Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/vR-xLx5WYTU1GkdBeTa4WVlAs3s.roa
File: vR-xLx5WYTU1GkdBeTa4WVlAs3s.roa (raw, json)
Hash identifier: QXnHChXkvYQ2QO0uyrpWZNVy/ULOwVsehAkZvKG6rfE=
Subject key identifier: BD:1F:B1:2F:1E:56:61:35:35:1A:47:41:79:36:B8:59:59:40:B3:7B
Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial: 0194B6DA982983D526EF8487CC24C9FF26B5
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/vR-xLx5WYTU1GkdBeTa4WVlAs3s.roa
Signing time: Thu 30 Jan 2025 10:56:06 +0000
ROA not before: Thu 30 Jan 2025 10:56:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215567
IP address blocks: 185.112.172.0/24 maxlen: 24
185.112.173.0/24 maxlen: 24
185.112.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Jan 2025 11:52:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b6:da:98:29:83:d5:26:ef:84:87:cc:24:c9:ff:26:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Validity
Not Before: Jan 30 10:56:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd1fb12f1e566135351a47417936b8595940b37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c3:04:0a:ad:ed:65:ef:bf:da:e7:c8:80:00:
15:ea:02:f4:ca:79:62:63:03:ef:70:3f:f2:de:b3:
bf:87:a0:0e:1b:04:74:b1:98:8f:d4:56:62:72:4f:
b3:6a:8d:14:7f:6c:79:64:91:fa:70:5c:ce:3a:c6:
3b:c5:08:d1:3e:36:2c:c0:1f:91:68:ce:42:aa:b0:
05:b1:5a:1b:9e:6c:44:39:9f:66:87:56:9a:04:1a:
31:78:16:d2:99:f1:59:eb:e2:1d:3e:c7:dc:b1:f0:
b5:7a:20:52:3e:41:25:2c:a3:54:55:57:74:cc:a8:
e7:ac:39:66:44:42:a6:85:cb:be:64:6c:b2:b8:4b:
69:02:f2:12:b9:b2:a7:69:a7:1b:2b:82:44:c2:fc:
f9:0e:bc:b3:96:4d:12:b0:25:3f:9a:02:c1:1a:9f:
ad:85:18:99:89:b5:d4:41:9d:d2:b5:6e:7f:48:f8:
ef:9b:f1:25:74:cd:66:15:ec:0d:97:ba:cf:27:ce:
43:45:30:f4:0c:23:71:f1:6d:69:39:30:5f:17:e0:
ef:ec:f8:0d:58:cd:1a:b1:65:d3:9a:ee:c4:04:f6:
45:19:07:cb:a3:d0:59:fe:02:e3:c7:b9:3b:7b:04:
c3:be:55:59:c9:ab:7e:50:84:16:fc:8c:85:49:1b:
57:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1F:B1:2F:1E:56:61:35:35:1A:47:41:79:36:B8:59:59:40:B3:7B
X509v3 Authority Key Identifier:
keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/vR-xLx5WYTU1GkdBeTa4WVlAs3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.172.0/23
185.112.175.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:13:df:9f:84:85:b3:e6:1a:18:44:99:fb:24:36:30:9a:bf:
ae:1a:74:ee:bb:2b:2a:82:a2:71:b0:c2:63:d8:f9:1a:d1:71:
db:0c:3c:0f:82:37:42:37:06:53:be:a9:35:13:5e:7b:81:8a:
81:f1:bd:eb:e1:6b:2d:4d:d9:6a:b2:4b:12:52:07:bc:7b:54:
0d:a0:24:48:b8:9b:ab:79:31:cf:07:9a:4f:15:9f:be:c6:d4:
33:60:96:02:17:28:60:7d:a3:e7:b7:1f:6b:d5:c4:e5:45:08:
20:fa:20:5b:72:37:ce:85:de:97:21:0f:52:59:b7:57:86:61:
8c:3e:3e:43:31:44:57:88:78:0e:76:38:8f:90:c6:68:ff:7e:
2c:76:5a:ab:4b:fb:8a:c5:57:3f:17:4f:08:95:91:a5:3c:41:
b8:1b:a8:9e:0b:78:d4:f1:f8:9c:5d:9c:f0:5e:8e:34:31:98:
b1:cf:ea:16:67:94:29:95:73:24:d2:6b:40:e9:4c:f8:a0:81:
f2:8b:fb:3d:03:27:d6:b3:10:72:85:08:b8:ec:8d:97:f8:ef:
43:e3:50:7a:47:4b:a9:a1:c9:c8:ff:84:3b:e8:06:42:86:4f:
0a:41:35:9f:32:ca:89:70:fc:31:e5:54:fe:06:c1:09:a7:cd:
4d:9a:38:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:20:57 2025 by rpki-client