Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/_RbLlVhU-flgPyeESJHEco7-ABU.roa
File: _RbLlVhU-flgPyeESJHEco7-ABU.roa (raw, json)
Hash identifier: NNKXpZ4Jcd1NOt6i/wnhVzwI2MhyvF2kmbJCgkD8Dnk=
Subject key identifier: FD:16:CB:95:58:54:F9:F9:60:3F:27:84:48:91:C4:72:8E:FE:00:15
Certificate issuer: /CN=8d8045f9df08c53057e9df9fb7b7a575103fff4a
Certificate serial: 019663731C71A1B1F9D0901B6D95BDE9C78A
Authority key identifier: 8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/_RbLlVhU-flgPyeESJHEco7-ABU.roa
Signing time: Wed 23 Apr 2025 16:20:10 +0000
ROA not before: Wed 23 Apr 2025 16:20:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62417
IP address blocks: 185.231.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Apr 2025 16:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:63:73:1c:71:a1:b1:f9:d0:90:1b:6d:95:bd:e9:c7:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8045f9df08c53057e9df9fb7b7a575103fff4a
Validity
Not Before: Apr 23 16:20:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd16cb955854f9f9603f27844891c4728efe0015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:52:58:c2:7a:44:8d:33:ad:4d:41:b6:f2:1b:
65:4b:f0:f6:90:99:f5:3a:ec:aa:22:ae:a4:63:d3:
df:15:90:d8:12:b3:cb:88:0b:d6:4a:23:65:07:17:
87:f2:fe:26:69:04:f8:37:cd:01:7b:fd:b2:23:83:
84:33:73:23:15:36:ff:a1:b1:fe:38:74:86:d8:de:
82:0a:91:21:37:0a:14:02:cf:6e:0e:b1:1d:e5:8d:
35:38:4a:df:e8:7f:48:8e:6b:dc:54:71:d2:5c:21:
dc:5e:97:4a:f9:97:20:61:d6:97:81:97:fb:ca:0c:
b8:e0:e4:13:68:4a:63:ab:a0:4e:8c:09:48:60:bc:
40:b0:47:44:e0:a0:fb:d4:67:08:50:5a:fe:5f:7d:
8c:06:d2:1a:73:f7:7f:c0:25:dc:96:af:50:8d:4b:
74:07:6e:bc:01:fe:6d:92:47:98:4b:41:10:35:18:
58:36:5b:ff:aa:60:a2:c3:5f:0f:55:91:f1:4e:bf:
40:cc:5a:a8:f3:cc:64:a5:f4:01:57:09:92:8e:6e:
fc:d8:15:7e:60:55:09:29:f2:a7:a0:6a:ee:11:4c:
83:92:a3:5e:21:09:92:ea:46:c7:3d:90:e7:d9:33:
f0:27:43:46:2e:5d:ba:12:22:ed:d2:ca:90:c5:a5:
f9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:16:CB:95:58:54:F9:F9:60:3F:27:84:48:91:C4:72:8E:FE:00:15
X509v3 Authority Key Identifier:
keyid:8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/_RbLlVhU-flgPyeESJHEco7-ABU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.78.0/24
Signature Algorithm: sha256WithRSAEncryption
62:b6:c1:42:35:93:17:bc:d2:ba:b5:d8:81:26:36:21:4a:56:
22:1a:cd:74:45:f8:a7:ef:60:e0:4a:76:06:c5:f3:f9:e4:c0:
56:98:4c:dd:d8:af:9c:3d:32:30:e1:78:89:c8:f2:9d:71:5f:
27:49:c0:4b:e9:18:e3:ed:22:77:6e:ab:a7:03:e7:d1:26:34:
03:95:04:19:c4:60:28:b9:da:22:b5:b4:d2:79:28:7c:63:b8:
e6:e3:b9:40:9a:00:9f:98:29:35:cd:98:19:f0:40:8a:98:36:
a4:d5:4b:79:61:f5:4d:2e:1b:5e:7b:5c:20:48:e0:c5:e5:09:
2c:ce:ca:bc:05:38:e1:e2:4f:2d:7f:cd:96:57:28:ac:5d:22:
bc:f0:7d:72:4f:d7:3e:8c:8c:46:0f:e9:52:99:25:2c:b3:cc:
51:9a:7f:bb:79:80:13:20:57:c0:ba:f1:a7:df:18:0a:61:e9:
fc:ea:0e:07:b2:d7:9a:e2:1d:d4:89:c0:bd:29:55:1b:eb:52:
78:02:d1:0e:10:35:e3:bb:6e:65:28:25:23:07:4d:53:b9:b1:
2f:74:59:ed:b1:30:42:3a:ce:e9:52:55:a5:b1:a2:b7:9d:3a:
70:88:41:64:ad:f8:ba:a9:62:52:e3:76:84:1f:63:7a:e0:b9:
fb:b2:54:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:57:09 2025 by rpki-client