Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/atmeraxFNgKSEwfVqAh0N_xN2YY.roa
File: atmeraxFNgKSEwfVqAh0N_xN2YY.roa (raw, json)
Hash identifier: CG9GBDCJanwUSPbdPPSByhkuQDETURHzof2WqQc9bv4=
Subject key identifier: 6A:D9:9E:AD:AC:45:36:02:92:13:07:D5:A8:08:74:37:FC:4D:D9:86
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0193E363D42681CBE476D2F52FA7ABDB39B1
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/atmeraxFNgKSEwfVqAh0N_xN2YY.roa
Signing time: Fri 20 Dec 2024 09:26:30 +0000
ROA not before: Fri 20 Dec 2024 09:26:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137409
IP address blocks: 185.194.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e3:63:d4:26:81:cb:e4:76:d2:f5:2f:a7:ab:db:39:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 20 09:26:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ad99eadac453602921307d5a8087437fc4dd986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3d:8c:c1:ab:fc:d0:51:92:30:72:5c:14:0e:
95:09:2b:5b:a9:64:57:4d:88:7f:04:2d:8e:aa:5a:
db:f2:36:be:43:02:ed:7c:7d:52:0f:4d:ec:70:0e:
0c:61:63:e2:c1:3d:12:e9:e3:6a:1c:0e:15:89:8b:
96:78:73:cf:80:21:74:12:db:94:66:74:2f:0e:89:
ea:e2:1d:64:95:82:96:47:79:59:97:01:da:10:72:
6f:f5:a2:07:f9:84:cb:d5:cb:46:bc:56:36:42:e4:
f5:1f:3a:9d:3b:88:7e:d0:73:ea:06:7b:94:0a:b3:
1c:62:b3:b0:8c:cf:10:72:6c:ad:66:e4:3a:7c:0e:
fe:de:7b:b0:7f:50:80:41:91:7a:ba:07:f4:c8:88:
bf:88:75:bc:f5:60:45:a2:49:22:3c:fe:5c:d4:bb:
30:15:84:76:0b:67:a9:a8:84:cd:8b:f2:61:bf:82:
60:34:f2:a2:bd:72:03:86:f0:31:77:03:78:d5:86:
46:a2:72:83:6d:08:0b:8b:57:b2:fb:9c:1f:c7:62:
b0:2d:5b:9f:97:88:47:85:d9:af:61:d8:8f:cb:92:
ed:0b:40:1c:3a:a2:70:ab:9a:1d:62:67:36:4c:4d:
89:75:dd:59:27:cf:9b:53:3e:a0:3d:5f:dd:e3:6e:
a1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D9:9E:AD:AC:45:36:02:92:13:07:D5:A8:08:74:37:FC:4D:D9:86
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/atmeraxFNgKSEwfVqAh0N_xN2YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.179.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:05:b6:70:1e:c8:96:d7:ff:53:55:7d:13:c9:18:8c:d3:b6:
c9:dd:dd:4a:7b:b0:2a:57:d2:43:18:dc:37:0a:87:f4:9e:d7:
e8:aa:df:5d:61:e6:70:cf:df:f0:51:7b:64:64:58:7f:bb:74:
a7:e7:51:d6:c3:3f:ba:c2:aa:2b:20:14:70:6a:22:bc:d2:27:
5a:31:28:b9:64:3b:85:4d:64:93:ba:11:08:0d:39:e1:32:4a:
51:b8:f2:db:4a:4b:a7:6e:f8:fa:76:71:ee:60:e6:ce:1e:f5:
58:c6:f9:06:62:20:ed:9f:bf:11:12:4b:bb:4d:25:ab:fe:7a:
24:39:87:50:a3:00:31:eb:a3:f3:3c:9f:da:55:72:4f:6b:06:
0f:2f:f6:a2:d2:07:f6:3c:42:3b:8f:4b:5d:ea:e5:24:dd:9c:
38:8a:dd:d2:0b:f5:a8:f7:45:f9:ed:ee:99:09:b8:a7:68:e4:
a2:be:21:bc:83:b1:0f:1c:d4:54:00:56:60:d5:e4:56:c9:53:
7f:cf:fb:20:19:61:1f:c7:5b:81:01:c4:76:21:0f:bc:1d:20:
9d:48:5e:a5:a5:27:53:38:9d:54:c3:87:42:de:e4:c7:92:00:
78:e4:84:33:d1:b8:7c:87:69:98:7a:42:72:2a:c2:75:c7:82:
76:33:a7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:33:40 2025 by rpki-client