Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dSoNnXKKrFAWtr8kI0q3NG2LifI.roa
File: dSoNnXKKrFAWtr8kI0q3NG2LifI.roa (raw, json)
Hash identifier: 3/rPheWVUhmIxR1z3c0gARqSJuvkPyeqoFAOQA6J+MQ=
Subject key identifier: 75:2A:0D:9D:72:8A:AC:50:16:B6:BF:24:23:4A:B7:34:6D:8B:89:F2
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01941C6C7E25957639E0DB06A2EF7472FC51
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dSoNnXKKrFAWtr8kI0q3NG2LifI.roa
Signing time: Tue 31 Dec 2024 11:14:19 +0000
ROA not before: Tue 31 Dec 2024 11:14:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 185.199.159.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.36.0/23 maxlen: 24
185.209.74.0/24 maxlen: 24
185.210.152.0/24 maxlen: 24
185.210.153.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.155.0/24 maxlen: 24
185.218.102.0/24 maxlen: 24
185.223.76.0/24 maxlen: 24
185.225.2.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.145.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
185.234.20.0/22 maxlen: 24
185.234.23.0/24 maxlen: 24
185.238.228.0/22 maxlen: 24
185.240.120.0/23 maxlen: 24
185.251.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1c:6c:7e:25:95:76:39:e0:db:06:a2:ef:74:72:fc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 31 11:14:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=752a0d9d728aac5016b6bf24234ab7346d8b89f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a9:bb:49:91:5f:c6:b2:e3:f0:61:81:77:71:
5b:ed:6e:dc:96:af:50:ce:89:28:cf:e5:cb:16:00:
04:a3:41:7c:53:ab:83:38:2f:25:07:15:15:91:91:
68:d3:ed:8c:b1:8b:53:8e:ed:53:da:88:f2:8a:a6:
6e:b1:18:12:16:d4:2d:5d:e7:5d:c5:4f:bf:c5:59:
c7:92:c0:d0:c6:e2:64:06:79:4a:3d:e8:79:3d:1e:
72:e3:b2:f4:1a:da:f4:2c:1f:49:6f:b3:5a:18:d2:
08:c4:3a:4a:c6:43:da:1e:6f:e9:42:f5:7f:f0:d7:
19:a5:26:e1:87:3e:54:58:81:b5:0e:3d:e9:ac:33:
b5:c7:d9:25:ae:f2:b6:f5:1f:d2:cd:bb:87:99:ec:
34:11:db:d5:3c:38:2e:da:0e:6d:29:92:5b:19:cb:
0e:16:77:a3:13:10:b6:97:e5:ef:6b:dd:e2:7e:5f:
99:df:57:30:42:f9:50:ca:4a:46:4e:7b:b1:c4:da:
c5:30:3f:93:36:69:95:21:a3:a8:93:b6:d0:0d:5b:
5d:43:5f:93:1f:01:66:ea:55:13:e7:85:e7:80:d9:
44:cb:e5:51:7c:c7:ff:d2:26:7b:63:07:4e:b6:5f:
25:6f:c7:c3:6a:9d:7d:c1:4f:62:4e:cb:23:21:d2:
f2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2A:0D:9D:72:8A:AC:50:16:B6:BF:24:23:4A:B7:34:6D:8B:89:F2
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dSoNnXKKrFAWtr8kI0q3NG2LifI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.159.0/24
185.206.248.0/24
185.206.251.0/24
185.209.36.0/23
185.209.74.0/24
185.210.152.0/22
185.218.102.0/24
185.223.76.0/24
185.225.2.0/24
185.226.107.0/24
185.227.145.0/24
185.232.206.0/24
185.234.20.0/22
185.238.228.0/22
185.240.120.0/23
185.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:11:3c:3f:3b:8f:86:82:80:78:94:2a:fd:8b:d8:22:1b:c3:
94:d2:c1:a3:2f:fa:03:2c:60:d8:b4:53:20:72:85:d6:f5:71:
5b:dc:37:fe:74:61:03:ce:63:af:ed:fe:fd:80:cd:71:3c:a1:
87:d8:e6:cc:88:9f:61:bc:af:ac:d3:59:21:64:ed:f4:38:8b:
f6:42:05:4c:e7:be:74:87:21:cd:d2:18:87:c3:69:94:3e:17:
62:9a:14:44:83:c4:03:b0:01:21:d2:c2:95:6b:16:af:f5:2d:
70:f3:fe:53:f7:78:14:64:fa:00:37:2f:03:20:5b:99:5d:83:
35:5b:8d:c1:0e:be:f6:d9:69:07:91:be:fa:92:df:b8:ec:a7:
bc:ae:8d:40:4f:dd:62:93:04:39:f0:03:45:7a:46:d4:83:7c:
52:b7:0a:7c:ad:eb:55:aa:ca:61:5d:27:ce:58:ee:a3:ef:50:
36:b5:4e:a9:02:d1:dc:7a:a8:f8:72:8d:5e:a9:4f:3a:7e:dd:
f6:18:e2:ae:99:bf:bc:6f:54:bd:cc:4c:61:b5:82:d6:08:d1:
d3:19:3d:98:31:80:eb:d2:40:fd:1c:d5:de:e3:43:d1:41:6d:
bb:3a:44:17:6b:87:bf:b4:45:47:ed:1d:17:6b:dc:b3:bc:2c:
5b:bc:58:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:35:39 2025 by rpki-client