Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/0Fc4m7wHH5jcdzsO8Lfgwj8Ggtk.roa
File: 0Fc4m7wHH5jcdzsO8Lfgwj8Ggtk.roa (raw, json)
Hash identifier: QbHH9FTR5DLwWMqm6+SdzPZ36FvTT0+KmvBAPpI3oS8=
Subject key identifier: D0:57:38:9B:BC:07:1F:98:DC:77:3B:0E:F0:B7:E0:C2:3F:06:82:D9
Certificate issuer: /CN=88a8d325f97b03713342682fc408d53368740e7d
Certificate serial: 0194FFF33A72ECFEFB1CAE11AC8B9619F38F
Authority key identifier: 88:A8:D3:25:F9:7B:03:71:33:42:68:2F:C4:08:D5:33:68:74:0E:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/0Fc4m7wHH5jcdzsO8Lfgwj8Ggtk.roa
Signing time: Thu 13 Feb 2025 15:35:17 +0000
ROA not before: Thu 13 Feb 2025 15:35:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60895
IP address blocks: 185.23.112.0/22 maxlen: 22
185.23.112.0/23 maxlen: 23
185.23.112.0/24 maxlen: 24
185.23.113.0/24 maxlen: 24
185.23.114.0/23 maxlen: 23
185.23.114.0/24 maxlen: 24
185.23.115.0/24 maxlen: 24
2a00:6d20::/29 maxlen: 29
2a00:6d20::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 14 Feb 2025 08:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ff:f3:3a:72:ec:fe:fb:1c:ae:11:ac:8b:96:19:f3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a8d325f97b03713342682fc408d53368740e7d
Validity
Not Before: Feb 13 15:35:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d057389bbc071f98dc773b0ef0b7e0c23f0682d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:c8:a2:a6:60:97:70:8b:9d:ab:76:c4:ec:
aa:35:ee:9a:68:23:86:a7:78:0b:29:c0:5a:df:0b:
05:7a:1a:cd:3e:1f:a9:ec:3b:a1:11:df:4d:31:01:
ad:25:06:be:3e:21:9b:3b:86:9e:5d:63:cc:68:47:
d8:97:c0:49:71:b1:35:7e:fc:36:fb:6d:fc:82:7a:
df:eb:8a:5e:fa:ad:de:5a:9c:52:2c:ee:c0:e8:28:
85:e8:c7:0e:ca:48:cc:33:87:a6:92:50:64:83:97:
ad:cb:ff:7d:0c:93:d9:c4:1b:65:3a:d5:24:f1:ff:
d9:cd:08:6c:d2:90:7a:25:9e:fc:48:1b:d4:fe:7d:
71:76:e7:16:91:79:b4:c3:49:94:56:c4:0f:20:63:
5a:d9:15:2b:68:bd:41:4d:c4:76:5d:63:2b:45:67:
d7:3f:10:9c:67:85:36:54:56:e0:98:23:17:51:43:
a2:80:b3:39:52:ec:69:ea:96:96:19:c6:32:ac:56:
a7:7c:33:b8:7e:35:d8:ff:8d:46:50:5c:d2:a8:ee:
d1:64:44:44:56:24:0b:19:cd:04:52:b7:60:b7:c3:
e5:c3:80:0b:4b:14:70:07:26:b4:b0:49:d9:d9:8b:
01:ea:6f:75:3c:09:c2:da:3f:6e:2e:70:81:6e:0c:
3c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:57:38:9B:BC:07:1F:98:DC:77:3B:0E:F0:B7:E0:C2:3F:06:82:D9
X509v3 Authority Key Identifier:
keyid:88:A8:D3:25:F9:7B:03:71:33:42:68:2F:C4:08:D5:33:68:74:0E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/0Fc4m7wHH5jcdzsO8Lfgwj8Ggtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.112.0/22
IPv6:
2a00:6d20::/29
Signature Algorithm: sha256WithRSAEncryption
88:2c:ed:3b:a5:80:94:1f:f2:f6:68:f0:58:55:81:c3:71:16:
7e:fe:e5:24:05:49:83:9a:20:03:a2:3c:6b:81:66:f6:21:da:
eb:f6:e0:59:01:c6:af:72:41:91:7a:9d:0f:e2:20:6d:41:87:
ac:56:48:f3:53:7c:05:fc:6a:ae:31:08:0c:1c:c3:66:1e:a9:
4b:91:f2:fe:82:73:ed:1e:8f:af:09:a0:f9:06:f6:84:46:28:
d1:d5:27:54:db:2e:96:1a:b6:19:2d:1d:b8:08:98:30:f3:49:
07:3a:0e:b9:03:04:53:52:bc:3e:36:18:56:cf:72:40:1a:a6:
ca:63:e4:ba:bf:31:c7:b1:92:2d:17:31:61:0a:82:e5:69:39:
cd:f0:93:30:4b:ca:37:f0:56:34:fd:91:0e:0e:55:fd:1e:92:
ec:f3:5b:ed:36:06:c7:49:65:b9:f8:f7:59:27:3c:90:bd:48:
56:04:ad:c7:b2:1a:18:5b:cc:c1:cd:65:91:f7:6b:cd:ff:da:
f7:82:33:ab:fe:a3:39:92:ee:e0:39:15:f7:94:d9:43:ec:bc:
83:6f:fa:c2:bc:62:63:56:a7:ac:40:14:2b:c7:2f:eb:8f:d0:
cb:f4:87:10:6a:10:d1:84:82:ce:25:6d:f7:5e:4e:13:59:f1:
7c:36:ef:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:16:55 2025 by rpki-client