08:e9:86:4d:48:60:5a:7e:c0:
d1:6d:c3:32:63:c0:b4:e3:75:4b:bf:21:05:67:df:
7e:1f:7e:27:f2:91:3c:af:ea:9d:6e:2b:66:b5:40:
23:51:18:06:b7:09:1f:44:22:5b:f8:98:fc:50:7f:
62:77:7e:c8:56:ee:f8:0a:84:b9:19:c1:ba:96:78:
02:c1:09:2d:29:7a:d4:a7:f4:67:0d:b4:c1:43:07:
a6:75:83:e5:bf:79:64:24:5f:10:44:61:6a:6a:f8:
ef:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0D:1D:59:61:75:6F:D4:97:86:42:74:D9:F4:F0:BA:B0:04:69:08
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/9A0dWWF1b9SXhkJ02fTwurAEaQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.13.0-185.121.14.255
185.202.207.0/24
185.232.204.0/24
185.239.141.0-185.239.142.255
185.254.158.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:db:30:4a:65:2a:8e:eb:90:bd:65:1c:f3:c3:9e:f8:26:93:
5d:7e:82:f6:eb:97:59:68:eb:e9:16:8d:dc:72:84:db:27:03:
b2:bc:d8:9f:22:f1:7c:8c:2e:57:d4:01:5b:93:fd:bc:76:36:
29:3c:bd:50:c0:28:09:aa:0c:ee:49:00:ce:8d:7b:d0:43:15:
ed:96:be:02:a6:e3:e9:ff:eb:f9:20:b9:82:5b:fe:8d:05:af:
c3:38:18:cc:58:fe:92:b2:91:e3:51:d3:8f:84:91:89:83:62:
74:77:3a:ec:fd:fe:11:39:f0:cf:b3:7f:59:af:5e:b5:54:72:
b8:fb:7d:02:0e:61:4e:18:c6:75:57:5c:f8:5b:21:0e:b5:72:
84:f9:e6:ef:27:a9:a5:89:e6:48:95:18:87:ac:9d:3f:4c:32:
be:ee:97:98:d9:c2:03:cc:50:5e:2c:df:5d:be:00:f1:c4:de:
b2:15:5f:6f:24:20:5a:19:32:75:99:44:bb:f5:07:72:43:c0:
10:7a:ec:17:30:a4:1b:c9:28:eb:88:ff:a7:0c:92:0d:7e:91:
ca:bc:41:da:02:8c:ae:ee:bb:58:30:7d:1c:37:98:5e:16:99:
a5:ef:7b:8e:b8:41:d5:9f:35:e9:d1:db:28:22:1a:fa:fa:17:
a8:69:fc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:25:51 2025 by rpki-client