Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OBoinxMdg_--1W2ENNFVBzUW1N4.roa
File: OBoinxMdg_--1W2ENNFVBzUW1N4.roa (raw, json)
Hash identifier: JVRms7IUi+JegN55gvigGU+QnwGEe+3J9grYAWRwiMs=
Subject key identifier: 38:1A:22:9F:13:1D:83:FF:BE:D5:6D:84:34:D1:55:07:35:16:D4:DE
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01943B73914CF850C974C710275D6B9E89FE
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OBoinxMdg_--1W2ENNFVBzUW1N4.roa
Signing time: Mon 06 Jan 2025 11:50:17 +0000
ROA not before: Mon 06 Jan 2025 11:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 185.194.177.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.222.30.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
193.58.146.0/24 maxlen: 24
194.76.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jan 2025 18:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3b:73:91:4c:f8:50:c9:74:c7:10:27:5d:6b:9e:89:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 6 11:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=381a229f131d83ffbed56d8434d155073516d4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:80:76:5e:1f:72:2d:54:b0:bd:71:9d:cb:
3d:49:bf:87:8d:70:60:ec:85:fb:6b:8e:9e:80:54:
9a:31:c9:2d:3c:8f:f7:ad:5c:8b:3d:e9:46:3f:39:
ca:f4:b0:87:da:51:91:9a:3e:0f:0d:9d:39:4d:ef:
64:27:09:02:05:f7:9d:bc:42:35:01:79:0d:5c:52:
6c:88:f1:06:d5:ba:ec:87:e6:ce:bf:b6:2d:50:39:
27:c1:82:7f:14:85:b8:81:95:1d:fe:e0:2a:06:60:
36:c0:07:20:2e:f4:14:6d:a5:55:c9:70:49:6c:9c:
7e:51:f1:18:2c:77:09:12:56:6a:3f:7f:43:00:29:
ff:6a:d9:9d:cd:8c:a7:e3:1b:2c:b7:59:32:3a:fb:
7b:10:2f:a0:98:8f:a5:e1:50:1c:4a:10:d3:8e:bc:
8d:b6:5a:4a:32:35:a0:32:88:73:8f:bc:4f:53:75:
a2:f4:57:2d:5d:62:2e:c5:0f:45:b3:8b:70:1e:4e:
b8:94:ea:69:cb:ed:97:3e:29:40:e4:c0:eb:58:13:
f4:ba:b4:44:7e:a9:48:21:19:86:d0:a3:d4:ec:d8:
81:ca:9f:4a:05:d4:22:6d:8a:ce:26:82:68:44:02:
b5:80:0c:0f:44:8e:18:fe:d9:19:95:3f:aa:cc:1b:
e5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1A:22:9F:13:1D:83:FF:BE:D5:6D:84:34:D1:55:07:35:16:D4:DE
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OBoinxMdg_--1W2ENNFVBzUW1N4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.177.0/24
185.209.38.0/24
185.209.73.0/24
185.210.235.0/24
185.222.29.0-185.222.30.255
185.227.144.0/24
185.246.112.0/24
193.58.146.0/24
194.76.172.0/24
Signature Algorithm: sha256WithRSAEncryption
73:60:1c:a2:5c:77:ab:ee:84:cc:68:30:8e:1d:84:fd:be:b9:
2f:d4:24:f9:b1:70:cf:be:39:ba:42:c1:40:3f:ca:6e:bb:7a:
be:db:c7:93:c7:23:0c:e0:67:60:64:d1:ee:e0:5d:ec:ec:17:
07:26:c1:fc:23:95:46:40:24:ba:2c:24:5b:97:f9:c7:99:ca:
ff:17:16:af:91:63:ef:76:e7:18:d1:07:6e:e5:19:86:98:86:
c5:12:d7:6a:ae:e1:18:7a:26:53:e3:8c:3a:b6:a5:5b:60:bc:
b2:3c:0c:01:6e:81:b7:93:f5:7e:e6:c3:55:6f:2e:39:29:89:
69:ff:50:63:6e:8a:e1:4e:8d:cb:c3:8d:15:e7:c4:d0:df:70:
8b:8f:3d:18:76:29:fb:39:fd:23:3a:6a:54:1f:bd:aa:46:1c:
c2:3d:72:cf:12:df:b8:c6:2e:7d:ce:45:2f:4d:46:44:a0:af:
33:20:a5:98:2d:20:85:a8:07:04:13:a3:05:be:c8:f1:ae:b2:
28:06:1a:25:4d:f4:c3:22:09:3d:b0:c9:2a:a1:0f:67:21:0a:
d2:dc:65:a4:17:af:22:47:18:e4:0e:83:7c:c6:1a:9f:64:99:
ee:e8:bb:39:bb:7b:b9:2b:21:c8:09:3a:8b:b4:8a:55:58:4f:
2b:db:48:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:39:32 2025 by rpki-client