Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EQuFqRMlnyYiZkJ1Bc8XUVH9uYo.roa
File: EQuFqRMlnyYiZkJ1Bc8XUVH9uYo.roa (raw, json)
Hash identifier: cVFUJ3tYzEFYQPpHd1OyM4WfnwtCm80wRCOQ9W7JCF4=
Subject key identifier: 11:0B:85:A9:13:25:9F:26:22:66:42:75:05:CF:17:51:51:FD:B9:8A
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01942220270A35E4AB0E5318B7C3BC0F20D6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EQuFqRMlnyYiZkJ1Bc8XUVH9uYo.roa
Signing time: Wed 01 Jan 2025 13:48:39 +0000
ROA not before: Wed 01 Jan 2025 13:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50053
IP address blocks: 185.121.13.0/24 maxlen: 24
185.121.14.0/24 maxlen: 24
185.232.204.0/24 maxlen: 24
185.254.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 15:08:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:27:0a:35:e4:ab:0e:53:18:b7:c3:bc:0f:20:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=110b85a913259f262266427505cf175151fdb98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:6e:b1:64:33:dc:9d:ef:39:6d:77:c7:9c:
a9:be:df:30:be:e5:e0:40:7c:f3:bc:45:e0:51:01:
18:f5:96:d8:bd:cb:81:06:86:47:78:e8:86:f3:f1:
4d:25:2d:48:cf:99:24:13:e7:0d:ba:22:f2:b0:3d:
7f:16:8d:0d:cf:a6:e4:b6:4e:60:0f:1a:80:9a:d2:
21:76:36:a5:c4:e0:0e:de:f9:27:27:16:e1:00:8b:
10:89:2c:3e:84:77:cf:c6:24:80:03:07:cd:db:2b:
9a:72:e8:04:05:d7:f9:bc:99:c0:f5:2b:14:40:22:
bc:cc:c3:4a:03:20:31:16:bb:7e:b9:a5:74:de:12:
23:b5:a2:0c:e7:f8:97:ea:45:94:49:4c:d6:8a:b4:
5b:54:1f:3b:09:30:8d:90:ca:0d:b5:20:be:22:17:
f4:c0:ca:9f:36:ca:96:3e:8b:ff:97:3d:8b:5f:06:
7b:2b:5e:1c:3e:0b:60:6b:88:96:6b:92:8d:07:e2:
dd:71:98:61:d3:24:69:a4:dd:47:23:2a:48:e7:a1:
3a:53:e5:dc:b2:6e:21:b3:b9:c5:c0:73:71:22:10:
18:1b:66:6c:af:c6:ce:8f:6d:d1:d6:79:ed:f3:4d:
89:34:72:6d:81:30:14:16:89:77:be:ed:2f:ca:c2:
a1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0B:85:A9:13:25:9F:26:22:66:42:75:05:CF:17:51:51:FD:B9:8A
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EQuFqRMlnyYiZkJ1Bc8XUVH9uYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.13.0-185.121.14.255
185.232.204.0/24
185.254.158.0/24
Signature Algorithm: sha256WithRSAEncryption
12:94:17:71:f6:29:ea:ac:be:8d:dd:31:43:02:d6:37:97:2c:
05:e0:5f:76:15:8e:0a:af:45:ab:fc:a3:64:5d:31:e0:6c:08:
fe:b3:19:af:90:68:5e:d6:f1:e8:50:d1:62:6b:ce:af:14:94:
31:ff:4e:a4:4c:c0:62:f4:59:46:9f:1f:8e:d9:fc:64:41:6d:
fd:b6:13:99:05:0c:57:50:ae:4a:d0:3e:7f:ee:1a:e0:26:72:
50:ca:35:19:5b:0c:02:0d:a9:d8:f0:9a:e3:47:76:c2:3c:3d:
92:79:7f:66:b3:3b:f6:44:1e:69:44:8e:d3:53:83:e5:57:e0:
98:48:a4:28:d3:b4:85:04:34:f4:98:1d:7d:af:42:b4:bd:3a:
a1:7b:7a:cf:c6:d6:6e:24:51:ee:8b:7c:43:30:61:1b:ba:7e:
0c:87:bf:d7:1b:cd:c8:ed:c3:2e:e0:ac:61:21:77:ad:35:64:
2d:6a:9f:b2:25:6c:e2:1a:63:28:32:93:99:c1:83:21:c4:2c:
d5:3d:45:3b:81:f8:99:82:8c:29:60:f6:fb:71:47:bd:40:9d:
96:fe:f7:f1:4a:67:8e:37:dc:91:e6:3d:1c:36:b6:e0:f7:04:
bb:6d:5f:59:38:17:99:c4:11:3e:88:14:75:d7:1a:35:fd:bd:
6c:a3:8b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:32:36 2025 by rpki-client