Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/O7vB8osF2qYnXJiisfbYf5TFqfg.roa
File: O7vB8osF2qYnXJiisfbYf5TFqfg.roa (raw, json)
Hash identifier: wFyQbBJ57rlLFdoj807Tbo7apb3J8Y6wyMAihF65uL4=
Subject key identifier: 3B:BB:C1:F2:8B:05:DA:A6:27:5C:98:A2:B1:F6:D8:7F:94:C5:A9:F8
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019610064B4519C534D32B3839CA45943BFB
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/O7vB8osF2qYnXJiisfbYf5TFqfg.roa
Signing time: Mon 07 Apr 2025 11:32:50 +0000
ROA not before: Mon 07 Apr 2025 11:32:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140641
IP address blocks: 185.108.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Apr 2025 12:21:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:06:4b:45:19:c5:34:d3:2b:38:39:ca:45:94:3b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 7 11:32:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bbbc1f28b05daa6275c98a2b1f6d87f94c5a9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ee:5a:74:c7:50:88:81:61:97:d9:84:ca:a4:
54:fd:86:f1:f2:50:50:32:a8:65:ca:8b:2a:69:3f:
92:dc:70:4d:2f:31:38:b2:d7:bc:00:3f:66:85:10:
05:d8:6a:51:7a:f0:d9:be:86:c9:38:98:d7:22:9d:
40:45:89:05:14:5b:91:73:5f:44:e6:84:2d:4c:1a:
5d:92:44:da:31:79:72:58:90:34:08:f0:a2:74:35:
19:7d:74:4f:66:12:6d:bd:f2:bf:b2:a9:7a:0d:f6:
09:9b:0c:9b:e4:89:0e:72:df:58:2b:fc:c0:4b:6a:
56:a2:22:ec:d2:8f:6b:48:9e:39:7d:19:bf:82:7b:
64:ed:34:eb:86:3a:67:cd:c9:a2:49:3a:b9:41:a6:
a4:f4:f3:34:a9:4e:ce:04:68:69:f6:72:be:68:3f:
23:12:86:f8:54:98:fe:2f:14:af:b5:b8:aa:34:b6:
01:4d:fe:2c:fa:02:24:80:89:ad:d4:e1:0c:85:3d:
6b:06:a5:4f:77:dc:8e:90:36:9a:cf:17:12:25:a8:
2a:60:22:e0:10:ad:43:77:82:27:77:12:b6:7a:29:
a5:11:f2:c7:4e:6e:49:19:bc:0b:02:f5:d2:34:81:
c1:7b:09:c9:df:2f:08:88:eb:4c:11:e2:2e:40:ca:
f4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BB:C1:F2:8B:05:DA:A6:27:5C:98:A2:B1:F6:D8:7F:94:C5:A9:F8
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/O7vB8osF2qYnXJiisfbYf5TFqfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.204.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:b7:15:32:66:e0:b3:90:56:43:8d:8f:29:b5:63:cc:e0:4f:
41:41:dc:9d:5e:ab:16:5e:1f:11:14:0e:b8:97:c4:07:8c:f9:
42:22:00:61:9e:f7:6a:1d:a9:d2:ab:2a:f5:26:e6:31:20:d8:
67:ab:cf:7e:44:00:d5:fc:80:fb:41:35:fe:97:0c:4d:83:b7:
4d:a2:a2:2f:5e:4a:01:ca:d5:73:3e:53:d8:a7:7d:3f:1f:aa:
48:d0:36:cd:2c:c4:99:bf:d9:69:c7:bf:7f:55:79:0b:5f:31:
9c:ed:27:a7:a0:0f:3c:ad:8e:88:56:4d:d5:7b:f9:88:c6:e6:
f6:01:0b:96:28:a4:37:04:ce:5d:09:1d:f8:96:16:b2:fe:79:
ab:c7:2f:85:c4:21:0e:99:32:0e:71:17:ca:ba:7c:16:b2:6f:
cf:8f:e3:39:84:78:67:60:61:99:b8:77:06:9a:50:60:fe:7b:
4e:98:31:4a:56:56:97:fd:ce:99:0a:49:4b:59:4f:ee:ad:10:
c1:dc:24:c1:2d:f7:99:95:69:bf:83:bc:12:d5:28:10:ab:bf:
d4:ec:35:30:d1:6d:b1:3d:90:b2:b9:5c:56:04:92:42:ef:0b:
1a:9f:4a:ef:a1:e3:42:db:a4:e4:68:8b:20:5b:04:61:d2:b8:
f4:8f:63:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:21:36 2025 by rpki-client