Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/Vid5aaaWZmA-0cL_0PGbgwS-FmI.roa
File: Vid5aaaWZmA-0cL_0PGbgwS-FmI.roa (raw, json)
Hash identifier: hJ3QxzcwHWAWTvHiRUpzWWx9FoJGiUbhlmzMq5KyAJU=
Subject key identifier: 56:27:79:69:A6:96:66:60:3E:D1:C2:FF:D0:F1:9B:83:04:BE:16:62
Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Certificate serial: 019693199AB19DA2A97DB143BB2732563CAC
Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/Vid5aaaWZmA-0cL_0PGbgwS-FmI.roa
Signing time: Fri 02 May 2025 22:24:10 +0000
ROA not before: Fri 02 May 2025 22:24:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212889
IP address blocks: 185.164.25.0/24 maxlen: 24
185.203.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 May 2025 21:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:19:9a:b1:9d:a2:a9:7d:b1:43:bb:27:32:56:3c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Validity
Not Before: May 2 22:24:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56277969a69666603ed1c2ffd0f19b8304be1662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a5:59:d8:f8:2f:1a:f8:46:a9:cf:ab:8d:82:
c2:f7:f4:11:09:65:0b:bf:b6:6f:0e:1d:a6:7f:aa:
92:fa:05:c3:c0:d1:e1:54:d4:ea:c0:85:37:24:57:
0b:70:78:2c:ba:96:1d:ab:fb:bb:a7:39:3a:1d:8a:
3a:73:5d:6f:f0:bc:e3:fc:32:be:11:f6:a0:63:5f:
bf:62:b9:6f:0d:77:34:07:c6:e5:38:61:8b:eb:a3:
dc:1b:ec:92:fc:4e:68:d3:57:36:d8:96:81:90:34:
6b:85:b4:3d:c1:21:f9:35:8e:c7:91:86:31:7a:d9:
77:45:21:55:8d:3b:a2:d0:e6:12:6f:58:f1:82:29:
4d:12:e5:df:a3:74:16:84:ca:54:34:76:8a:35:0d:
0c:9e:2b:82:1b:3d:25:19:80:b0:b1:6a:9a:81:d9:
69:82:a4:16:06:67:03:0c:d2:27:a7:c0:b2:6c:da:
3f:86:cb:fa:12:b6:83:16:f8:d5:6e:b5:fe:4c:ef:
3b:85:95:34:8f:d8:df:a4:23:a2:67:b4:da:45:d1:
ae:7a:93:b5:65:28:97:1c:42:3e:da:5a:23:f2:47:
d0:41:d8:54:80:5e:08:d3:9b:bb:7b:3a:d7:0a:05:
52:8c:ae:c6:85:a3:d9:45:3d:3c:91:22:8a:13:62:
93:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:27:79:69:A6:96:66:60:3E:D1:C2:FF:D0:F1:9B:83:04:BE:16:62
X509v3 Authority Key Identifier:
keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/Vid5aaaWZmA-0cL_0PGbgwS-FmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.25.0/24
185.203.111.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:e9:30:cd:a8:71:ef:e7:36:b5:f4:c9:46:60:cb:a7:cb:5a:
f9:21:57:b2:4e:91:16:80:6b:9a:1e:b4:4e:f6:58:c1:4f:fb:
e3:81:89:15:e1:31:b2:34:22:d0:c6:06:0a:80:3f:5e:d3:aa:
b1:12:ab:39:70:34:0e:22:56:15:b2:c1:5f:21:a7:1c:88:fa:
75:86:51:0c:cb:54:ea:d2:4f:a1:ec:5e:b7:20:35:3e:2b:39:
de:da:75:4d:2e:22:a6:c1:46:1e:0b:36:7f:78:65:df:a3:58:
0f:f3:ea:f0:f8:a9:ba:27:44:38:01:c8:e0:06:d4:a1:ee:84:
be:21:33:c3:50:55:a3:c5:ed:94:e1:13:fd:bf:8b:f5:57:bf:
51:4f:a6:b5:f4:92:12:f1:aa:51:d0:c3:c4:b6:ac:e9:9b:63:
80:bb:cc:6b:34:2b:4b:f6:d6:1f:6a:57:a4:fd:99:f3:5a:fc:
89:62:5f:47:b8:fd:ae:b6:2d:36:8c:16:0d:1d:f3:40:db:a4:
6e:b6:6a:25:b8:29:24:4d:3b:8f:b9:88:34:f0:c0:08:7d:87:
f1:88:0d:ac:93:1f:1e:65:ae:5f:33:52:43:54:5a:48:c6:17:
2e:51:8d:ff:cc:cf:a9:23:b8:38:41:a4:37:35:a8:14:d4:b7:
fd:a4:0b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:35:30 2025 by rpki-client