Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/OI5H4MRW94x2hhFmtp9vIRJadlM.roa
File: OI5H4MRW94x2hhFmtp9vIRJadlM.roa (raw, json)
Hash identifier: 6YTqNeOlXwPbIUe0FM3tqJhq7GSInvGftwAKlKrt1ho=
Subject key identifier: 38:8E:47:E0:C4:56:F7:8C:76:86:11:66:B6:9F:6F:21:12:5A:76:53
Certificate issuer: /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Certificate serial: 0194258E8821B2F5B2BFBFEF473CA0739ABD
Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/OI5H4MRW94x2hhFmtp9vIRJadlM.roa
Signing time: Thu 02 Jan 2025 05:48:05 +0000
ROA not before: Thu 02 Jan 2025 05:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44966
IP address blocks: 185.84.226.0/24 maxlen: 27
2a13:76c0::/29 maxlen: 64
Validation: Failed, certificate revoked on Wed 15 Jan 2025 21:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:88:21:b2:f5:b2:bf:bf:ef:47:3c:a0:73:9a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Validity
Not Before: Jan 2 05:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=388e47e0c456f78c76861166b69f6f21125a7653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:18:ec:94:84:93:b8:94:10:91:de:c2:a8:
87:7a:27:3c:a6:db:ce:6d:fa:45:88:ea:83:a7:45:
6d:d0:02:ce:e8:11:fc:70:93:1b:d2:d2:84:21:8c:
d0:76:10:65:5c:65:22:87:50:74:79:e1:8b:89:08:
9c:97:25:ff:d1:e5:93:ad:19:46:26:19:ee:5c:cd:
20:b5:b9:9a:0d:5e:58:ef:30:e3:81:76:75:74:cf:
73:76:75:af:bd:1b:53:ce:e4:d1:70:44:08:c8:bb:
6f:e8:76:5c:0d:f2:59:6a:30:72:a9:ba:c1:d5:fd:
e0:47:74:53:fb:21:ef:56:34:83:be:32:bc:2c:48:
11:18:e2:35:f3:09:20:7a:02:49:26:67:45:69:36:
94:ca:0f:3c:d4:34:f0:46:e5:76:a9:8f:00:6e:6f:
cf:21:c3:dd:84:4e:cb:61:2d:aa:de:0d:03:7d:bf:
e1:8b:cf:9d:09:6f:87:fe:4e:f3:5c:34:d5:9b:23:
1b:57:55:f9:62:79:04:89:fa:3f:94:2c:e4:de:b0:
3e:ff:0e:11:15:a8:6d:4f:62:1c:e6:6d:c7:45:24:
2f:96:26:02:61:e7:cf:0c:16:c0:ac:c3:dc:cd:b6:
74:01:97:4f:f0:b1:8f:84:33:95:a8:15:2c:ee:1e:
af:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8E:47:E0:C4:56:F7:8C:76:86:11:66:B6:9F:6F:21:12:5A:76:53
X509v3 Authority Key Identifier:
keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/OI5H4MRW94x2hhFmtp9vIRJadlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.226.0/24
IPv6:
2a13:76c0::/29
Signature Algorithm: sha256WithRSAEncryption
3b:bd:0f:1d:08:fe:d7:dc:4f:a0:b6:21:c8:2f:56:f7:c3:36:
64:c0:d3:57:ad:09:97:1e:77:de:cb:7d:3f:1c:e4:72:bf:e0:
1e:0f:0d:2d:94:0f:5b:99:6c:45:ce:65:34:5b:73:90:00:40:
68:88:5b:d0:3c:7f:d7:8d:f0:f7:48:a3:6a:c4:86:10:02:dd:
15:4d:c4:a2:9e:36:71:0d:02:46:1f:70:a4:13:02:a6:7f:ca:
2f:35:46:d1:f1:3a:81:63:3c:ce:79:a3:e9:cf:97:e9:90:26:
75:6b:6f:45:62:30:11:ef:02:45:61:80:1e:01:e7:af:70:4b:
34:44:57:4d:0d:1a:cf:c8:76:0a:34:a4:48:eb:b4:03:0a:51:
15:d5:6b:86:33:d4:1e:be:a3:54:07:16:e2:c2:8b:7d:4e:04:
78:15:09:f7:8c:b8:00:d2:0b:2a:bb:88:31:69:69:f4:b9:a7:
5b:07:ab:9f:a2:c1:fd:22:77:bc:be:8c:42:ff:63:c1:c5:2f:
4d:77:75:2d:b8:95:b3:a3:9c:10:a9:4f:4a:9f:10:0d:d6:cf:
d2:1d:97:9a:de:57:1d:90:d7:30:f3:ac:85:1c:08:99:34:23:
cd:fa:22:e6:6c:9b:7f:61:0b:10:85:28:3e:11:49:d7:fd:bb:
c0:a8:38:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:31:53 2025 by rpki-client