Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1-PYhAgIWTAx-PRv9pSYclB59M-M.roa
File: 1-PYhAgIWTAx-PRv9pSYclB59M-M.roa (raw, json)
Hash identifier: FcNze23J4TaGqSMlXqFoadjTRVDGzu2/BqN/XtCpICQ=
Subject key identifier: F8:F6:21:02:02:16:4C:0C:7E:3D:1B:FD:A5:26:1C:94:1E:7D:33:E3
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019427B56F644B9448EDF1673917FDE3E941
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1-PYhAgIWTAx-PRv9pSYclB59M-M.roa
Signing time: Thu 02 Jan 2025 15:49:49 +0000
ROA not before: Thu 02 Jan 2025 15:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208626
IP address blocks: 185.39.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Mar 2025 11:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:6f:64:4b:94:48:ed:f1:67:39:17:fd:e3:e9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 2 15:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8f6210202164c0c7e3d1bfda5261c941e7d33e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:7f:38:de:ff:ca:6c:c4:9f:a3:db:1b:7b:
5f:e2:f6:35:ba:e1:28:1f:eb:48:d1:bb:c3:97:f3:
ca:29:09:1f:72:f7:7d:97:3c:c1:e4:98:72:df:8b:
4c:5c:76:16:a7:fe:c2:1f:ff:84:0e:39:d8:73:ab:
e0:c3:00:c8:c1:c9:a9:57:64:a5:f9:db:a3:1e:78:
28:c5:f1:61:0e:10:37:18:cc:0c:e7:86:37:d3:72:
b2:8f:f3:dc:a4:c6:82:63:52:a4:dd:51:52:0d:90:
cf:82:da:6f:05:5e:52:55:aa:17:df:a9:a8:20:b5:
8f:9f:19:d8:11:d4:80:b3:f0:46:a9:42:16:ab:8d:
5d:ec:64:ba:55:2c:73:5b:bc:4f:e2:a0:23:76:55:
18:e2:da:1e:c1:c3:b4:f8:86:7f:b3:27:9c:34:6c:
80:1b:4e:88:ce:1a:fb:04:63:67:e4:0f:bc:a3:55:
6e:87:fc:2a:a1:6a:4a:05:29:f2:60:30:1d:c0:05:
36:dd:b8:18:7b:a5:09:b8:7f:5a:41:06:f4:87:f0:
28:42:8b:8c:47:d4:a4:28:36:06:1c:fc:d4:26:19:
03:90:fd:ac:df:e1:63:db:24:2f:07:06:52:c4:83:
c3:09:58:4f:75:9a:dd:5b:98:56:1c:62:48:1a:4d:
10:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F6:21:02:02:16:4C:0C:7E:3D:1B:FD:A5:26:1C:94:1E:7D:33:E3
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1-PYhAgIWTAx-PRv9pSYclB59M-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.206.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:3d:b5:1c:76:ae:86:b2:ad:35:45:f5:e6:be:1b:f2:04:9a:
f8:eb:f8:64:17:3b:bb:44:a4:ec:b9:f9:ef:e5:e9:be:67:8a:
39:58:3d:f0:83:0c:0e:98:a7:78:a2:f6:d8:4c:4b:1f:57:8d:
95:b4:32:bf:28:2a:02:8d:69:99:05:b1:0d:e8:f1:f6:c5:30:
4c:04:88:fa:49:bb:8c:a0:3c:18:9e:94:47:c7:51:98:9a:e9:
0b:72:1f:cb:26:a8:1b:a5:fd:b2:d4:a2:a6:15:29:35:ad:cc:
04:8d:a3:26:21:51:e9:8e:79:49:0d:86:1f:62:79:00:0f:a1:
c9:27:cf:73:0e:74:ca:3d:94:30:a9:48:c5:98:2c:57:75:ab:
5a:32:94:5e:2e:55:6a:9d:6e:6c:32:b4:64:f7:71:8c:f5:e8:
33:c4:d8:b9:7e:f4:4a:33:c5:05:5c:fd:72:af:00:aa:bf:d1:
3f:45:5b:91:c0:dc:82:dc:27:f7:9d:44:93:07:88:fd:f3:08:
61:7e:be:e3:d7:09:bb:38:34:af:8a:aa:e7:39:b8:1d:6a:c9:
20:88:6b:81:86:88:74:c5:4b:a6:e9:99:b9:3a:3a:39:fd:a6:
5f:14:12:c2:c4:1f:46:44:90:11:60:72:0d:52:5a:bc:00:bf:
da:98:93:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:25 2025 by rpki-client