Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rbyMPvil_3LCguimGN7Oa6hIE3A.roa
File: rbyMPvil_3LCguimGN7Oa6hIE3A.roa (raw, json)
Hash identifier: TCu0QmklxUzekKo+yc84BNNmJmvU+mkQMFYRReyc/Fw=
Subject key identifier: AD:BC:8C:3E:F8:A5:FF:72:C2:82:E8:A6:18:DE:CE:6B:A8:48:13:70
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01951DADC86868CA5A216774C46B63240BA8
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rbyMPvil_3LCguimGN7Oa6hIE3A.roa
Signing time: Wed 19 Feb 2025 10:08:03 +0000
ROA not before: Wed 19 Feb 2025 10:08:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 185.220.248.0/24 maxlen: 24
185.226.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Feb 2025 11:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:ad:c8:68:68:ca:5a:21:67:74:c4:6b:63:24:0b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 19 10:08:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=adbc8c3ef8a5ff72c282e8a618dece6ba8481370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:7c:0a:b3:24:1b:02:04:3c:cf:d6:3e:aa:
7b:39:7c:d6:7a:91:a3:91:c1:c9:8d:ae:fb:23:db:
b3:06:e6:17:58:29:32:6e:8f:ed:1a:ac:b2:52:9e:
5d:3e:65:9b:8d:92:29:9c:56:64:37:fe:00:48:70:
91:e6:92:ec:88:9a:ce:29:23:a5:1a:31:9f:20:db:
f0:43:33:e4:52:34:f1:ca:1a:35:74:6e:dd:39:d8:
1a:c8:1e:3e:8e:f4:88:74:0f:76:c3:07:b0:92:e0:
5b:9f:35:fa:f6:de:90:a5:c9:59:7f:60:b8:6c:50:
0d:f9:52:14:7c:55:6e:f8:dd:c7:7f:a8:74:c8:49:
b2:b9:0a:5c:a4:b2:12:70:55:fb:82:62:07:16:dc:
6f:fb:ce:e5:be:ba:b6:d6:42:c8:bd:c6:0b:f8:11:
b0:72:51:b0:ff:56:d6:51:f4:8f:8b:f7:a0:b1:2a:
83:81:86:91:c5:ef:65:e7:bc:29:40:4e:fb:f0:a0:
10:8c:db:e5:9b:1d:f0:46:67:27:98:66:c5:fe:86:
08:14:23:c8:1c:be:69:bb:dc:95:aa:8c:49:4d:47:
81:73:da:03:a9:e1:12:34:7e:15:66:3c:0b:fd:33:
e6:f6:cc:36:65:5c:ea:5e:fd:91:d9:ea:c4:f5:cf:
0b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BC:8C:3E:F8:A5:FF:72:C2:82:E8:A6:18:DE:CE:6B:A8:48:13:70
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rbyMPvil_3LCguimGN7Oa6hIE3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.248.0/24
185.226.104.0/24
Signature Algorithm: sha256WithRSAEncryption
47:3e:df:4f:d1:08:f7:c6:f2:08:ff:2d:1f:ce:0b:4f:ef:5d:
41:4f:53:0a:e8:59:a0:86:fe:25:c3:0e:f1:ae:6d:07:36:aa:
43:e7:37:0a:73:21:41:01:69:83:50:30:e8:0c:28:37:32:28:
06:26:3a:83:26:42:e7:58:a1:75:5c:5c:39:91:f1:03:79:0c:
93:5e:c5:6e:e6:85:36:26:24:5f:9f:94:64:85:5d:79:12:a6:
ad:95:37:5b:db:06:41:30:ef:4d:7f:ef:3c:dd:af:9e:4d:a5:
12:1f:ea:59:15:34:27:7b:ab:ea:24:1d:fd:5a:46:91:f0:c3:
94:48:2d:bb:c4:dc:ac:fe:30:84:65:82:89:2c:c4:69:93:9d:
1b:90:0d:f7:b4:af:d4:df:cd:5c:60:dc:5e:d1:48:6f:a5:f0:
43:04:b8:ee:92:bb:b0:24:44:ae:aa:1a:eb:a5:18:7e:96:4a:
ad:c0:d9:12:82:44:86:ac:57:9f:72:2f:a3:1b:b6:d1:95:dd:
38:3d:3d:43:06:ad:bc:d5:df:f2:35:65:d3:aa:41:e6:f3:3b:
cd:d7:2f:5c:70:d0:4c:e2:f6:f7:b0:20:a9:ac:0d:e0:4c:2d:
ab:a7:fd:58:5b:2a:b5:74:f3:4e:d6:93:bd:10:c0:87:b0:2f:
eb:8b:97:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:26:39 2025 by rpki-client