Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/VIlyUU8sD7i5pVlmpQ2NvOEkkVQ.roa
File: VIlyUU8sD7i5pVlmpQ2NvOEkkVQ.roa (raw, json)
Hash identifier: pjABUNsg8CMzyZ4SH80IUDcMWaidx/pXaURSJswAUcE=
Subject key identifier: 54:89:72:51:4F:2C:0F:B8:B9:A5:59:66:A5:0D:8D:BC:E1:24:91:54
Certificate issuer: /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Certificate serial: 01967C00348C2EF6F3B39C85940F3768EB5F
Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/VIlyUU8sD7i5pVlmpQ2NvOEkkVQ.roa
Signing time: Mon 28 Apr 2025 10:45:10 +0000
ROA not before: Mon 28 Apr 2025 10:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 185.60.76.0/24 maxlen: 24
185.60.77.0/24 maxlen: 24
185.60.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 May 2025 10:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:00:34:8c:2e:f6:f3:b3:9c:85:94:0f:37:68:eb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Validity
Not Before: Apr 28 10:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=548972514f2c0fb8b9a55966a50d8dbce1249154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:72:5a:72:a1:f7:64:9e:df:8c:cb:c0:d2:ab:
6c:84:2a:48:84:29:ce:71:5d:ed:dc:77:d1:ff:15:
1c:1f:f9:41:e0:a3:81:86:97:8e:5c:2c:79:9d:f8:
70:3b:37:0b:20:46:d9:da:3d:73:36:12:ab:69:76:
ad:00:ae:b6:e9:9b:26:08:09:96:71:ec:9f:7b:24:
eb:cf:a8:ea:54:d9:3d:6e:34:11:0b:83:5b:bd:31:
95:8c:1e:b6:1c:88:ab:2e:fc:14:79:4b:d4:35:69:
58:77:da:ec:0e:6d:c9:f3:ed:64:e6:30:d4:91:21:
8d:7f:ed:b3:73:9c:7a:29:dc:c0:a6:58:f1:51:eb:
86:53:69:a7:35:e5:88:3d:fa:a6:a8:ed:72:a4:af:
59:c7:99:bc:cf:e7:82:52:f5:73:c0:df:ce:43:e4:
ac:fe:63:93:8f:1e:55:35:78:0d:e2:d8:51:b1:dd:
9e:4c:aa:df:d7:cc:70:be:21:2b:25:f6:84:07:c0:
a9:a5:bf:b0:51:0e:e5:48:ee:eb:ed:21:ba:c9:06:
46:7d:2f:e2:25:40:e6:ca:cd:68:07:ff:d6:bf:74:
77:ca:6d:aa:80:ca:9c:4b:5d:e3:8c:c7:8b:1a:ea:
96:82:46:39:ff:a9:7f:99:cb:8a:30:7e:2c:19:36:
00:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:89:72:51:4F:2C:0F:B8:B9:A5:59:66:A5:0D:8D:BC:E1:24:91:54
X509v3 Authority Key Identifier:
keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/VIlyUU8sD7i5pVlmpQ2NvOEkkVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.76.0/23
185.60.79.0/24
Signature Algorithm: sha256WithRSAEncryption
70:c8:34:34:50:13:f7:6d:1e:21:67:1b:32:71:af:6f:ce:16:
ec:e4:14:01:1a:89:f3:47:f6:d3:9b:bb:9c:a3:b6:c0:af:46:
38:25:e3:f8:ba:db:6a:1f:54:28:e2:11:86:f0:5a:2e:16:02:
2e:89:b9:03:79:c2:c8:d2:5c:b9:fc:b0:eb:65:c4:92:56:df:
7d:79:af:20:de:5d:83:ef:d8:2b:03:82:1d:d9:39:1f:36:f6:
96:5d:e5:9e:5a:74:b5:64:41:30:95:65:a2:4a:51:c7:05:ce:
1d:ff:9d:10:e3:69:5e:31:57:9c:ee:4e:7e:33:45:3b:a9:47:
71:a0:9d:a1:1e:a4:36:00:6c:0e:8c:1f:1b:cd:e5:25:d0:c7:
f6:99:95:e8:51:59:e7:ed:68:e3:e6:2f:77:e4:64:46:6c:d2:
15:e2:b3:dd:18:ba:2d:9b:e4:52:53:37:78:e5:fb:a8:3d:79:
c3:98:8b:3a:b8:5f:a2:5e:90:d5:f9:4e:8b:74:02:44:99:ce:
8f:3c:04:fb:40:76:b4:f8:79:3a:b6:50:f6:86:04:18:18:d1:
89:f1:2e:26:97:81:c7:0b:8a:64:e2:11:43:65:2e:d2:8d:07:
1f:57:59:01:03:c1:d6:a8:2e:1a:91:1a:6d:fa:8b:9d:25:d7:
b5:2c:57:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:25:34 2025 by rpki-client