Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/NN5UWUxTu9ZXCNKjMmnI-TViqbE.roa
File: NN5UWUxTu9ZXCNKjMmnI-TViqbE.roa (raw, json)
Hash identifier: Koyu1vsv//dcfOFvKu3hSbFHTM9F7rOq1/Ss25punsM=
Subject key identifier: 34:DE:54:59:4C:53:BB:D6:57:08:D2:A3:32:69:C8:F9:35:62:A9:B1
Certificate issuer: /CN=07bca0482d605587eb0e0c851c38e807755f9017
Certificate serial: 0196552A7EB03E88FC2BDC71226440BF61BB
Authority key identifier: 07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/NN5UWUxTu9ZXCNKjMmnI-TViqbE.roa
Signing time: Sun 20 Apr 2025 21:46:10 +0000
ROA not before: Sun 20 Apr 2025 21:46:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201150
IP address blocks: 185.84.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Apr 2025 12:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:2a:7e:b0:3e:88:fc:2b:dc:71:22:64:40:bf:61:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07bca0482d605587eb0e0c851c38e807755f9017
Validity
Not Before: Apr 20 21:46:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34de54594c53bbd65708d2a33269c8f93562a9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:11:f3:58:02:b8:e5:ce:a2:6f:08:67:7d:f3:
81:82:c9:e7:67:ce:5f:67:5c:40:9f:36:a1:14:23:
ac:f9:8a:58:9a:11:63:9d:2f:77:d8:44:a2:c8:f7:
0b:c5:c3:70:5e:55:ee:bd:cf:2c:b9:57:d8:2a:56:
e9:cf:e2:76:33:fc:b8:c8:e6:fb:74:d7:dd:e7:ed:
b1:36:b5:d0:9b:f7:ac:6c:f2:8c:08:91:3b:55:18:
5b:71:75:23:7a:4c:db:f6:20:5b:1c:85:91:13:02:
23:b9:bb:45:57:79:fc:52:e3:7f:0a:cf:5a:ba:f3:
10:2a:55:d8:65:4f:86:cf:77:f3:fe:94:f6:2b:4c:
ca:20:af:e6:ab:38:9f:59:5a:3d:a0:01:bf:c4:ad:
5a:cc:bf:4a:6d:96:1b:79:fa:29:39:dd:20:d9:84:
c7:06:0a:24:25:40:07:c6:c0:67:ce:f5:f2:09:ae:
ab:fe:d7:90:f4:5e:cb:75:dc:da:c7:5f:cf:97:34:
7f:12:ba:42:a1:fc:b3:8f:36:58:a8:64:b1:f2:8a:
21:28:b8:4f:29:81:23:50:3b:cb:82:21:3b:5b:8a:
d6:00:b5:ce:79:e3:7d:d6:62:27:93:9f:cd:5b:a2:
bb:1d:99:8d:e9:93:92:c1:8b:3f:b8:fc:cc:1e:09:
40:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DE:54:59:4C:53:BB:D6:57:08:D2:A3:32:69:C8:F9:35:62:A9:B1
X509v3 Authority Key Identifier:
keyid:07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/NN5UWUxTu9ZXCNKjMmnI-TViqbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.157.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:f1:6f:d4:13:09:6f:ff:09:f6:96:2e:3e:27:1c:aa:bb:0f:
85:88:7b:1b:c1:fe:ac:2a:44:09:5d:7a:2b:2a:de:c1:1f:95:
ad:47:1d:34:45:32:c0:85:d1:4a:c4:8e:06:58:d0:44:96:44:
46:5b:2b:b5:01:df:3a:9a:cb:cc:6d:73:6a:dc:c7:05:99:5f:
66:3f:8f:73:bc:4a:97:a2:76:60:b3:4d:f8:e5:ac:1c:d5:4a:
8d:c8:5a:d9:cf:55:d2:b5:c0:e6:26:89:86:98:cf:16:a2:3d:
fa:e5:77:6c:66:c7:98:33:a4:e8:ed:d3:88:ad:d4:19:68:bb:
28:56:ad:92:91:42:10:fb:f1:44:0f:d5:2a:d6:0a:4c:0a:3b:
35:16:51:90:44:22:90:b2:a4:b9:8d:6b:16:e4:c1:27:16:77:
42:08:1f:52:16:41:7e:bc:a6:3d:80:4b:35:3f:86:7e:c8:9a:
f2:14:32:db:26:f6:c6:a6:d4:17:b0:9d:88:7d:7f:69:c2:ad:
0d:73:19:19:55:92:df:a2:f9:1b:df:6e:7d:41:37:b5:72:e8:
96:b2:fc:8a:d5:24:cc:ef:18:b0:da:a7:51:31:a3:36:ae:32:
cb:6f:eb:2e:eb:f5:7f:b7:c4:51:56:a3:8a:2b:78:d8:5a:78:
db:8c:8e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:16:22 2025 by rpki-client