Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/1-rT8CRdTVVlJNV61QYQHCLs9MHc.roa
File: 1-rT8CRdTVVlJNV61QYQHCLs9MHc.roa (raw, json)
Hash identifier: LaKbII1lj9a4MjPPqct9Pb5bbZkImqF9jq1W20H0RSc=
Subject key identifier: FA:B4:FC:09:17:53:55:59:49:35:5E:B5:41:84:07:08:BB:3D:30:77
Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Certificate serial: 019427B4F21B246D057B3C43D639C544AD88
Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/1-rT8CRdTVVlJNV61QYQHCLs9MHc.roa
Signing time: Thu 02 Jan 2025 15:49:17 +0000
ROA not before: Thu 02 Jan 2025 15:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201500
IP address blocks: 185.137.69.0/24 maxlen: 24
185.174.213.0/24 maxlen: 24
185.174.214.0/23 maxlen: 23
185.174.214.0/24 maxlen: 24
185.174.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 12:15:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:f2:1b:24:6d:05:7b:3c:43:d6:39:c5:44:ad:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Validity
Not Before: Jan 2 15:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fab4fc091753555949355eb541840708bb3d3077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:74:00:cd:89:7d:36:ed:76:47:14:1c:1b:
44:27:2d:96:46:9b:23:6e:e8:07:4f:22:cd:dd:00:
c2:c9:24:73:20:43:03:ee:38:f2:49:df:db:87:63:
9a:39:5b:e6:d4:3a:0e:74:26:ca:91:53:ad:d0:4f:
4f:67:e4:8c:00:39:77:60:a0:2f:e9:33:d9:29:40:
84:7e:20:38:36:83:42:e9:a5:53:85:83:7e:18:ee:
03:8a:a1:14:98:88:d7:a1:04:db:f2:b8:ec:bc:94:
71:97:9b:67:b5:0b:c6:f2:84:ba:50:36:ae:25:29:
a8:8f:fc:c9:fa:7c:93:cd:8b:f1:b2:34:3f:52:2c:
e7:6e:c0:64:f2:a6:ab:78:f2:24:76:9b:ab:b8:cb:
f1:3c:63:e3:22:e4:f0:21:97:27:fd:88:94:75:ff:
da:f2:29:b3:66:5f:05:81:f9:ca:3c:2e:fc:64:ad:
77:17:63:b5:92:69:9f:03:e3:9e:ef:93:64:3b:95:
1a:36:82:78:56:7d:02:8c:ab:40:c6:c0:d6:b3:a8:
27:a1:10:02:34:6a:58:8f:72:a5:25:62:be:8b:ff:
53:fc:0b:c5:1c:af:72:ca:45:61:73:a2:19:01:ba:
57:8d:21:11:8a:8a:87:20:3d:b9:c4:e9:4b:0e:be:
99:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B4:FC:09:17:53:55:59:49:35:5E:B5:41:84:07:08:BB:3D:30:77
X509v3 Authority Key Identifier:
keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/1-rT8CRdTVVlJNV61QYQHCLs9MHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.69.0/24
185.174.213.0-185.174.215.255
Signature Algorithm: sha256WithRSAEncryption
23:b0:6b:2b:63:06:e4:45:65:2f:7b:03:28:97:0e:bf:4a:f6:
7f:16:9e:80:e5:6f:58:b9:ac:62:cf:72:cf:d4:e7:ae:4d:2a:
0b:7d:c2:e8:12:20:80:f6:c3:4a:fc:56:e2:07:f5:dd:20:cc:
a8:56:9a:09:aa:92:6d:40:43:28:3d:a8:50:73:c2:7c:da:98:
58:81:2a:ca:28:cc:5a:e3:5a:dc:47:dd:b5:a0:d5:82:b0:2d:
d8:3c:96:71:d8:b8:09:b6:50:a6:63:8b:ae:7b:19:20:dc:71:
38:bd:38:ba:2c:bb:7a:41:cf:8d:d0:67:b9:9f:89:b9:1a:76:
c3:15:62:5b:79:23:73:71:42:ec:6a:b5:96:3b:30:e8:a2:4f:
99:fa:a2:3b:a6:0f:4f:3c:ee:26:9b:c5:b8:23:d2:c0:d8:46:
21:69:02:a3:cf:09:d6:67:4e:8a:ca:66:59:bb:92:a0:f6:88:
7d:d1:5e:16:96:e1:f7:f2:a6:8a:35:b9:68:21:83:af:90:ea:
53:6c:72:ae:98:59:ee:d3:98:0f:73:c5:c0:9d:d6:c4:7c:7f:
c0:91:50:a2:26:22:63:5a:b9:30:dd:70:ac:e1:64:c5:c0:f3:
17:52:08:53:22:a3:4d:29:ec:89:18:b3:f7:f6:ba:20:82:b7:
bc:bb:fb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:26:53 2025 by rpki-client