Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/K0spuDDcqULoy49vL1xdKNBluFk.roa
File: K0spuDDcqULoy49vL1xdKNBluFk.roa (raw, json)
Hash identifier: YFLBpCfHswKa/wjU6ZzD9D+GGbuu1n+BKvH4n8vO98U=
Subject key identifier: 2B:4B:29:B8:30:DC:A9:42:E8:CB:8F:6F:2F:5C:5D:28:D0:65:B8:59
Certificate issuer: /CN=987277fc47d848fa5634ce8031a174fc249fa673
Certificate serial: 018CF3A00920AF31FA0B44B93F327C871C24
Authority key identifier: 98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/K0spuDDcqULoy49vL1xdKNBluFk.roa
Signing time: Wed 10 Jan 2024 13:46:40 +0000
ROA not before: Wed 10 Jan 2024 13:46:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 185.194.10.0/24 maxlen: 24
185.194.11.0/24 maxlen: 24
185.194.8.0/24 maxlen: 24
185.194.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:49:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f3:a0:09:20:af:31:fa:0b:44:b9:3f:32:7c:87:1c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987277fc47d848fa5634ce8031a174fc249fa673
Validity
Not Before: Jan 10 13:46:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b4b29b830dca942e8cb8f6f2f5c5d28d065b859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:68:d4:1d:96:bc:a7:ae:bc:b8:a0:01:b1:d8:
64:87:5a:5d:e6:2a:30:69:03:d4:a6:7c:b0:1b:f8:
84:4d:43:b3:29:c9:e6:73:3e:94:10:c2:97:02:d9:
61:ae:d9:ad:d5:0d:c6:85:b9:fe:b6:53:19:d8:27:
51:1d:55:0e:5f:12:bd:92:e4:02:96:2e:87:37:44:
81:93:ee:3a:90:a5:fb:22:8d:81:e9:f8:62:75:ed:
25:a7:d0:df:41:fd:ea:f7:30:b6:21:4f:0c:d0:bf:
cf:41:97:de:11:d8:23:96:04:a0:f7:69:77:cd:4f:
a4:b1:16:80:54:52:c0:de:1e:94:0f:ea:47:1d:55:
b7:a6:44:23:00:a0:fe:a0:c8:64:eb:15:3f:91:b5:
99:ab:c2:c5:5c:15:6d:a7:5a:57:df:55:97:e7:53:
d6:78:6f:22:99:0d:9d:7d:bb:01:8f:30:a7:9d:81:
e8:1b:00:7b:b0:ac:df:0a:56:d5:2f:2f:e4:a3:7f:
16:e6:fa:fc:09:23:62:67:72:de:98:b0:2d:39:29:
2c:dd:f2:b7:8f:d5:e2:e9:c7:ab:60:f3:98:aa:57:
25:83:a4:be:61:4b:2a:5b:e3:d9:be:39:f1:06:1c:
ce:02:c9:2b:5b:5d:af:5b:bd:db:f2:4e:9b:e9:07:
5d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4B:29:B8:30:DC:A9:42:E8:CB:8F:6F:2F:5C:5D:28:D0:65:B8:59
X509v3 Authority Key Identifier:
keyid:98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/K0spuDDcqULoy49vL1xdKNBluFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.8.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:c3:dc:42:d7:83:cd:a5:0e:cb:01:92:ad:3e:e9:f1:ac:5b:
00:86:c9:6a:28:d8:cf:b4:f8:87:61:a6:59:1a:e5:d2:83:32:
d8:f3:c2:7c:a8:77:67:00:b5:7b:f0:63:3d:af:77:ca:b6:fb:
9d:b0:fc:21:d3:1b:98:80:87:a3:94:6f:e5:17:b2:a6:76:46:
fc:47:a7:71:ea:6b:84:4e:af:13:5c:99:82:ec:ae:a9:ea:bb:
34:1c:51:5a:7c:5e:80:a1:ef:52:f0:13:c0:81:f9:98:7d:f5:
0b:58:86:39:b7:9c:5d:4c:65:ef:3e:4d:3d:7a:10:63:6f:70:
3f:6f:01:7b:51:66:6f:e2:cb:21:b0:ed:92:ed:74:5b:6a:65:
b6:42:d9:ce:bc:74:5b:66:c1:56:19:26:63:2b:f0:d6:b1:ee:
d6:56:7d:30:f2:94:3f:ce:0b:e9:c3:f7:a5:2e:ac:98:0c:b0:
78:68:48:bf:17:f8:4e:c8:08:83:dd:86:d6:25:5f:10:7c:c3:
59:95:88:06:d4:46:15:f9:8a:50:cd:6c:57:f7:32:84:1d:4b:
44:03:0c:71:91:07:a0:97:f6:54:7c:fa:40:bb:4a:3b:71:c4:
9b:19:9b:32:04:7c:c2:c7:c6:56:18:9f:f0:85:e3:17:ad:3a:
99:aa:9b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:13 2025 by rpki-client