Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/rLKUr3dK13URHN2NBVk3SrQMN7s.roa
File: rLKUr3dK13URHN2NBVk3SrQMN7s.roa (raw, json)
Hash identifier: skeFM0MQjJuRc7mRUtrp6Y6sJBu5lGDx/nUnUQO8VbM=
Subject key identifier: AC:B2:94:AF:77:4A:D7:75:11:1C:DD:8D:05:59:37:4A:B4:0C:37:BB
Certificate issuer: /CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Certificate serial: 018CC34921CF1F7CA4087E2A94B1DB2EB416
Authority key identifier: 60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/rLKUr3dK13URHN2NBVk3SrQMN7s.roa
Signing time: Mon 01 Jan 2024 04:29:59 +0000
ROA not before: Mon 01 Jan 2024 04:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25820
IP address blocks: 212.50.224.0/19 maxlen: 24
185.239.68.0/22 maxlen: 24
178.157.48.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:21:cf:1f:7c:a4:08:7e:2a:94:b1:db:2e:b4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Validity
Not Before: Jan 1 04:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=acb294af774ad775111cdd8d0559374ab40c37bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:40:c0:4e:3f:d9:86:25:00:70:9a:54:8b:73:
84:2a:a5:9b:28:52:ad:5d:05:6e:e8:ce:80:8a:ec:
96:74:0f:31:8e:1e:09:27:ed:4c:af:4c:db:02:ed:
f6:0f:55:8f:6d:87:64:26:11:8e:45:cc:e5:f7:3c:
27:7a:98:05:61:58:1f:2a:91:84:07:87:80:55:c4:
bd:c7:16:99:37:f8:98:68:35:dc:c9:a0:e7:ea:ae:
b8:10:c8:27:f7:fe:0b:62:6a:87:b1:51:f5:b4:96:
d6:92:f6:c2:f4:a2:a3:4b:27:75:29:02:43:fd:ea:
45:7e:40:d4:bb:7d:4d:5f:f9:ce:9e:f8:1d:af:83:
2c:42:2e:01:d2:53:a8:7c:ae:05:a8:2b:f5:cd:65:
3b:c5:c2:8d:c6:2e:35:9a:76:17:5f:43:c5:2c:61:
cc:e7:d7:b1:44:29:65:ad:0e:7c:a9:14:41:30:9b:
db:64:35:62:8b:de:c1:1d:71:ae:3d:2c:fa:e3:c9:
ae:b4:65:6e:5e:4c:21:df:08:de:67:9d:f2:b2:a4:
08:57:57:b8:90:c7:d5:40:1a:5d:d5:49:bb:22:ad:
f8:47:d4:70:4d:8c:18:3d:16:57:8f:13:a1:93:87:
7a:e1:5a:53:cb:0b:fb:c5:1e:1f:71:e8:95:6e:4a:
55:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B2:94:AF:77:4A:D7:75:11:1C:DD:8D:05:59:37:4A:B4:0C:37:BB
X509v3 Authority Key Identifier:
keyid:60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/rLKUr3dK13URHN2NBVk3SrQMN7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.157.48.0/20
185.239.68.0/22
212.50.224.0/19
Signature Algorithm: sha256WithRSAEncryption
2e:9b:21:aa:00:ce:3b:27:d7:4f:30:bb:0b:f8:4a:51:a8:42:
77:15:8d:d0:2d:33:28:40:5d:9e:a0:cd:99:64:69:b9:24:54:
0c:3f:ca:5b:40:0c:1e:c1:3a:b4:b8:e5:8f:a2:58:53:7e:ec:
45:07:25:9e:88:89:2b:e3:94:b1:d4:53:08:80:2f:66:64:07:
e4:8c:a0:c2:7a:c5:44:fd:e4:3a:3e:85:fa:38:ae:e1:60:9a:
ce:41:59:90:f1:6f:50:5d:c9:ad:4c:60:3f:da:41:18:59:3e:
ac:ee:3e:c3:e8:74:0a:78:1e:87:13:51:0c:c7:0f:cd:84:8b:
20:47:3a:15:2c:8e:b9:8b:50:4a:2b:16:ff:a0:97:e1:e7:5b:
fd:83:cd:c5:67:a8:7d:5f:08:39:75:6c:47:78:78:d8:32:83:
23:2b:98:29:30:be:de:14:48:78:08:66:0d:f7:9e:ce:36:f0:
fc:a8:64:ce:df:7e:d1:43:3c:b3:99:80:da:fb:ac:3e:7a:fe:
2a:70:ef:c7:34:57:07:67:89:c4:0e:92:0b:38:2c:9f:2f:2c:
73:27:ca:a2:b0:02:f3:23:4b:a2:1b:b0:51:ac:37:18:cd:e3:
b3:9f:8c:ff:0d:43:ad:c7:4a:69:73:36:d2:4b:1b:07:ea:13:
79:6c:0f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:04:21 2025 by rpki-client