Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/b8-MBfWUbkoXqqnqggzWhUdyWpo.roa
File: b8-MBfWUbkoXqqnqggzWhUdyWpo.roa (raw, json)
Hash identifier: yRYSYtdyE3BRo7ncFj4G7ITHAJJ8lYKvmyjarpd5sS0=
Subject key identifier: 6F:CF:8C:05:F5:94:6E:4A:17:AA:A9:EA:82:0C:D6:85:47:72:5A:9A
Certificate issuer: /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Certificate serial: 018CC424E584617D8CCF711EF64FE4EB050B
Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/b8-MBfWUbkoXqqnqggzWhUdyWpo.roa
Signing time: Mon 01 Jan 2024 08:30:01 +0000
ROA not before: Mon 01 Jan 2024 08:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34762
IP address blocks: 185.194.84.0/23 maxlen: 24
91.230.171.0/24 maxlen: 24
91.230.170.0/24 maxlen: 24
91.230.178.0/24 maxlen: 24
91.230.177.0/24 maxlen: 24
91.230.176.0/24 maxlen: 24
194.213.114.0/23 maxlen: 24
194.213.115.0/24 maxlen: 24
194.213.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Mar 2024 13:41:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:e5:84:61:7d:8c:cf:71:1e:f6:4f:e4:eb:05:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Validity
Not Before: Jan 1 08:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fcf8c05f5946e4a17aaa9ea820cd68547725a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:97:74:83:61:da:a5:4d:e9:55:ee:27:11:cc:
93:77:8c:fc:47:f2:0d:7c:61:72:bd:62:42:67:b9:
fe:dd:0e:49:a9:d7:ea:97:31:b9:19:2b:c9:49:52:
09:48:e0:f6:48:be:db:b6:64:73:6d:86:1e:c4:32:
c5:50:70:2d:ed:ed:6f:9d:88:da:4c:2b:93:06:21:
a5:07:05:f4:9c:3c:4f:b6:4f:93:53:9b:a2:dd:20:
4c:70:e1:02:95:53:f2:52:df:b4:5d:aa:a8:4f:50:
cf:ff:06:2d:0c:85:64:63:76:c9:f2:ac:10:eb:35:
90:c6:0a:43:94:12:61:7a:3f:93:02:37:e6:ae:21:
9e:7c:49:6e:2b:22:d0:84:c6:f4:8b:52:9b:2e:cc:
c1:9f:46:91:90:01:88:dc:32:8d:f1:7f:21:4c:f5:
ac:e5:3f:bb:99:5b:d9:90:1a:dc:25:4b:23:b1:a0:
28:0b:9b:1a:a8:9d:f6:b0:21:21:b8:60:13:7b:86:
09:90:cf:17:d6:e9:60:9c:71:3d:0d:c4:e0:90:c4:
bc:05:9d:9c:2b:6e:62:4c:19:70:4f:dd:cf:18:fc:
3b:37:2e:d9:71:b0:6e:ae:1a:4b:f4:36:90:7c:db:
10:b4:de:a3:5c:09:fe:be:37:7c:a5:83:91:41:84:
fe:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CF:8C:05:F5:94:6E:4A:17:AA:A9:EA:82:0C:D6:85:47:72:5A:9A
X509v3 Authority Key Identifier:
keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/b8-MBfWUbkoXqqnqggzWhUdyWpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.170.0/23
91.230.176.0-91.230.178.255
185.194.84.0/23
194.213.114.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:6d:d8:a2:d5:f9:2e:dc:ba:11:61:55:fd:c9:5a:69:cd:cd:
dd:98:eb:fd:5d:38:f4:51:40:3c:9b:2a:dc:80:e3:ce:e2:ca:
b6:46:81:ef:71:9b:31:df:4f:64:93:5d:6c:69:8b:0c:3f:ad:
c4:ad:5c:17:0c:3e:f1:65:d5:8a:38:0d:ac:c7:e8:50:af:bc:
85:a5:57:6e:3a:16:32:45:2c:88:31:d7:c9:2a:4b:5c:ed:7b:
d0:84:b5:4b:53:a7:49:38:ef:88:68:fd:6f:b8:30:2e:92:b6:
ba:d3:64:c1:fe:03:bf:a9:0d:65:25:7f:01:0b:b5:75:d8:da:
b6:8d:e0:a9:65:e3:ad:43:5e:98:b4:68:a1:9c:24:3c:76:8d:
91:40:9e:92:f5:e1:63:29:0c:d3:9c:eb:30:ac:9e:93:4d:a2:
d2:7d:69:ff:5f:32:15:a9:51:b2:3f:af:5c:e6:ed:0f:ac:f2:
ef:57:37:31:35:03:46:61:bc:71:a3:35:d3:f6:f8:eb:7a:1e:
97:4b:f7:34:f1:c9:f5:db:e5:6b:03:6b:ce:c0:d7:be:02:ee:
ec:66:ef:d1:df:49:a0:f9:8f:26:30:36:26:20:3c:4a:2a:a0:
19:db:8c:8e:1e:6c:4f:53:47:19:ee:72:dd:ef:0e:0f:aa:0b:
49:01:df:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:55:22 2025 by rpki-client