Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xBER_26hx2k9FB_mcUBGVMWhYMA.roa
File: xBER_26hx2k9FB_mcUBGVMWhYMA.roa (raw, json)
Hash identifier: YMOaSga/4ODVlUGwoz4o7RNxWWcSvHAnR+Vk6SsDQCQ=
Subject key identifier: C4:11:11:FF:6E:A1:C7:69:3D:14:1F:E6:71:40:46:54:C5:A1:60:C0
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194222057FE655E254EE3497773771F628D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xBER_26hx2k9FB_mcUBGVMWhYMA.roa
Signing time: Wed 01 Jan 2025 13:48:52 +0000
ROA not before: Wed 01 Jan 2025 13:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215886
IP address blocks: 185.223.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jan 2025 12:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:57:fe:65:5e:25:4e:e3:49:77:73:77:1f:62:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c41111ff6ea1c7693d141fe671404654c5a160c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7c:65:2f:f3:8f:57:a4:5c:f6:ac:99:84:3f:
56:06:e6:34:b6:e6:28:95:7e:8a:cf:fa:57:e2:b7:
11:4a:27:4d:8c:83:7a:26:87:44:f2:96:aa:d4:3c:
9b:6b:8a:c1:ea:6f:df:7e:d4:65:84:a1:ff:e4:92:
d6:e9:e3:9e:47:90:df:98:40:aa:fa:9a:b3:b4:4c:
fd:6d:c3:c4:4c:98:f7:d6:95:a4:44:06:0a:19:33:
ff:f0:99:be:dc:bf:50:63:48:8c:bc:19:f7:f4:d6:
4d:65:70:23:46:fd:07:69:11:9d:44:be:2f:11:82:
85:65:ce:f0:68:98:15:ad:96:43:a2:fd:5e:ee:9e:
b0:a5:ad:f1:99:a5:11:33:96:5c:f5:06:37:2e:88:
31:86:d4:72:0f:76:08:78:7d:8e:19:7d:9c:1d:bd:
e1:df:7d:97:b8:fa:11:16:e2:b4:10:a6:27:57:fd:
f0:aa:90:87:91:ff:de:ba:ae:93:c3:4c:2e:da:ab:
1e:18:4d:b5:2e:0a:98:ba:5d:b3:13:51:d6:aa:a8:
58:e8:7b:c2:d5:c6:b8:e4:0a:99:0d:9c:e1:89:46:
64:c1:95:9b:07:04:fb:6c:fe:bf:03:d0:d8:4d:bf:
66:7d:3a:87:38:5c:27:c0:bd:64:50:5c:1d:6f:16:
87:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:11:11:FF:6E:A1:C7:69:3D:14:1F:E6:71:40:46:54:C5:A1:60:C0
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xBER_26hx2k9FB_mcUBGVMWhYMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.78.0/24
Signature Algorithm: sha256WithRSAEncryption
43:33:8b:53:dd:0d:34:93:23:6c:15:f7:f2:86:5c:c5:e6:44:
fc:9e:10:ba:3e:1e:66:31:50:d8:51:57:51:93:8e:74:6f:b6:
06:ce:fd:d7:b6:ba:e3:4e:5b:5c:3c:26:38:86:d5:ee:da:36:
98:8c:98:5a:e3:49:5e:f4:82:6b:6e:56:52:7c:08:7f:02:7c:
39:5a:c1:38:ab:86:10:cc:35:26:49:8b:31:dc:b4:b8:c3:4d:
b5:81:93:f5:f9:97:af:96:6c:31:79:40:9c:e6:41:50:1c:7e:
9e:d3:25:0b:0b:a7:bd:f0:b5:44:bb:87:62:8d:8d:32:ea:74:
c4:ac:4b:0f:ed:09:d0:f0:80:cd:85:7e:88:d1:20:ed:93:d0:
d3:65:60:eb:ef:ee:41:9b:55:82:e1:01:70:89:56:63:68:65:
24:bf:f9:37:ab:b2:c8:23:03:fd:52:88:82:29:e7:5c:df:cd:
2f:f6:b4:24:22:a6:11:f8:ea:41:d9:24:78:47:44:63:53:6c:
74:44:65:dd:14:3b:9e:d0:da:6c:c1:c2:ae:ac:d0:fe:c5:c5:
ce:c8:af:6c:29:c0:80:02:e2:fc:ad:e7:4a:49:f2:ac:48:1b:
91:ec:6c:b7:04:95:77:84:35:2b:18:5e:41:ff:46:87:7a:4f:
0b:88:a8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:10:30 2025 by rpki-client