Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5oK36wLbb38pwQ1OrH8zPWhzEJU.roa
File: 5oK36wLbb38pwQ1OrH8zPWhzEJU.roa (raw, json)
Hash identifier: 7++lwkvr9xFJEMlOA+FWIB69sfliHym6zkZtWtqJo+c=
Subject key identifier: E6:82:B7:EB:02:DB:6F:7F:29:C1:0D:4E:AC:7F:33:3D:68:73:10:95
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01936CE46FB1D4A04ACBFB62497B27F243BE
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5oK36wLbb38pwQ1OrH8zPWhzEJU.roa
Signing time: Wed 27 Nov 2024 09:12:10 +0000
ROA not before: Wed 27 Nov 2024 09:12:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 185.240.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Dec 2024 09:08:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6c:e4:6f:b1:d4:a0:4a:cb:fb:62:49:7b:27:f2:43:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 27 09:12:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e682b7eb02db6f7f29c10d4eac7f333d68731095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:04:d5:8d:c4:16:0d:63:c0:b5:54:78:c4:33:
a6:d2:c5:c3:83:e8:02:a0:04:e5:97:f8:ea:75:96:
64:47:69:5d:9a:2f:55:51:68:5d:0c:86:ce:e9:d4:
c8:ea:8d:9f:55:43:8c:8b:eb:5a:e3:42:40:0c:c9:
36:12:3d:4f:06:ce:a9:4e:58:00:8f:86:ca:b5:d9:
fd:1b:eb:cc:b9:0e:28:23:f8:31:74:36:92:05:7d:
47:54:25:39:2e:5f:f8:e9:ac:a8:f4:66:56:5e:92:
70:79:24:d4:f4:80:41:aa:df:4b:e2:93:96:e9:fb:
42:38:4c:a9:12:59:22:fb:3e:62:78:54:2a:e2:7c:
f4:91:26:c1:81:88:c9:8a:c9:25:fe:1d:2a:23:80:
d3:f1:ff:fe:1f:e5:86:6f:41:2a:fe:f7:25:e1:02:
57:12:6c:fb:2e:de:51:87:dc:c4:df:9e:68:4a:28:
e4:9b:71:37:49:27:7a:d0:d2:1d:34:58:91:18:3e:
fe:4d:41:b8:6e:87:99:ba:13:e4:14:de:8f:c5:88:
cd:ad:f8:5f:ce:e2:c7:d1:a6:c2:c1:55:f9:42:04:
b5:fb:5a:3b:9d:4d:5c:fe:c2:e4:5f:bc:36:23:8a:
f7:f5:c7:33:e5:cf:c4:6a:b8:f4:a7:95:af:5c:d1:
90:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:82:B7:EB:02:DB:6F:7F:29:C1:0D:4E:AC:7F:33:3D:68:73:10:95
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5oK36wLbb38pwQ1OrH8zPWhzEJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.122.0/24
Signature Algorithm: sha256WithRSAEncryption
06:dc:c3:61:fa:4e:51:7f:35:f2:b9:6a:02:0f:73:31:ae:74:
fd:2d:8a:81:bc:01:d7:7b:17:f9:a1:11:b1:95:2d:0b:52:c9:
41:ce:97:0c:12:8b:ce:8c:95:69:de:6f:e1:ce:38:4f:6d:52:
35:e6:0a:d0:b1:8b:a7:54:c0:1f:e2:89:e6:94:eb:63:7d:1a:
11:9d:57:b4:0e:e2:a7:ac:30:f1:75:97:ee:af:61:b8:09:a6:
2f:65:25:e8:8a:bd:81:c9:cc:2b:bf:a2:3e:1a:40:b7:49:02:
1e:24:cc:af:25:fe:48:ad:23:92:03:08:b9:00:82:d6:0a:71:
89:a1:d5:37:a7:e6:df:49:37:e6:6f:69:ed:96:36:35:c0:2e:
f0:85:f8:16:9f:81:17:80:0b:a6:ba:2f:c4:91:61:1c:9d:92:
48:2c:9f:58:46:ef:0d:5d:80:52:c1:da:64:a2:4d:28:ff:17:
0b:fe:73:6a:2c:29:be:74:fe:72:99:76:35:6f:d5:a7:86:6f:
2e:ab:c5:2c:27:ea:a0:e2:e9:ee:aa:87:4e:3f:0f:e0:d1:eb:
36:ec:ef:4a:30:e1:4c:6e:7a:f9:8b:23:e4:e9:af:20:9c:77:
d4:a4:2b:80:b8:4a:4c:73:8f:f2:bc:cf:60:72:61:91:9d:ad:
fe:7e:47:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:10:41 2025 by rpki-client