Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/lQIQcy6KpvfQ_8dXUZDMyEBkCC8.roa
File: lQIQcy6KpvfQ_8dXUZDMyEBkCC8.roa (raw, json)
Hash identifier: 3RxSCt08tLRbZDCC4lUEjba8TGKcIBdLyD9RNFjrZgM=
Subject key identifier: 95:02:10:73:2E:8A:A6:F7:D0:FF:C7:57:51:90:CC:C8:40:64:08:2F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422205311B12E5090FCBF62C914683935
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/lQIQcy6KpvfQ_8dXUZDMyEBkCC8.roa
Signing time: Wed 01 Jan 2025 13:48:51 +0000
ROA not before: Wed 01 Jan 2025 13:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214024
IP address blocks: 185.206.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 14:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:53:11:b1:2e:50:90:fc:bf:62:c9:14:68:39:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=950210732e8aa6f7d0ffc7575190ccc84064082f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:94:c3:a2:2a:a3:72:cf:40:7f:70:a6:5c:08:
75:4b:a3:d6:c0:14:02:95:9e:e8:9c:22:6b:91:c9:
02:64:77:71:33:cc:94:7b:0f:df:1f:28:90:6e:6c:
c0:f1:e0:06:90:88:d2:f5:29:ba:37:05:1c:bc:7b:
ad:52:fb:db:37:6d:53:68:23:99:98:a8:75:e9:b7:
fc:94:e8:2f:58:aa:f0:05:38:e0:e3:c4:db:eb:f6:
12:6a:f3:6f:fc:f0:89:87:33:67:20:30:73:b4:b6:
f0:61:ac:dc:75:04:f1:71:8d:39:41:b5:31:d8:29:
3b:4b:37:99:d7:06:78:e0:70:be:6a:d8:e5:fc:18:
63:ad:d9:47:bf:cf:17:de:5d:a5:2d:81:b6:3a:7b:
c8:3e:2a:8e:09:8a:92:f1:77:5e:d3:0f:e7:ae:03:
b7:25:ab:dc:00:01:6a:d2:3c:1f:1f:f1:a2:bc:81:
9c:c5:92:74:4e:a7:70:e5:e5:db:27:72:8b:77:b8:
08:48:f9:25:03:6e:84:5a:a2:61:77:55:35:c1:52:
6c:44:ae:bb:eb:30:06:d2:c2:b3:de:a7:08:11:28:
4e:a1:2a:44:12:70:34:7a:22:4c:dc:d0:81:c1:c0:
ef:19:e2:a7:57:c0:2f:3e:0f:56:ea:5b:04:0a:94:
77:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:02:10:73:2E:8A:A6:F7:D0:FF:C7:57:51:90:CC:C8:40:64:08:2F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/lQIQcy6KpvfQ_8dXUZDMyEBkCC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.250.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:9e:e6:5a:53:f3:c8:96:5c:eb:a1:cc:7f:a9:f4:43:61:6e:
a8:45:d0:6a:0f:80:88:ec:7e:fa:8f:06:fd:a9:b3:bd:cc:93:
d9:27:e4:cd:f2:5e:bb:28:e6:08:b2:71:99:e5:c6:12:56:ae:
23:7c:c9:50:e3:84:bf:bb:69:90:9e:78:9b:5c:72:0c:bd:86:
00:09:98:b4:5d:19:fc:93:04:4c:50:84:72:62:49:ce:e1:a4:
4e:4b:6f:19:0e:d3:bd:a6:1c:3a:a5:56:39:63:fc:6d:3e:2f:
e6:c7:85:74:7c:d5:8f:a7:17:54:12:96:2a:47:69:a6:2f:69:
21:89:33:a9:ef:4a:fe:9e:25:21:7f:4a:49:41:a1:b6:3f:f9:
bc:48:75:bd:d7:91:2d:c9:24:c2:0d:cc:63:b3:fa:a1:12:7d:
4f:97:0b:76:3d:c6:0a:b4:f9:33:88:1e:5a:7d:36:d0:95:db:
66:c6:4b:e9:fe:b2:d7:59:68:01:5c:94:68:d7:ff:e0:1c:20:
e5:0e:12:45:ad:89:13:a2:53:2d:b7:3d:55:92:42:b1:da:8f:
15:86:df:c4:c5:3f:f6:14:5f:50:78:7e:6c:c0:db:aa:1c:96:
9a:4f:ac:19:c1:1b:16:75:3a:be:bd:48:01:8e:97:1c:a6:1e:
bf:e1:ee:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:30:45 2025 by rpki-client