Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/TmZiqacWj0LYQuysueSsjG8Wh8U.roa
File: TmZiqacWj0LYQuysueSsjG8Wh8U.roa (raw, json)
Hash identifier: KlUQAhP3iNf6EtAFdz3F0847qcSjrAnIUMqZ0btM1UA=
Subject key identifier: 4E:66:62:A9:A7:16:8F:42:D8:42:EC:AC:B9:E4:AC:8C:6F:16:87:C5
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01951DE1F78A5BC810E8431AD7B6F6739D50
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/TmZiqacWj0LYQuysueSsjG8Wh8U.roa
Signing time: Wed 19 Feb 2025 11:05:03 +0000
ROA not before: Wed 19 Feb 2025 11:05:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 185.220.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Mar 2025 11:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:e1:f7:8a:5b:c8:10:e8:43:1a:d7:b6:f6:73:9d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 19 11:05:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e6662a9a7168f42d842ecacb9e4ac8c6f1687c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d7:4e:46:fc:e6:26:95:e2:18:94:95:41:86:
d9:46:d3:94:96:3c:f4:77:81:96:2f:5f:49:08:33:
d5:4a:cd:e4:90:ee:95:91:38:cd:69:61:0e:4a:62:
1d:5d:16:96:06:ba:8a:93:d4:fc:c2:92:e6:bb:e2:
e3:ca:6d:05:1e:bf:17:d7:f4:2b:57:fd:a2:82:90:
9b:20:74:63:1a:7c:04:08:0d:94:15:5f:36:0a:2f:
8d:c3:f1:86:f8:e0:4c:f0:ea:50:c8:b2:ee:29:04:
22:5a:d0:91:d2:a5:ec:2a:9c:ca:da:c0:a3:bf:1c:
c5:29:69:29:c5:9b:93:36:64:b0:c5:7e:fc:90:c4:
67:b0:ae:10:07:27:c2:bf:68:47:b1:57:93:23:57:
b7:fa:54:a3:02:d2:bb:75:87:e4:54:c4:d7:70:0f:
a4:50:23:ab:1a:6a:09:2a:76:b2:2e:6d:87:74:4e:
e4:f5:02:6a:65:7b:8b:31:68:f5:00:66:92:1c:a2:
b5:70:35:65:07:ff:69:de:e1:89:7b:0e:7d:73:76:
3a:1d:ae:ed:a5:d9:dc:dc:c2:1d:d3:42:7f:0d:07:
c3:f5:df:53:b1:5a:f0:45:ad:07:1a:97:4f:05:15:
52:0f:e4:6c:74:17:84:94:e8:4a:c8:bb:fe:dc:10:
d9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:66:62:A9:A7:16:8F:42:D8:42:EC:AC:B9:E4:AC:8C:6F:16:87:C5
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/TmZiqacWj0LYQuysueSsjG8Wh8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.248.0/24
Signature Algorithm: sha256WithRSAEncryption
08:40:75:c0:32:1e:3b:35:4e:4f:e5:b9:60:a3:8f:b4:47:56:
29:07:02:72:5f:fa:62:dd:ff:97:d7:62:79:5b:45:01:39:41:
c2:b8:46:5c:df:f9:8c:3a:06:9d:3f:cc:af:c7:65:75:12:cf:
2f:83:86:c7:9a:17:eb:dc:82:b6:b9:63:1b:44:a1:d4:c9:c5:
4f:10:19:4a:80:f8:15:93:d9:25:0b:5e:1a:88:fc:3f:f9:74:
c5:36:ea:52:50:1d:1a:94:b1:53:55:68:03:f7:6c:19:26:ea:
4b:c1:54:66:06:f3:23:55:fd:59:c3:6d:32:95:cd:ff:c4:d1:
49:34:c7:f0:8c:ec:da:d2:ad:5d:e9:20:40:f2:81:0c:18:5b:
c1:af:01:b5:7e:74:17:1d:00:3e:9a:54:d0:64:df:58:7a:5d:
64:a5:ce:74:ee:d9:78:0a:67:a4:7d:1d:46:27:89:78:9b:1f:
e0:40:5a:9e:41:e2:00:ed:25:24:90:1d:2f:9c:1f:d3:95:8f:
bd:ea:d2:22:3a:2e:2e:51:ac:88:07:ba:4d:1b:4f:3a:92:57:
fc:23:09:a9:bb:66:d2:d2:5f:36:9a:10:ab:85:af:b4:e4:e1:
0d:13:25:22:02:e8:d6:1e:6a:03:fc:ba:5a:89:db:4e:e0:98:
18:c5:1a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:33:38 2025 by rpki-client