Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/cEbV9O0RLiAFgrBiIf8kPxJ16Fo.roa
File: cEbV9O0RLiAFgrBiIf8kPxJ16Fo.roa (raw, json)
Hash identifier: 9xTj4Sk2S20os158375qDszRUrF60sACftIDZynyWIM=
Subject key identifier: 70:46:D5:F4:ED:11:2E:20:05:82:B0:62:21:FF:24:3F:12:75:E8:5A
Certificate issuer: /CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Certificate serial: 018CC8DEB38AAE8AEA7AC62CDEACB2DA837D
Authority key identifier: A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/cEbV9O0RLiAFgrBiIf8kPxJ16Fo.roa
Signing time: Tue 02 Jan 2024 06:31:27 +0000
ROA not before: Tue 02 Jan 2024 06:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204586
IP address blocks: 185.218.72.0/22 maxlen: 22
185.218.74.0/24 maxlen: 24
185.218.75.0/24 maxlen: 24
185.218.72.0/24 maxlen: 24
185.218.73.0/24 maxlen: 24
2a0b:d440::/29 maxlen: 29
2a0b:d440:72::/48 maxlen: 48
2a0b:d440:73::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:b3:8a:ae:8a:ea:7a:c6:2c:de:ac:b2:da:83:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Validity
Not Before: Jan 2 06:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7046d5f4ed112e200582b06221ff243f1275e85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:54:4c:23:e7:5f:97:46:8a:e8:8a:ca:9e:
84:06:49:15:24:1c:1a:20:8f:b7:42:04:07:d7:5c:
1f:58:17:5a:df:c9:a1:8c:a5:6b:cf:ae:9e:17:ac:
b6:7f:1e:ad:89:a7:bd:66:9e:48:03:81:64:98:ec:
ea:48:89:67:d4:80:69:d7:63:87:b9:3a:d5:29:08:
60:96:15:84:13:e7:27:5a:f8:2e:64:b7:e6:cd:e0:
51:fe:cc:9b:67:f0:5c:5e:56:65:c0:4b:b3:05:40:
35:49:dc:1f:4b:06:a3:d1:40:2b:93:7e:07:a0:b8:
30:7b:d3:27:64:7f:bf:3d:dc:0a:44:e0:e6:1b:52:
7c:a5:c4:21:b8:57:36:28:50:f9:50:e8:38:3a:73:
fd:21:05:8e:b4:26:88:9d:7c:9c:fd:27:9b:b6:38:
64:08:0a:60:5f:43:93:59:1a:0d:a7:1b:6b:a3:2a:
f9:b1:ff:96:bf:ed:36:83:c1:12:76:91:21:10:f6:
85:87:48:51:62:c5:40:52:79:2d:2c:67:c2:89:f0:
3d:ae:34:6d:1c:38:2d:c7:53:69:8a:be:f7:2b:62:
09:6c:be:f7:2e:52:5f:c7:98:70:33:b2:47:07:61:
61:4f:1a:99:e4:01:26:3d:e8:66:70:c3:50:c2:ce:
9b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:46:D5:F4:ED:11:2E:20:05:82:B0:62:21:FF:24:3F:12:75:E8:5A
X509v3 Authority Key Identifier:
keyid:A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/cEbV9O0RLiAFgrBiIf8kPxJ16Fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.72.0/22
IPv6:
2a0b:d440::/29
Signature Algorithm: sha256WithRSAEncryption
2a:a1:ad:9a:4e:8b:1f:d6:e2:bc:bb:bf:77:4e:3b:f3:cd:5e:
3c:c3:f8:4c:15:fb:20:26:49:74:5d:26:b6:2b:a6:76:25:75:
08:0e:03:4b:09:fb:1f:26:06:2b:a4:2f:59:92:e4:0b:ea:de:
56:cc:ec:c5:02:8b:a5:ab:66:31:d1:c8:50:70:e0:1c:39:e5:
39:20:91:da:56:9d:fa:e5:a9:ad:be:6e:d4:47:48:e4:e0:3c:
54:ee:30:a5:4b:8b:48:4f:1b:06:a2:c4:6c:ed:81:c8:73:58:
80:b2:7a:30:c9:c1:02:40:56:77:70:2b:a8:f6:85:17:65:82:
58:5d:1c:64:41:9a:33:4a:52:26:6d:4f:52:11:3c:8f:2c:18:
f0:f5:67:b8:bc:14:34:d8:40:da:f6:b4:c2:a3:52:6d:70:a4:
49:41:8f:89:f4:31:a9:eb:f1:6b:3c:09:ae:cb:ad:1f:5d:14:
c0:f2:c1:3b:49:c8:9e:68:4c:56:ae:78:de:60:6b:4e:6b:06:
58:62:c9:17:9f:8a:6c:67:91:7d:29:8c:8f:e5:5a:19:74:9f:
17:e9:a4:9a:e1:18:ff:48:fd:6a:4f:a7:69:e8:64:cb:0f:a1:
aa:f2:13:b3:95:7b:e2:4f:4a:62:6c:ab:ea:10:46:98:0d:5e:
fa:c2:e0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:40 2025 by rpki-client