Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/gg97f3cCDEPrpRvV-i_zkG5pER4.roa
File: gg97f3cCDEPrpRvV-i_zkG5pER4.roa (raw, json)
Hash identifier: kz9N++DaY/3BKHs02DEGf+Ri+jCDDgKDSO7MOhvskeY=
Subject key identifier: 82:0F:7B:7F:77:02:0C:43:EB:A5:1B:D5:FA:2F:F3:90:6E:69:11:1E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01947394D294A86A0472921701C0F73B632A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/gg97f3cCDEPrpRvV-i_zkG5pER4.roa
Signing time: Fri 17 Jan 2025 09:25:20 +0000
ROA not before: Fri 17 Jan 2025 09:25:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 185.210.233.0/24 maxlen: 24
194.76.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Mar 2025 09:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:94:d2:94:a8:6a:04:72:92:17:01:c0:f7:3b:63:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 17 09:25:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=820f7b7f77020c43eba51bd5fa2ff3906e69111e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c4:55:c7:9a:3d:a7:57:51:dd:91:8e:04:03:
8e:e9:98:ac:47:a3:a8:31:d9:e3:7e:7c:9f:73:d2:
ec:9d:a1:b3:f7:a8:69:fb:a3:a8:4c:f8:99:d2:5a:
a0:92:ae:d6:27:e1:a2:f1:e0:fa:c9:60:16:4b:2e:
70:b0:fb:bb:45:2b:f6:54:0e:6e:7c:81:4d:6b:6b:
40:28:bd:62:fd:2a:9f:0f:8f:ce:67:dc:62:e6:13:
05:80:ea:85:af:ef:dd:63:a2:6c:80:02:19:58:c2:
fd:b3:72:bd:28:ac:6a:66:05:cc:12:38:77:e3:5e:
1f:96:53:98:cc:34:a7:c4:c5:e6:23:38:fc:e5:c5:
de:4f:ed:bb:0f:b5:a1:28:5f:9b:99:5e:26:51:b6:
55:8a:ca:01:c1:85:aa:b7:b3:25:69:a2:be:15:3f:
5d:17:2f:ab:84:7b:7a:50:02:68:67:74:9b:04:cf:
c7:09:bf:f0:57:34:3b:c7:0c:8b:46:b0:00:28:af:
a2:bb:27:29:33:b0:af:31:a5:b9:a1:b6:1f:bd:3e:
17:79:17:06:47:1d:59:45:6f:ca:1c:27:3d:60:6a:
2f:2f:aa:fb:a1:5e:6e:a8:58:fd:e9:6c:73:eb:ed:
ae:c0:b9:9d:74:2f:aa:e8:c8:fa:4b:d6:a3:a4:07:
25:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0F:7B:7F:77:02:0C:43:EB:A5:1B:D5:FA:2F:F3:90:6E:69:11:1E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/gg97f3cCDEPrpRvV-i_zkG5pER4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.233.0/24
194.76.173.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:26:fd:ae:c8:35:c3:f5:9a:f7:df:c7:44:8f:3c:6b:f3:7d:
9a:2f:0f:8a:94:ec:38:8e:61:b2:09:6d:3f:60:4c:3f:96:1f:
97:21:d5:e8:f3:89:ab:ef:2a:e3:6a:53:dd:e2:0b:59:03:5e:
f3:8d:cf:b9:76:5c:8e:ce:d8:c9:5d:e8:ad:cd:33:7e:cf:ea:
83:b0:c3:87:03:d7:dc:23:bb:67:db:a6:3d:51:09:9f:69:8c:
22:d0:41:6b:04:66:aa:4d:05:29:6e:5b:d4:66:db:25:63:ba:
a5:fa:d5:db:77:5a:fc:60:59:ce:49:f5:72:73:05:a8:5f:16:
8a:65:bc:fa:c4:85:9a:43:bd:7b:ae:f9:78:65:3b:4d:eb:42:
d7:0f:b4:71:93:e5:99:6f:d5:16:63:25:98:f1:ba:bc:e0:64:
68:5f:e0:25:20:c8:45:67:1e:12:80:73:24:b2:12:1d:a9:63:
51:97:5f:5d:e1:1f:af:05:19:f9:b9:09:61:b2:ad:46:cd:ac:
6d:d7:ff:bc:39:61:1c:73:a2:9c:b8:3d:98:1e:c2:56:4a:d1:
1f:aa:24:2d:f9:ea:0b:44:9c:12:46:62:cb:1c:5d:f4:c8:6a:
8a:91:7d:af:c6:31:27:ae:96:05:ef:9c:d6:8c:fb:25:02:91:
b5:7f:c0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:30:41 2025 by rpki-client