Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/aAGox7XwDWlW3Qz-CH-G98jHi6U.roa
File: aAGox7XwDWlW3Qz-CH-G98jHi6U.roa (raw, json)
Hash identifier: XZh4B6jxsBOhslWzfiEnwxqJ/UaZxlOGVGw7iZg/XPg=
Subject key identifier: 68:01:A8:C7:B5:F0:0D:69:56:DD:0C:FE:08:7F:86:F7:C8:C7:8B:A5
Certificate issuer: /CN=987277fc47d848fa5634ce8031a174fc249fa673
Certificate serial: 019424B3CFC9D7358F5C69FE89A86B77E582
Authority key identifier: 98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/aAGox7XwDWlW3Qz-CH-G98jHi6U.roa
Signing time: Thu 02 Jan 2025 01:49:11 +0000
ROA not before: Thu 02 Jan 2025 01:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206190
IP address blocks: 185.194.8.0/24 maxlen: 24
185.194.9.0/24 maxlen: 24
185.194.10.0/24 maxlen: 24
185.194.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Jan 2025 15:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:cf:c9:d7:35:8f:5c:69:fe:89:a8:6b:77:e5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987277fc47d848fa5634ce8031a174fc249fa673
Validity
Not Before: Jan 2 01:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6801a8c7b5f00d6956dd0cfe087f86f7c8c78ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:82:74:09:f6:84:43:5b:d7:02:30:7e:01:9b:
18:31:53:89:5f:69:c8:88:e9:4b:81:51:c8:15:61:
4b:c8:98:cd:9f:16:08:a0:30:c8:09:57:d6:28:27:
b4:72:a9:32:9d:d0:ea:99:95:8f:6c:9d:f5:62:2f:
d7:45:63:5f:1a:21:11:ff:d0:bf:8c:6e:79:bf:31:
d4:67:06:ac:99:98:a1:45:7f:ff:80:aa:f1:fe:12:
15:34:ee:6b:b3:d1:2f:f0:69:97:79:93:be:26:cd:
d1:6d:7e:e9:ae:49:47:3e:86:ba:3d:38:39:c5:d7:
81:fd:e2:10:16:98:fc:b3:6e:f4:dd:65:fc:80:93:
74:45:f6:7a:11:ac:34:56:66:fb:14:ed:ad:ed:6e:
66:70:f4:7e:33:56:18:8b:81:ec:8e:1c:76:e0:a1:
7c:16:1c:df:da:f5:e1:6e:c8:88:c6:d8:a0:f7:50:
1f:25:10:3f:71:9d:57:a5:4b:31:7d:55:4e:ad:c3:
9b:38:c6:71:46:66:a2:13:7b:37:90:a7:a5:1d:a2:
d4:cf:6d:e7:cd:b1:df:f7:29:96:c1:7c:35:1c:ed:
e6:49:cd:f8:55:63:0b:5f:c3:fd:06:5b:b2:0f:84:
1d:e8:b6:24:52:80:d9:9c:03:96:af:f2:e3:ca:f3:
1c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:01:A8:C7:B5:F0:0D:69:56:DD:0C:FE:08:7F:86:F7:C8:C7:8B:A5
X509v3 Authority Key Identifier:
keyid:98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/aAGox7XwDWlW3Qz-CH-G98jHi6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.8.0/22
Signature Algorithm: sha256WithRSAEncryption
72:5a:4a:90:59:9b:23:e1:cb:cf:74:6d:9f:04:25:22:9e:fc:
e5:aa:db:73:28:ce:a1:af:45:8f:e2:b1:4c:8b:bb:ec:f0:db:
ad:7f:c7:e5:c8:af:84:14:79:ed:9d:05:15:fd:cd:97:f9:53:
70:f6:a7:92:0d:5d:4e:7f:52:9a:52:ba:8f:79:d0:98:09:85:
ae:ea:ab:6f:c8:b8:47:11:df:01:ac:89:95:e0:2f:c0:25:45:
80:d6:7e:53:e9:a6:52:d6:44:fd:9f:ed:14:be:88:3b:c0:0d:
b4:ab:43:9c:22:62:d0:a2:84:72:b7:7b:d9:8d:b8:65:96:1f:
1a:64:58:96:d3:04:76:de:21:6d:c8:d2:43:4e:ad:9b:fa:e3:
43:09:9f:c0:a2:84:c1:7d:a3:d3:ce:b6:98:7d:be:9f:4f:14:
cd:86:b0:74:9a:0e:17:a1:1c:41:7d:52:21:13:ef:5a:0b:14:
2a:0b:82:d3:9a:d7:fb:fa:92:a1:36:ee:be:de:7c:c5:7c:2e:
aa:65:a2:38:e5:01:78:fa:89:34:e6:ff:0f:fa:a7:71:bb:a8:
39:57:e3:ae:87:16:00:8e:71:21:99:32:80:be:c4:4d:43:f3:
c0:5e:19:c8:ca:a7:fd:95:3e:82:38:db:fc:31:ad:02:ed:dc:
40:95:43:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:40:08 2025 by rpki-client