Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/BteXQ1tB5RwKg0P5aFoOrw-Swxs.roa
File: BteXQ1tB5RwKg0P5aFoOrw-Swxs.roa (raw, json)
Hash identifier: jKWVVJtZpEEeQvWbZywda+7qSGXwJAUVT6+CByEHibQ=
Subject key identifier: 06:D7:97:43:5B:41:E5:1C:0A:83:43:F9:68:5A:0E:AF:0F:92:C3:1B
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018CC2DB6CE1C2ECF2229AD3D9ABF4AB8734
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/BteXQ1tB5RwKg0P5aFoOrw-Swxs.roa
Signing time: Mon 01 Jan 2024 02:30:09 +0000
ROA not before: Mon 01 Jan 2024 02:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216475
IP address blocks: 185.39.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:6c:e1:c2:ec:f2:22:9a:d3:d9:ab:f4:ab:87:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 1 02:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06d797435b41e51c0a8343f9685a0eaf0f92c31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7e:58:b8:1c:ac:f5:dc:42:f8:9a:f8:08:aa:
b1:0a:95:93:67:ec:2f:f9:c5:03:2c:c1:30:45:ad:
8d:d0:bc:b8:0c:ce:93:95:ec:85:bd:b8:9b:a4:29:
f7:3b:6b:a2:74:4a:f1:fe:d2:9d:bf:d7:97:a7:d6:
95:82:9c:5a:f3:13:52:01:f4:d4:e3:e3:74:ec:41:
8b:03:cf:54:db:97:c8:df:87:45:22:43:a8:9a:74:
5b:b3:d3:e8:41:76:ae:b5:f7:7b:ca:92:12:6b:72:
29:57:73:96:d7:5e:0b:88:71:b5:cf:34:76:b8:79:
bd:f2:76:49:1a:ce:de:da:d6:9c:03:1e:65:96:43:
6d:60:dd:28:ac:f2:81:f1:13:76:cf:ec:fa:fe:da:
e8:51:d3:80:71:9d:dc:73:63:f4:bb:92:7a:76:48:
5f:e8:08:1d:97:7e:ab:5d:8c:5e:86:16:a2:7d:68:
d5:a3:fe:15:20:9e:0d:79:32:e4:b1:5b:e0:04:31:
5c:90:13:80:ff:11:71:07:d6:20:40:97:5d:77:cf:
50:3a:22:e9:fd:54:4b:e2:22:6c:20:e3:6a:db:fe:
ff:fd:7b:5c:a3:c8:ca:be:2a:26:00:e6:ea:ca:75:
d0:78:ef:4b:d2:e5:c6:0c:89:21:a1:a1:e5:85:57:
1a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D7:97:43:5B:41:E5:1C:0A:83:43:F9:68:5A:0E:AF:0F:92:C3:1B
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/BteXQ1tB5RwKg0P5aFoOrw-Swxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.206.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:0c:51:dd:f3:a6:9a:6c:f4:0a:05:af:fa:69:eb:a9:8e:d3:
2b:95:96:6d:c2:de:b6:24:6b:10:6f:6f:f2:66:a0:5c:02:1e:
f8:e3:0f:af:ff:25:8b:4d:ad:a1:4d:99:ec:40:87:76:70:ce:
ec:39:2d:79:3c:60:a9:d3:c2:2d:08:a3:04:55:39:d1:03:3a:
50:69:ca:ff:d6:ac:08:5e:75:01:9a:cd:c0:50:45:4a:9f:29:
95:cd:10:70:3f:04:3a:80:11:25:5d:45:6d:9d:f3:d3:bd:18:
81:57:f3:55:3b:74:c6:f5:d4:9a:d8:9a:d8:d2:84:75:5d:83:
7a:83:51:e0:3e:46:7f:71:f5:58:5e:a7:02:6d:07:5e:d5:56:
bd:48:94:38:29:ab:2c:16:dc:1e:ab:ca:d4:bc:af:e5:43:b3:
35:26:c3:b7:14:49:30:56:7e:3a:1f:26:e5:4d:41:73:2b:b8:
a1:a3:42:d0:46:1c:b8:c4:03:98:28:9c:86:b2:7c:6b:ec:2f:
cf:6b:80:75:0d:51:c2:a8:81:d6:a7:1c:4c:2b:56:66:8e:6e:
10:f8:27:eb:6d:97:6a:da:8d:1b:88:89:eb:ff:dd:36:37:06:
c7:e2:5d:17:4f:37:9b:e3:16:78:05:da:a5:c6:71:5a:42:71:
44:60:5d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:45 2025 by rpki-client