Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/_2osBMkj-zDypNFKk9z3w0s1scA.roa
File: _2osBMkj-zDypNFKk9z3w0s1scA.roa (raw, json)
Hash identifier: XhzyleoVEBT0aZonXbSS4ltIkJ29Ix1gSgwHDwpN+KI=
Subject key identifier: FF:6A:2C:04:C9:23:FB:30:F2:A4:D1:4A:93:DC:F7:C3:4B:35:B1:C0
Certificate issuer: /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial: 01964446766934E3195F735198E1B47D3BD6
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/_2osBMkj-zDypNFKk9z3w0s1scA.roa
Signing time: Thu 17 Apr 2025 15:03:10 +0000
ROA not before: Thu 17 Apr 2025 15:03:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 185.124.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Apr 2025 10:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:46:76:69:34:e3:19:5f:73:51:98:e1:b4:7d:3b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Validity
Not Before: Apr 17 15:03:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff6a2c04c923fb30f2a4d14a93dcf7c34b35b1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:31:b4:54:86:89:3e:66:33:49:9d:d7:e0:84:
d6:7d:9c:71:c3:4b:2e:cb:5c:f7:a7:61:7b:2e:80:
52:0d:b3:69:cb:17:d6:a6:3a:90:91:fa:68:8c:ad:
10:8b:42:c8:99:7b:1b:27:b6:9a:74:f2:1d:7f:5f:
eb:41:f1:c4:2c:ca:5c:d9:93:dd:96:e6:aa:b1:07:
a5:17:e7:e2:d9:84:ab:4c:e7:b8:8c:e2:45:59:e9:
58:d7:64:80:d8:50:19:fd:9a:22:dd:13:d4:74:0f:
61:d7:83:fd:97:12:ca:cb:2a:c7:bb:17:12:dc:81:
a3:c2:72:d2:e5:57:b7:08:f8:2f:95:62:16:bd:46:
ad:79:a7:e8:9b:50:df:0e:c5:e3:9f:ad:4e:6a:04:
5b:98:12:18:b9:73:97:68:7d:a2:c3:d3:5a:d4:cd:
fb:8b:51:58:ab:a0:1d:d3:1c:44:91:2d:43:5d:8f:
06:cc:ef:4b:04:db:c1:b5:ea:7e:96:16:32:78:b0:
5d:6c:bb:3e:10:20:0b:8e:f7:b4:7b:a3:30:23:24:
9a:98:16:d3:fc:1d:65:cb:12:75:cc:29:f5:ec:ab:
f7:98:3a:f1:48:77:e1:d0:75:3c:88:83:e6:63:d9:
b7:57:c7:a2:6a:3b:ea:d5:fb:ac:fd:61:1b:68:15:
61:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6A:2C:04:C9:23:FB:30:F2:A4:D1:4A:93:DC:F7:C3:4B:35:B1:C0
X509v3 Authority Key Identifier:
keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/_2osBMkj-zDypNFKk9z3w0s1scA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.150.0/24
Signature Algorithm: sha256WithRSAEncryption
67:9a:69:69:35:2e:6b:9e:7f:69:8e:e4:ab:89:1b:08:09:22:
2c:0c:24:56:0c:92:94:b4:b4:f5:1a:ae:12:6e:9f:ed:fc:ff:
0e:b5:d3:7b:19:51:5d:9b:19:57:f8:84:d9:ed:2d:59:fa:dd:
23:df:01:70:c9:9a:52:1f:bf:3d:87:94:55:6e:38:e4:ad:c2:
0c:c1:2c:99:bb:ce:29:48:45:ae:85:91:16:8e:a8:67:e6:b0:
e8:63:67:20:01:39:4e:02:f2:83:dc:6e:fe:48:5a:8e:9f:60:
d6:dc:ba:22:cf:fd:58:52:04:67:3e:50:8f:0f:48:ed:8a:4c:
e3:ed:dc:73:19:1a:32:4a:1d:a2:af:1e:1a:1d:71:2f:f4:ea:
be:9e:f6:1d:39:44:da:d7:9f:71:26:16:11:b8:aa:2f:8d:e4:
19:8d:aa:90:4b:11:32:bb:5c:c9:ff:f9:ae:1b:ac:de:da:a2:
a0:11:59:e0:c6:58:c6:7d:11:3c:3b:96:41:91:ce:1e:7e:d3:
6b:ae:e9:3d:aa:c5:6a:da:a7:16:f9:05:a5:96:83:9c:aa:b8:
08:6b:f2:09:59:bb:91:f4:e8:65:ae:28:2f:d5:a6:d3:89:17:
41:54:08:e8:ec:22:4b:a6:10:87:d8:ba:67:e1:4b:3f:d5:4f:
c0:ee:2c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:51:37 2025 by rpki-client