Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kO2VTREjPQ7jlz2-nNg9aOLp6XQ.roa
File: kO2VTREjPQ7jlz2-nNg9aOLp6XQ.roa (raw, json)
Hash identifier: FeWstPLxuAzsGOGKOk7W6DfvxqZRAZ4z5aWnZ3wa2Rw=
Subject key identifier: 90:ED:95:4D:11:23:3D:0E:E3:97:3D:BE:9C:D8:3D:68:E2:E9:E9:74
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01939BFE6C079431C4F31B7ABECB28C5DE17
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kO2VTREjPQ7jlz2-nNg9aOLp6XQ.roa
Signing time: Fri 06 Dec 2024 12:42:42 +0000
ROA not before: Fri 06 Dec 2024 12:42:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49600
IP address blocks: 185.121.12.0/24 maxlen: 24
185.121.15.0/24 maxlen: 24
185.196.43.0/24 maxlen: 24
185.230.54.0/23 maxlen: 23
185.230.55.0/24 maxlen: 24
193.17.183.0/24 maxlen: 24
193.37.64.0/24 maxlen: 24
193.37.65.0/24 maxlen: 24
194.35.41.0/24 maxlen: 24
194.35.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Dec 2024 11:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:fe:6c:07:94:31:c4:f3:1b:7a:be:cb:28:c5:de:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 6 12:42:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90ed954d11233d0ee3973dbe9cd83d68e2e9e974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:58:23:c8:41:df:52:1a:11:7e:b1:2a:c5:64:
b6:27:a2:f6:ac:b6:de:7a:f5:a8:2e:32:69:da:f1:
9e:c8:38:30:07:43:6a:58:2a:8d:dd:b3:bf:1e:1f:
f7:57:66:c6:ff:65:11:b6:36:71:6a:60:f6:dd:cc:
85:5a:eb:1f:46:c3:99:7e:6f:d2:1f:5b:1b:40:78:
65:61:e4:d8:7d:3f:83:91:3e:e0:40:dd:f3:62:2c:
08:85:a2:32:c6:3f:50:a0:91:95:c2:89:47:7e:ae:
3e:b2:d8:4d:60:15:98:b3:5c:f0:20:d1:8b:4a:f9:
5b:ab:7b:fd:d9:25:b7:c5:f8:51:b1:89:ab:ee:10:
a9:eb:3e:ce:0c:34:a0:cb:69:cc:a7:08:86:ef:4b:
73:df:b5:a8:1c:45:1c:fa:47:82:8e:9e:a9:27:12:
3d:93:03:81:e6:8b:74:1e:a8:61:a9:e8:a5:89:ad:
08:a6:71:33:58:1e:de:6d:81:79:07:c6:ab:c8:e5:
72:0e:e4:54:4d:d0:dd:e4:78:17:19:14:34:bf:8b:
9b:d8:1b:be:f8:da:2f:05:6e:54:57:71:ef:06:83:
91:4b:d4:b3:b6:0a:26:51:27:48:05:54:0a:a2:d5:
4a:0c:38:1d:94:7c:5a:dc:0e:2b:7e:e1:40:32:23:
a2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:ED:95:4D:11:23:3D:0E:E3:97:3D:BE:9C:D8:3D:68:E2:E9:E9:74
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kO2VTREjPQ7jlz2-nNg9aOLp6XQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.12.0/24
185.121.15.0/24
185.196.43.0/24
185.230.54.0/23
193.17.183.0/24
193.37.64.0/23
194.35.41.0-194.35.42.255
Signature Algorithm: sha256WithRSAEncryption
2f:72:b1:c3:73:63:d8:cb:7d:88:3f:65:03:51:53:bd:fe:0c:
c8:4a:ce:7b:80:dc:dc:f9:29:7f:9c:da:7d:c9:76:e8:1a:05:
54:5e:f3:c7:53:80:8b:bf:0f:24:f8:7c:b8:ed:31:42:21:e7:
37:16:90:6f:ad:8e:b9:1f:b4:d6:fe:6d:df:03:a3:39:61:a4:
e1:08:58:64:60:ed:ee:07:1d:38:9e:d2:72:3c:f5:8d:18:ec:
ef:a4:b7:a6:1b:fb:2a:21:17:99:82:d1:1d:6c:a6:5d:08:27:
b4:71:fe:c9:ab:06:59:7b:2a:24:9d:17:0f:9f:81:ad:8e:29:
aa:2b:09:6f:c6:d7:b0:27:68:a9:de:be:e3:26:73:6c:19:9f:
84:84:28:df:cf:12:e0:51:6c:36:0d:c6:10:1f:24:48:14:4d:
ab:52:a0:1f:e4:c9:29:c6:5c:d1:7a:5e:e7:57:c3:a4:f3:aa:
c4:93:5d:fc:88:75:fe:e4:15:40:7f:ae:58:de:1a:b5:bc:90:
f7:be:21:1c:39:37:b8:8b:a5:04:bb:3d:16:ba:2c:02:be:46:
01:be:e0:3d:84:b6:14:c2:b4:3e:f6:27:da:5d:75:b2:f2:9e:
58:c1:01:b4:d9:d4:57:a8:9d:b4:dd:62:f0:49:45:13:07:68:
ee:2a:b3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:29:28 2025 by rpki-client