Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/soQAgQmfa3nvmcezgX7DCTI7uLE.roa
File: soQAgQmfa3nvmcezgX7DCTI7uLE.roa (raw, json)
Hash identifier: XmKBrzoB0jzfJrnWWNmXyFJ1HC5NUWBavvjNp7u8yyQ=
Subject key identifier: B2:84:00:81:09:9F:6B:79:EF:99:C7:B3:81:7E:C3:09:32:3B:B8:B1
Certificate issuer: /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial: 019643C94494BB3F6E3109A109B0E4503844
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/soQAgQmfa3nvmcezgX7DCTI7uLE.roa
Signing time: Thu 17 Apr 2025 12:46:25 +0000
ROA not before: Thu 17 Apr 2025 12:46:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201089
IP address blocks: 185.124.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Apr 2025 10:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:c9:44:94:bb:3f:6e:31:09:a1:09:b0:e4:50:38:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Validity
Not Before: Apr 17 12:46:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2840081099f6b79ef99c7b3817ec309323bb8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fd:78:91:4d:bc:27:4d:10:dd:66:bd:f3:8d:
4c:94:01:88:ad:52:f5:7b:97:a6:29:3a:4b:a2:0f:
9f:04:db:88:d8:a3:52:3e:da:01:71:26:4e:83:83:
19:f0:59:6b:97:e0:02:be:54:08:c0:bc:d2:ac:3b:
bb:8e:a5:5b:e6:b7:13:ba:52:7a:77:0d:29:6b:3b:
99:83:8f:f9:88:0c:58:0c:f9:ea:13:cb:c6:c8:97:
db:bf:e9:6e:73:37:21:bc:b9:ec:78:2e:84:e7:7b:
a9:5b:59:3d:2c:d4:23:90:5e:df:1c:0c:57:59:9e:
6b:d6:aa:bc:1b:81:22:e8:17:37:ac:cd:a7:a7:00:
36:b4:3a:a2:19:b2:15:fa:9f:58:33:83:b8:18:f9:
ed:ce:09:25:7f:5f:40:e7:14:c4:d4:e7:e3:79:6f:
47:42:cd:62:d5:c1:82:66:c0:a9:fd:dd:d3:84:85:
7d:b1:03:98:2e:22:9c:1b:02:7c:ec:71:83:39:3f:
4d:6c:5a:67:e2:7c:43:c9:25:b2:27:fe:94:98:e1:
5e:8a:e7:4d:79:18:f7:26:b5:1e:0a:62:1d:eb:7c:
b8:cf:b4:a7:c0:c0:5c:57:d6:2e:68:52:38:00:d6:
39:8b:80:da:9f:05:75:97:9e:bd:ac:21:a8:f6:3c:
3a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:84:00:81:09:9F:6B:79:EF:99:C7:B3:81:7E:C3:09:32:3B:B8:B1
X509v3 Authority Key Identifier:
keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/soQAgQmfa3nvmcezgX7DCTI7uLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.151.0/24
Signature Algorithm: sha256WithRSAEncryption
17:01:8b:51:a8:54:86:f1:3d:b2:aa:23:f6:9f:bd:33:bb:31:
ed:42:4d:7e:ef:c7:c9:64:47:3e:98:cf:0d:e0:93:69:cc:98:
00:0b:7c:a8:62:e3:2e:43:d4:9a:c5:53:96:11:27:47:e1:bf:
b5:b7:a5:cf:46:a1:a2:54:dd:5e:05:6f:9f:bb:f5:66:f6:0a:
dc:2b:65:7f:2b:5d:7a:10:04:00:6b:b1:b9:d7:a7:2a:52:5d:
30:f2:a4:b3:4a:8c:ca:2e:18:b0:bf:7e:a7:8a:41:3c:c2:7f:
2f:8d:40:f6:29:91:d7:17:51:fe:1b:17:6e:35:4c:1b:11:3c:
42:a2:ec:96:31:03:cd:c5:31:9b:d9:85:a6:ad:62:6a:b0:ac:
ac:d8:2f:bf:57:17:ed:da:1e:66:b2:b4:c2:0f:27:23:32:ae:
2d:07:bc:3b:b0:3a:0c:1e:1d:e5:ca:1b:02:97:9d:e1:05:d3:
8b:0c:68:67:14:0c:d4:85:d7:54:4a:ed:50:41:71:80:05:ea:
98:e3:b3:7e:ce:3c:2c:da:79:72:7c:30:62:b7:d8:6b:52:0a:
8a:fd:c4:d0:c6:b3:19:4b:a7:d8:41:92:63:0f:77:b8:97:6d:
20:69:3d:d7:43:b5:20:00:1f:0d:e4:da:a4:3b:a2:ac:0e:09:
92:02:42:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:50:16 2025 by rpki-client