Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/LF0HqjD8QG_rr9Ma9eAFU6Ls0kQ.roa
File: LF0HqjD8QG_rr9Ma9eAFU6Ls0kQ.roa (raw, json)
Hash identifier: 6Hxp7TshD2rQT2Fn6q3OAmebDAEAbUCbTEfYyGL6eQA=
Subject key identifier: 2C:5D:07:AA:30:FC:40:6F:EB:AF:D3:1A:F5:E0:05:53:A2:EC:D2:44
Certificate issuer: /CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Certificate serial: 019669B289FC2B9C7C2EB416AE99D2602F50
Authority key identifier: 6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/LF0HqjD8QG_rr9Ma9eAFU6Ls0kQ.roa
Signing time: Thu 24 Apr 2025 21:27:10 +0000
ROA not before: Thu 24 Apr 2025 21:27:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212889
IP address blocks: 185.164.22.0/24 maxlen: 24
185.164.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 May 2025 22:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:69:b2:89:fc:2b:9c:7c:2e:b4:16:ae:99:d2:60:2f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Validity
Not Before: Apr 24 21:27:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c5d07aa30fc406febafd31af5e00553a2ecd244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:72:43:ce:5e:55:79:5b:6e:c7:69:02:84:
12:bd:f5:d3:51:32:f8:50:17:b6:64:59:49:15:db:
fe:da:7d:ad:82:4b:27:3c:7c:f2:5f:5a:d0:f0:55:
70:f5:f7:74:b6:d9:c5:c6:fb:c3:42:5c:3f:f6:32:
1b:3e:e0:a4:dc:65:3f:37:fb:4e:83:b7:5a:08:b8:
06:40:5d:9c:b0:91:67:6a:1b:0b:e3:a2:f0:c1:a7:
82:d7:36:91:e7:dd:10:cf:74:b3:50:dc:71:d3:92:
b4:74:3a:20:1e:11:51:fa:6d:2e:f8:ff:6d:72:86:
97:88:68:0a:00:2f:1f:76:b6:c9:e7:5b:b7:dc:d5:
bb:34:e0:df:b9:54:f9:7f:6b:c5:e9:67:cb:cb:1a:
a2:3a:0f:77:84:99:01:70:02:48:7c:ee:68:85:d3:
21:a5:48:c9:de:82:44:74:16:cc:a1:37:f8:1e:e8:
7e:39:2c:1a:4b:b4:dc:1d:b0:04:e7:ba:b2:e9:cb:
ae:07:88:d4:fc:cb:3f:31:3e:8d:f0:b3:c7:d6:c5:
ae:e3:37:1c:32:51:aa:93:dd:73:3c:81:d3:9f:22:
74:47:1c:54:6c:5e:da:97:84:f5:4a:95:87:5e:e7:
68:86:d7:df:c7:43:5e:15:35:a1:a1:98:30:f2:b9:
79:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5D:07:AA:30:FC:40:6F:EB:AF:D3:1A:F5:E0:05:53:A2:EC:D2:44
X509v3 Authority Key Identifier:
keyid:6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/LF0HqjD8QG_rr9Ma9eAFU6Ls0kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.22.0/23
Signature Algorithm: sha256WithRSAEncryption
32:93:83:df:22:4a:87:1f:eb:50:4c:c1:91:41:90:dc:00:61:
a9:35:ac:cb:0d:31:ed:3c:3c:3a:a4:77:14:12:1e:24:21:76:
a9:a0:98:de:0e:1c:64:06:2b:49:dc:42:39:f4:6d:a4:79:7a:
19:46:f9:16:47:70:07:8d:c0:27:77:1c:04:42:18:2c:42:20:
b2:32:ff:9b:52:b5:a4:b4:77:a7:26:4c:cc:aa:2c:fb:79:05:
dc:f6:0f:84:9f:7e:d4:b3:14:32:e5:13:be:bc:aa:06:db:97:
d2:40:95:a0:9e:79:c3:32:97:52:50:40:1f:d9:10:0d:7a:55:
b5:6d:21:b6:d1:d8:fe:b0:24:c7:43:f1:81:c1:87:67:1f:9e:
ca:43:38:ff:ca:b4:45:76:0c:72:99:31:9c:f5:64:a5:63:34:
75:a7:55:0f:8d:6e:ff:73:5b:69:22:01:6d:c1:b6:21:13:18:
51:ab:2b:be:f9:e2:26:00:8d:8b:cc:40:0c:75:ef:1e:35:e3:
f8:2b:b1:a7:72:d9:ff:29:18:4c:a0:45:b8:6c:3e:c9:12:d5:
94:67:50:2c:be:23:6e:56:71:5f:94:d9:90:ac:0b:35:8a:4b:
c8:b2:00:c6:c1:42:ae:e5:49:4d:07:b0:8e:54:83:2a:4e:63:
d2:c5:04:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:16:52 2025 by rpki-client