Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/mYWDTHd__fKJHWcO39va8_25eh4.roa
File: mYWDTHd__fKJHWcO39va8_25eh4.roa (raw, json)
Hash identifier: nRykGPDYLrJPGPh3DeLNBq74GjJkdITx9cJ/0rZGrl0=
Subject key identifier: 99:85:83:4C:77:7F:FD:F2:89:1D:67:0E:DF:DB:DA:F3:FD:B9:7A:1E
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019427B5760C3DD6CE61A4E6D9CE7FA7EA1A
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/mYWDTHd__fKJHWcO39va8_25eh4.roa
Signing time: Thu 02 Jan 2025 15:49:51 +0000
ROA not before: Thu 02 Jan 2025 15:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216475
IP address blocks: 185.39.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jan 2025 05:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:76:0c:3d:d6:ce:61:a4:e6:d9:ce:7f:a7:ea:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 2 15:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9985834c777ffdf2891d670edfdbdaf3fdb97a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:32:62:24:2a:b7:ef:dd:a4:a1:26:e0:97:68:
4d:f6:f1:2c:ca:d6:dd:e1:59:42:d4:eb:93:95:6f:
e6:f0:c6:f5:dd:d1:78:5f:2c:f5:80:ba:53:b4:7d:
78:c4:01:63:91:5f:df:3f:3b:87:bc:b7:b2:a7:10:
8e:74:c5:8b:70:7f:7d:11:1f:0d:f5:2a:22:cc:b4:
69:de:da:05:ea:b1:3e:fd:23:60:47:d8:fe:e4:b0:
46:38:64:b4:5a:d4:3d:2c:44:ae:ed:58:6d:a4:d9:
2b:3b:9f:62:79:06:07:cd:01:62:b3:fb:62:54:fd:
58:cf:03:a8:d6:ed:a5:b8:04:b7:34:8a:fc:74:54:
41:10:4b:8a:a3:e3:e2:4e:45:7e:13:9b:96:51:b7:
24:c5:2f:4e:1b:95:3f:a8:2b:52:3a:66:5a:05:44:
ca:44:c5:a5:f0:66:9c:96:76:c3:c7:2d:4d:f7:87:
2d:a0:63:6c:a7:d7:f4:2b:12:d3:50:38:5d:4e:f4:
33:e1:fb:89:f6:4c:d3:2a:82:ed:bb:10:bc:6a:02:
f1:93:92:3e:aa:58:91:45:38:bc:b9:bd:03:29:5a:
97:c1:6d:10:29:3d:07:d6:1a:ff:f4:3f:fb:98:87:
3e:17:68:94:cc:9a:80:00:fe:15:e1:5f:10:83:95:
02:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:85:83:4C:77:7F:FD:F2:89:1D:67:0E:DF:DB:DA:F3:FD:B9:7A:1E
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/mYWDTHd__fKJHWcO39va8_25eh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.206.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e3:84:c2:13:00:fa:b6:ab:d7:3d:82:0d:eb:09:58:b5:2d:
70:7f:8b:ef:6c:77:38:e1:01:80:2e:4a:44:9e:a4:33:6b:d6:
0f:86:6b:e9:c5:19:7f:91:f8:a3:a9:d5:6e:16:c2:96:fd:8d:
9d:1d:0b:3a:f1:d0:72:40:54:ba:92:78:8e:58:d2:de:92:da:
23:65:a8:83:62:52:96:6c:f5:66:53:72:5b:be:60:40:60:f8:
1f:53:49:96:b4:e1:24:0c:15:c4:8f:55:24:c9:3d:af:11:52:
48:e2:40:c8:06:54:74:eb:5d:6c:5b:ad:2a:92:2b:69:de:e8:
29:44:b2:61:cc:17:69:d1:21:a6:61:4c:1f:46:e8:28:b4:68:
35:20:17:d0:11:e1:a8:9e:76:c5:0d:ad:4d:e2:3a:27:7d:cf:
7d:18:60:97:07:b8:fe:7d:06:f2:b7:e5:8b:ef:1f:d4:08:9b:
80:70:df:5c:a6:a3:02:c1:51:4b:f5:95:87:ea:aa:75:37:36:
c0:4b:b5:8d:91:26:50:1c:0e:3f:b8:dd:ec:90:d9:f7:fd:fb:
31:62:80:dd:88:bc:9a:b4:5a:b8:18:00:15:ef:ae:dc:d9:00:
bc:43:9e:22:63:9d:28:8b:a1:7d:b0:c5:ae:9e:ac:91:95:d3:
d5:09:e7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:17 2025 by rpki-client