Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/ImrmJiA40yFVC0Ccy6_Kq96KmfE.roa
File: ImrmJiA40yFVC0Ccy6_Kq96KmfE.roa (raw, json)
Hash identifier: ErIc8kajB3iBHVNRIrpzIzztXCh0ujs6OlT9t0iu3MQ=
Subject key identifier: 22:6A:E6:26:20:38:D3:21:55:0B:40:9C:CB:AF:CA:AB:DE:8A:99:F1
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018CC2DB63BDA32EEC3928A5C8A00970297F
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/ImrmJiA40yFVC0Ccy6_Kq96KmfE.roa
Signing time: Mon 01 Jan 2024 02:30:06 +0000
ROA not before: Mon 01 Jan 2024 02:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48899
IP address blocks: 185.39.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 05:16:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:63:bd:a3:2e:ec:39:28:a5:c8:a0:09:70:29:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 1 02:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=226ae6262038d321550b409ccbafcaabde8a99f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7d:1b:5a:73:6d:c7:e6:fd:73:8e:2e:80:7a:
42:2b:32:e6:dd:d3:e2:92:33:9d:59:ad:ba:9e:58:
a5:59:b5:0f:11:4f:b7:40:3f:e2:56:b1:38:c8:54:
fb:88:16:a4:44:16:62:5f:7f:d7:1c:84:0d:c8:ab:
ff:d0:1a:ec:42:39:63:c2:a2:5e:ba:ec:2b:fe:43:
d3:eb:51:b2:17:49:af:fa:97:f9:2a:f7:37:2d:b4:
fc:5d:76:96:dc:22:21:32:be:7e:34:96:bf:9a:ab:
fe:98:ea:09:3a:8d:8d:c5:f3:2f:8c:21:a2:c7:92:
6b:fb:18:9b:8c:c1:72:aa:9a:30:52:3d:7b:0d:82:
9d:0b:8b:ba:0e:75:7a:3b:20:dc:69:5d:a5:77:1b:
9e:37:f3:08:d5:4e:84:d8:70:7f:d8:df:ba:14:a5:
19:12:e1:58:78:3e:f4:dc:ae:bd:09:87:3e:04:7e:
30:12:b6:4f:c3:4e:e5:96:da:5a:28:78:ce:b2:7f:
57:42:eb:a0:19:f0:1f:c1:df:6d:73:d1:74:3f:20:
ca:9e:77:6c:9f:bb:ce:3e:44:a9:a4:e2:6f:8b:ec:
6f:bc:33:c8:ec:af:92:05:59:27:10:1d:11:9a:66:
6a:52:89:22:ea:b9:94:05:fe:2a:1e:39:e1:3c:7c:
46:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6A:E6:26:20:38:D3:21:55:0B:40:9C:CB:AF:CA:AB:DE:8A:99:F1
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/ImrmJiA40yFVC0Ccy6_Kq96KmfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.205.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:01:c5:7a:8b:cd:3e:26:ff:f0:36:c8:c1:21:04:3c:68:ee:
83:17:92:63:ee:1e:3b:12:0c:c2:3a:3a:5d:68:83:47:b0:1c:
2c:ed:b5:69:70:c7:f9:de:96:3d:47:69:4c:c2:e3:66:18:89:
b3:ec:14:5d:88:c6:7a:5a:0c:30:22:eb:8b:e8:40:ad:95:9b:
d9:15:02:b7:80:cc:4f:a2:06:bf:d7:b3:7a:2f:9e:82:38:cc:
f8:70:19:a9:a6:f3:c8:71:ee:b1:74:07:63:e9:e2:d6:90:e6:
21:cc:12:a1:d8:0b:bd:13:b1:4e:24:58:a4:7e:2c:96:23:18:
82:61:e9:73:7c:89:ca:ec:d7:bd:c1:9d:61:0d:88:d5:de:89:
53:66:07:6a:e9:ca:31:ff:02:b0:50:a7:3d:fd:3d:68:b7:9d:
b3:c5:7a:27:8e:45:94:21:fa:f8:45:a9:36:58:7f:eb:04:56:
5b:e4:a2:f5:b7:90:95:86:bd:33:18:7e:68:9e:df:7a:7c:a4:
4c:83:18:10:c6:56:56:9a:9a:a7:42:67:6b:b7:08:d7:e6:89:
01:d0:8b:e1:fe:5f:63:97:82:67:39:c9:c4:d4:21:e7:70:24:
95:85:b8:c6:1b:01:0c:a8:02:b8:74:d8:58:4f:b7:bf:f0:28:
ab:fa:bf:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:29 2025 by rpki-client