Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/e6SpwGmLqX6z1YgDe2niYuqzmfQ.roa
File: e6SpwGmLqX6z1YgDe2niYuqzmfQ.roa (raw, json)
Hash identifier: wz8Y2/kEQjasvUYPNx1ELA/gdwX2RAizc7ckgnbgUlU=
Subject key identifier: 7B:A4:A9:C0:69:8B:A9:7E:B3:D5:88:03:7B:69:E2:62:EA:B3:99:F4
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 019441FA6F9845C63B3A1AD950E48AE0C107
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/e6SpwGmLqX6z1YgDe2niYuqzmfQ.roa
Signing time: Tue 07 Jan 2025 18:15:19 +0000
ROA not before: Tue 07 Jan 2025 18:15:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 185.211.50.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 09 Jan 2025 14:08:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:41:fa:6f:98:45:c6:3b:3a:1a:d9:50:e4:8a:e0:c1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 7 18:15:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ba4a9c0698ba97eb3d588037b69e262eab399f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e8:93:2c:ab:cb:8d:1c:28:7e:56:af:4e:3d:
03:2f:49:0d:dc:06:dc:f1:3e:42:d9:1c:0d:c1:ed:
a0:24:f1:af:e0:14:a0:90:73:2d:29:a2:ba:4a:6e:
56:2d:a2:e6:cb:43:d9:03:a8:7f:02:3e:17:ec:b6:
07:2b:1c:ba:7e:14:c0:1a:b0:f5:0e:fd:be:74:0e:
c8:43:d6:6b:3e:8b:65:c5:09:e2:61:a1:8b:e4:7c:
f4:53:0a:07:7d:aa:f5:7e:e3:94:fd:b9:c3:2b:3d:
dd:bf:bc:e9:cc:ce:04:8b:5a:0c:f2:43:26:8f:84:
0b:fb:2d:02:b9:b1:3c:a4:39:ec:20:55:c3:09:b4:
59:04:62:79:c1:90:fa:63:81:08:17:20:3c:72:c1:
6a:2e:87:e0:58:77:27:02:d5:bc:e3:a7:c1:6d:40:
65:33:62:aa:46:01:83:57:90:bd:d8:28:63:12:ba:
59:d3:de:b9:99:2b:5a:0e:f4:46:ff:1e:18:6b:93:
5e:05:47:0c:68:8e:19:be:0f:e6:c7:31:69:16:02:
87:8b:34:af:a7:6d:3f:63:d2:a4:e7:dc:20:03:24:
18:8e:2d:b6:78:0c:ff:6a:48:57:83:11:dd:06:f9:
b9:dc:7a:93:3b:37:a0:e1:ac:fa:41:95:49:d6:a7:
6b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A4:A9:C0:69:8B:A9:7E:B3:D5:88:03:7B:69:E2:62:EA:B3:99:F4
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/e6SpwGmLqX6z1YgDe2niYuqzmfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.50.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:cb:68:94:70:d5:2f:9c:a8:96:75:77:0e:c8:7c:8a:36:bd:
bf:cf:dd:cf:4c:a6:c3:ed:ec:00:a0:f2:0c:50:43:e7:65:7e:
39:77:a5:91:75:65:41:c2:32:87:54:51:ad:61:e1:a5:55:ee:
e4:a6:bf:a7:ca:09:d1:3d:79:92:48:f9:18:ec:5b:55:85:38:
20:c2:69:de:64:04:d7:a9:a2:e3:3f:bf:ac:09:77:85:47:e5:
9d:a9:eb:f0:d9:ec:62:ca:4b:ef:c1:61:a8:ce:05:f3:52:23:
4f:86:90:c3:4b:c7:f1:8d:da:4b:86:e9:e1:42:d3:84:98:9c:
2a:d5:5e:e2:87:25:1d:ae:d3:e0:73:9c:a2:10:3c:8d:dd:da:
0d:94:36:ca:e1:ee:a8:5c:b1:2e:9d:98:3f:0e:23:41:90:ac:
9a:a0:80:58:e9:51:28:0c:7f:4f:54:c4:cc:4b:b6:37:dd:6d:
71:4e:f6:73:72:00:96:d8:2c:b6:b2:69:1a:47:a4:f8:b3:58:
5c:c5:73:35:e7:7b:c7:b7:a7:a4:d2:71:f9:5c:25:64:63:a8:
1f:20:9d:9d:52:06:49:34:29:44:36:80:75:d1:71:29:68:8f:
a1:62:2d:12:32:32:a7:8d:b9:93:f9:f0:df:57:84:ad:79:de:
c8:1b:51:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:55:02 2025 by rpki-client