Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/6n0n_8aIyYsDWV8UUdZsUhJsC7s.roa
File: 6n0n_8aIyYsDWV8UUdZsUhJsC7s.roa (raw, json)
Hash identifier: hZSEla7eCiGIytv1mjBFNFJBOPtlD2whSG5R6W7VFII=
Subject key identifier: EA:7D:27:FF:C6:88:C9:8B:03:59:5F:14:51:D6:6C:52:12:6C:0B:BB
Certificate issuer: /CN=a01012ec845500718cab76c9dd0af010890de26d
Certificate serial: 0193DE29D63E1CF64A05A6CE75868F4A0E6D
Authority key identifier: A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/6n0n_8aIyYsDWV8UUdZsUhJsC7s.roa
Signing time: Thu 19 Dec 2024 09:05:03 +0000
ROA not before: Thu 19 Dec 2024 09:05:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48286
IP address blocks: 185.12.108.0/24 maxlen: 24
185.12.109.0/24 maxlen: 24
185.12.110.0/24 maxlen: 24
185.12.111.0/24 maxlen: 24
185.241.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Dec 2024 17:43:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:de:29:d6:3e:1c:f6:4a:05:a6:ce:75:86:8f:4a:0e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01012ec845500718cab76c9dd0af010890de26d
Validity
Not Before: Dec 19 09:05:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea7d27ffc688c98b03595f1451d66c52126c0bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:dd:ba:f6:87:be:d4:75:09:c2:6a:4b:70:f8:
c5:6b:df:f6:c1:60:01:58:5f:78:7c:71:fe:74:01:
29:ab:f0:5d:89:d7:fc:e4:cd:67:3f:ee:3b:c2:80:
fb:20:1d:d0:b4:21:e0:d9:6f:2d:85:f6:9f:33:09:
d5:52:e1:13:ff:60:5c:50:df:f9:c0:2f:9a:e2:bf:
52:50:ac:a7:96:51:74:a3:a9:ac:d2:ce:4c:95:3d:
7c:c8:8b:9c:63:2c:2f:1e:63:49:b8:20:49:a1:dd:
75:f2:e8:3a:04:76:bd:bd:ee:60:e0:bb:2f:85:27:
93:a7:4d:3f:f9:90:ac:21:df:bf:02:f5:bf:d8:79:
e0:dc:a5:68:41:d5:1e:76:a7:93:9c:c8:79:9c:8d:
21:dd:63:3a:a5:29:ab:13:a1:8e:8f:0d:5a:d1:78:
e7:9e:e4:2f:39:aa:3e:c4:c7:db:a7:d1:03:76:4d:
d1:d7:3a:5a:70:24:86:81:d3:4a:df:20:11:53:f4:
5f:ab:79:39:2f:87:38:eb:2a:41:0f:c3:4b:11:0b:
42:2d:c9:3e:5c:79:0e:4f:e2:bc:5a:b1:ea:55:b9:
90:cc:7d:eb:94:68:52:94:9c:50:db:d7:80:75:a3:
33:8b:0a:fe:d5:b1:12:63:8a:d4:fc:86:a5:8c:5a:
1a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7D:27:FF:C6:88:C9:8B:03:59:5F:14:51:D6:6C:52:12:6C:0B:BB
X509v3 Authority Key Identifier:
keyid:A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/6n0n_8aIyYsDWV8UUdZsUhJsC7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.108.0/22
185.241.56.0/24
Signature Algorithm: sha256WithRSAEncryption
85:05:17:9e:84:83:c6:d3:bd:13:e9:ac:97:b0:1f:8b:02:af:
9c:b3:c3:9e:d1:e5:52:51:c5:03:6b:bd:6a:f0:0f:e0:14:4e:
25:e9:f6:cb:0e:4c:c3:90:8c:ba:d5:d2:3e:ca:e8:fd:18:57:
d9:6e:de:77:98:e9:7d:db:1e:0a:07:30:b2:42:76:4c:43:85:
7c:8e:74:53:4e:cf:4a:a6:25:26:fb:cd:d3:35:58:c5:24:bd:
9f:b2:5f:2f:3f:2e:e0:ae:e3:ad:fa:93:83:4a:fd:27:c5:96:
50:6b:c8:20:1a:70:7b:ff:7a:ce:b6:28:44:25:65:40:c3:d8:
a6:66:c4:a9:30:89:91:9a:71:e1:35:c3:fe:e8:bb:ec:e1:59:
c1:4f:ed:66:b0:d2:a4:76:de:2f:ed:02:0b:88:7d:02:d4:69:
ce:98:eb:fa:b5:9f:db:73:bd:eb:7c:08:b2:99:6b:97:fc:66:
5a:d1:0a:79:39:97:81:66:a9:47:97:10:73:ca:b9:5e:99:a4:
98:df:1f:1f:84:64:ca:71:59:28:e5:d3:21:07:5c:3f:b6:49:
9b:24:a7:39:57:b6:a0:ac:d7:fa:43:07:41:cd:f4:9f:28:bd:
bd:30:6c:ca:21:99:c1:91:74:a3:80:74:57:8a:3b:c7:32:97:
5f:00:62:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:51:22 2025 by rpki-client