Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fjvqVWKxZIKskaGwK7cVRvB0wuY.roa
File: fjvqVWKxZIKskaGwK7cVRvB0wuY.roa (raw, json)
Hash identifier: F5HxxQzo1LJ5VyHoaiIIE03ewuE/o08fj7tbHw0YyOQ=
Subject key identifier: 7E:3B:EA:55:62:B1:64:82:AC:91:A1:B0:2B:B7:15:46:F0:74:C2:E6
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194566C64072E7D385A13CEDF89F616E164
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fjvqVWKxZIKskaGwK7cVRvB0wuY.roa
Signing time: Sat 11 Jan 2025 17:32:11 +0000
ROA not before: Sat 11 Jan 2025 17:32:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50053
IP address blocks: 185.121.13.0/24 maxlen: 24
185.121.14.0/24 maxlen: 24
185.232.204.0/24 maxlen: 24
185.239.141.0/24 maxlen: 24
185.239.142.0/24 maxlen: 24
185.254.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 Jan 2025 13:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:56:6c:64:07:2e:7d:38:5a:13:ce:df:89:f6:16:e1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 11 17:32:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e3bea5562b16482ac91a1b02bb71546f074c2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:04:bf:5e:12:ee:13:c0:c2:d7:2c:9f:bc:
c1:6d:a7:b9:d3:84:e4:29:6f:c2:80:32:63:b6:24:
59:69:31:c4:c7:61:53:43:09:bb:4a:9b:27:9d:e6:
fb:48:ed:03:09:c5:24:e2:bf:69:7b:3b:95:38:8b:
09:ab:46:ad:98:a3:e2:a8:e7:9b:4c:76:4a:3a:f8:
f5:0c:c1:c3:39:9d:84:bf:d7:9b:d4:01:1f:ee:e9:
4c:b3:a6:6d:3d:cc:33:81:fe:91:2b:38:0c:f5:19:
56:44:b7:3e:b5:19:b7:54:e3:92:81:7d:20:ff:b8:
48:52:c9:4e:a4:43:42:72:4d:ae:a5:96:99:2b:28:
97:04:2f:78:d9:3f:73:ee:a0:af:1a:c3:d6:f3:97:
f7:5e:a4:f7:d7:00:ee:c0:6c:c9:45:60:98:f5:8d:
c6:69:1c:4f:fb:84:3f:35:e1:98:18:e7:02:96:7e:
a9:cb:9b:93:26:ac:56:0e:f3:64:86:75:c6:2c:c2:
49:cd:ee:34:b9:c2:e4:4f:4d:ce:e6:ba:07:25:6c:
02:0a:18:c3:4f:e8:48:c0:b4:cf:9d:68:9b:63:df:
16:fb:a2:a9:b5:61:bc:08:a3:e5:f4:49:ae:7e:21:
23:65:0d:8e:91:fe:87:d0:27:c1:2e:71:96:f7:08:
20:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3B:EA:55:62:B1:64:82:AC:91:A1:B0:2B:B7:15:46:F0:74:C2:E6
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fjvqVWKxZIKskaGwK7cVRvB0wuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.13.0-185.121.14.255
185.232.204.0/24
185.239.141.0-185.239.142.255
185.254.158.0/24
Signature Algorithm: sha256WithRSAEncryption
95:49:bf:6b:d4:e0:03:1c:e6:a9:a5:c0:ce:28:1e:ab:de:71:
0a:c7:56:32:85:36:f7:97:8b:e6:4a:ea:59:c2:fc:7f:ce:31:
48:e3:65:5f:ea:09:41:fa:ed:14:12:bf:16:aa:d0:46:4c:25:
a2:fb:64:6a:e0:53:3d:f0:75:07:b5:b8:4d:1b:3d:c9:f2:b1:
4a:dc:ba:a5:b6:3f:72:93:ca:34:1b:16:17:eb:b3:71:0c:77:
82:46:06:26:14:e5:b2:e0:04:52:4d:99:02:e3:e9:2f:65:f9:
e8:09:0e:33:2b:89:f0:5f:0c:e0:0d:e5:bf:fe:56:b8:32:5a:
83:64:bd:01:82:bf:5d:48:aa:54:0b:36:0e:72:5e:4d:07:28:
7c:ea:0a:90:b0:fa:55:34:08:8d:26:73:61:93:01:be:ff:37:
44:ba:30:8f:0f:b1:7f:cb:6d:30:37:3c:9a:8a:54:2e:23:9c:
f9:0e:31:45:5a:62:a9:aa:e6:da:76:a5:5b:f9:7b:9a:11:41:
04:1f:c0:cc:3e:6e:8a:e6:e1:f7:bc:e7:17:d5:27:81:04:57:
a9:66:e2:b2:9b:f5:ce:1b:90:46:61:a9:62:f9:b6:1d:d3:61:
25:1e:b4:c7:30:8b:84:4a:0e:d9:51:bb:c2:11:4c:91:61:95:
12:ed:e7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:35:34 2025 by rpki-client