Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/k3Cv-hvslV9hPjgkVDoS-YKVGAo.roa
File: k3Cv-hvslV9hPjgkVDoS-YKVGAo.roa (raw, json)
Hash identifier: OCKjeHQNcGTaNlTQ3nUWrojXGnLK8xqmjvNd3Gz2hos=
Subject key identifier: 93:70:AF:FA:1B:EC:95:5F:61:3E:38:24:54:3A:12:F9:82:95:18:0A
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01944B650584494AC409171E739493073A7A
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/k3Cv-hvslV9hPjgkVDoS-YKVGAo.roa
Signing time: Thu 09 Jan 2025 14:08:19 +0000
ROA not before: Thu 09 Jan 2025 14:08:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215727
IP address blocks: 185.211.49.0/24 maxlen: 32
185.211.50.0/24 maxlen: 32
Validation: Failed, certificate revoked on Fri 10 Jan 2025 15:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4b:65:05:84:49:4a:c4:09:17:1e:73:94:93:07:3a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 9 14:08:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9370affa1bec955f613e3824543a12f98295180a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:92:8e:e3:55:fa:6a:92:38:69:2a:46:37:83:
e3:68:ca:5b:85:53:49:c5:21:ab:61:a5:3c:11:c6:
cf:c4:81:d7:e9:97:a2:ec:4a:11:fe:3c:66:a6:3a:
42:09:16:c8:e3:59:dd:ca:29:63:8c:0f:ac:d4:e9:
ba:d5:cd:4f:f5:90:ca:76:4c:10:32:f4:d6:fc:66:
af:93:1b:6a:3e:de:37:1d:bd:ec:39:7d:36:15:12:
ba:70:ac:aa:82:67:55:b4:f4:17:71:63:de:26:54:
a4:f5:48:b6:25:ae:e0:17:25:70:35:26:59:68:3e:
87:05:ad:14:6c:46:37:02:92:fb:90:aa:f5:31:d2:
54:ec:e2:a2:c4:82:37:4a:2d:14:29:b1:98:4c:52:
fc:1f:ad:27:37:5b:01:73:e6:72:be:9c:df:82:9f:
58:5e:f1:aa:2c:2e:61:cf:9e:97:9b:9e:fe:74:59:
f5:00:de:33:67:9e:0d:d6:59:0d:74:6d:a0:ff:76:
9c:33:66:48:e6:40:2d:a5:43:19:12:91:82:9d:59:
30:b9:d9:68:a9:de:d7:e0:2d:54:b5:39:a8:65:81:
5f:11:62:c2:0a:79:06:cc:81:5d:6f:2d:ee:89:01:
ae:4c:bd:a7:aa:39:df:3d:ad:ec:25:65:b4:5d:64:
6c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:70:AF:FA:1B:EC:95:5F:61:3E:38:24:54:3A:12:F9:82:95:18:0A
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/k3Cv-hvslV9hPjgkVDoS-YKVGAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.49.0-185.211.50.255
Signature Algorithm: sha256WithRSAEncryption
73:be:67:4a:9a:41:fa:5d:4d:00:1e:de:d8:f9:16:aa:8a:d0:
24:f6:91:53:14:10:d8:9e:ff:4b:50:2c:8a:ba:a9:25:a4:52:
e7:6b:d8:61:19:2e:f7:6f:74:09:fa:46:4c:a7:c7:34:51:ac:
09:9d:44:ad:e3:a3:91:d2:14:d0:ee:21:0d:73:28:56:fe:c6:
a3:f6:db:54:77:67:4e:25:ea:08:ce:a9:b5:cd:2d:05:66:0d:
a8:77:c6:c1:da:a9:b9:bd:d9:89:dd:ea:67:5b:11:fc:e7:f9:
46:2b:6b:d9:fc:b1:bd:fa:f9:bf:c2:03:fc:00:42:e5:fd:6f:
55:88:49:46:2e:fb:a2:d4:b7:4e:91:1c:35:ac:b6:0f:e9:e8:
e0:d2:2e:31:12:79:9d:dc:f3:09:63:f9:6a:25:6d:65:20:98:
64:24:f4:eb:cf:3a:12:80:a9:4c:35:49:53:89:84:cb:fc:c6:
84:3e:ed:b4:49:fa:aa:bc:55:c4:5d:e3:61:5b:54:7d:80:15:
cd:7b:a3:f5:d2:71:53:f5:66:dd:f4:7d:da:26:e0:c4:ce:ae:
da:69:1c:bf:60:7f:7f:8f:89:0e:f4:00:c5:99:43:4c:7b:5d:
42:39:20:ec:53:47:db:5f:2f:9c:76:31:08:7b:df:95:01:e7:
ec:ec:49:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:22:06 2025 by rpki-client