Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/D6lB7utOqZmYVNDsY3Ci5n6ETk4.roa
File: D6lB7utOqZmYVNDsY3Ci5n6ETk4.roa (raw, json)
Hash identifier: V6gr7yjW/nspoD3CYaUIil1ABJKuohoRLSHFf38Ks/E=
Subject key identifier: 0F:A9:41:EE:EB:4E:A9:99:98:54:D0:EC:63:70:A2:E6:7E:84:4E:4E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01942220348D7F691B129020DBAC5D8C45C5
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/D6lB7utOqZmYVNDsY3Ci5n6ETk4.roa
Signing time: Wed 01 Jan 2025 13:48:43 +0000
ROA not before: Wed 01 Jan 2025 13:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151872
IP address blocks: 185.214.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 15:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:34:8d:7f:69:1b:12:90:20:db:ac:5d:8c:45:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0fa941eeeb4ea9999854d0ec6370a2e67e844e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:45:78:5b:03:31:9a:e6:3b:3c:d4:3e:f6:55:
00:c3:6f:e6:29:0a:79:9c:5d:05:0d:db:ca:4e:b3:
05:51:a0:86:08:ae:b0:3c:e9:80:40:7e:e0:b1:49:
64:a2:f9:3a:8e:a8:91:bf:54:ac:fa:7b:6e:f2:56:
80:70:17:be:6b:c9:0e:0e:f7:54:51:ab:1b:16:8f:
ee:0c:22:b4:d0:96:33:a3:f1:9e:d3:a9:76:2d:3c:
dd:39:a8:49:04:1c:3c:3d:e6:e6:87:9a:d9:fc:32:
f3:18:5b:e5:f3:b3:fb:03:3d:55:9a:5a:de:4f:a6:
3c:79:b8:94:f0:8d:44:7c:3b:f5:61:46:31:c5:b3:
11:62:0a:5b:e3:12:f8:23:68:e2:b6:0f:0e:80:d6:
8f:9f:f1:51:c2:a7:4e:60:03:3b:5b:f6:cd:59:08:
b3:9d:a4:10:24:c6:88:5d:5e:c9:ac:ae:a2:dd:67:
f3:b8:e0:4a:ad:85:62:b1:cc:3d:7b:bf:a1:87:3f:
74:96:5e:4f:59:02:ef:b5:79:37:a1:ff:e0:72:e0:
1e:f7:75:c6:1e:cf:b7:75:a6:d6:dd:1a:c0:d3:0c:
9c:aa:13:7f:a0:b7:58:e6:9a:eb:e7:f8:11:a3:f4:
5f:1d:bc:5c:5f:1f:06:8c:fa:f3:a8:79:7c:6b:0d:
43:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A9:41:EE:EB:4E:A9:99:98:54:D0:EC:63:70:A2:E6:7E:84:4E:4E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/D6lB7utOqZmYVNDsY3Ci5n6ETk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.108.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f7:bc:d4:9c:85:b2:14:89:f9:64:0f:ea:da:40:30:81:3a:
db:9d:6e:e1:2c:ab:f8:83:ff:a2:f2:cc:78:e1:1d:c4:fe:34:
d2:73:92:0f:d9:27:a9:e5:ff:ae:c5:a7:48:38:ee:a0:44:85:
6f:9f:f7:19:da:49:af:39:0f:bd:f9:34:fc:cd:59:7e:c1:ba:
33:c1:cb:ac:1b:3d:93:53:d9:6c:df:ae:b4:cc:fb:15:99:7a:
fc:53:fb:d9:72:23:7d:5e:a2:66:b2:d7:64:9d:e7:8a:15:2b:
a9:a6:5b:41:53:38:fe:86:4d:7a:45:e2:9a:78:2d:6c:f5:08:
fe:59:f2:5b:4f:ae:3c:cd:df:0a:f4:a2:e9:db:cd:db:b1:8f:
60:32:e3:9c:20:aa:6b:09:d7:ea:d9:27:7f:b3:44:81:90:ce:
23:23:bf:60:28:1c:e4:88:31:23:80:7f:55:d0:84:05:69:e1:
67:c5:44:b7:6d:42:e7:03:86:7a:b5:ca:ef:31:1c:d7:fa:9e:
e4:c1:4d:22:42:5d:8e:d2:bb:92:cc:87:49:d9:37:66:32:06:
02:d7:60:b6:c5:db:2e:d6:24:a4:47:c1:62:d8:a0:5d:1a:1d:
7b:6f:07:d5:99:28:b9:bd:30:0a:84:e4:69:ad:1d:ff:67:94:
00:01:a4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:30:43 2025 by rpki-client