Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Fu1vgT_UVFmhNgBo6h_3UXTfziQ.roa
File: Fu1vgT_UVFmhNgBo6h_3UXTfziQ.roa (raw, json)
Hash identifier: tqjD9rtp2dOj5iKFLQ0K2vwLujB10iHIDn1C5HTRmHw=
Subject key identifier: 16:ED:6F:81:3F:D4:54:59:A1:36:00:68:EA:1F:F7:51:74:DF:CE:24
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0195F2EBBAD64414B3FC29049D6FA3232D19
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Fu1vgT_UVFmhNgBo6h_3UXTfziQ.roa
Signing time: Tue 01 Apr 2025 19:54:49 +0000
ROA not before: Tue 01 Apr 2025 19:54:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 85.208.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Apr 2025 16:18:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f2:eb:ba:d6:44:14:b3:fc:29:04:9d:6f:a3:23:2d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Apr 1 19:54:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16ed6f813fd45459a1360068ea1ff75174dfce24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9d:18:ab:9c:1a:be:54:49:c4:f0:3e:3c:1d:
8a:a8:e8:37:72:4b:d4:ee:c7:6a:a9:36:95:6d:70:
9a:57:18:ea:72:61:ad:d8:1b:8c:1b:b5:0c:ba:5b:
95:29:ea:b4:11:70:8f:dd:cc:d8:d9:42:2a:f2:0b:
67:37:2c:89:4a:bf:39:cd:46:47:9a:50:73:d2:c3:
d7:e1:47:65:b0:7d:26:25:16:98:ac:d6:8b:a8:02:
00:b9:32:71:57:8d:fb:ff:e2:46:58:37:0e:b3:df:
fe:06:9d:45:c4:0c:98:d1:f5:a9:f0:fe:44:5a:ed:
1a:4e:f7:4f:e9:aa:ca:e6:cf:c8:9d:3f:1f:eb:10:
6c:c9:fa:34:bb:8e:6a:0d:7e:7c:64:70:f6:43:18:
2d:dc:c1:bb:74:bc:eb:32:57:4d:21:a2:92:f6:a9:
e3:8a:20:9a:a2:d4:b7:d8:25:8b:93:35:5d:52:77:
d3:35:7c:54:28:56:23:ff:81:62:1a:39:e5:e3:e7:
92:40:64:3c:71:63:80:bc:25:a1:a4:96:89:f5:2a:
d9:7b:6b:a4:b6:ed:27:f1:b8:a5:7a:32:62:95:11:
1e:5b:27:f1:2d:76:f0:20:8a:60:2f:b2:db:a9:df:
02:ce:93:52:9a:27:b3:da:ad:c9:3d:30:4f:e4:eb:
d7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:ED:6F:81:3F:D4:54:59:A1:36:00:68:EA:1F:F7:51:74:DF:CE:24
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Fu1vgT_UVFmhNgBo6h_3UXTfziQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.106.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:89:48:9e:62:4a:f2:ce:aa:b6:3f:34:8e:97:5f:b4:39:69:
80:cd:3f:c6:2d:5a:25:cc:8e:1d:b1:d1:dd:0c:77:43:43:6f:
2e:6d:2f:66:33:5e:53:de:41:cc:6d:98:7d:be:18:73:fd:b8:
fa:2f:b8:9d:d3:de:77:42:5a:6f:3b:b7:d9:97:d9:e3:73:48:
3f:85:10:a9:12:7e:57:82:e0:fb:ff:83:b6:07:75:de:a2:1f:
1d:c9:bd:2d:e3:46:ac:94:10:b6:a9:77:87:91:cf:67:ea:aa:
e7:60:3f:9d:bb:b9:61:b8:24:e0:8a:be:d5:b3:04:4b:9c:79:
42:16:4f:d6:63:1c:67:77:a0:53:99:12:1c:08:6e:75:b0:a7:
58:49:14:a9:69:3c:ee:97:18:0b:bd:e6:75:25:1a:5c:85:de:
42:b4:ae:f2:24:d1:96:ca:2e:c0:de:98:e6:31:70:41:dd:b4:
5c:36:b7:4b:da:87:69:12:51:ec:12:45:68:d4:38:89:11:e0:
a8:7e:cf:a1:b8:11:74:07:52:6a:7b:c7:b0:40:0a:3b:32:ed:
49:36:c5:e6:9b:8f:3c:68:f9:64:b7:03:3c:f6:8a:44:3c:5a:
30:4d:89:50:a4:d4:92:51:84:64:3b:de:9c:f0:78:dd:8d:7a:
88:80:70:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:25:08 2025 by rpki-client