Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/VZkzAK2jP3F30GR23Zj4HIBK9Pc.roa
File: VZkzAK2jP3F30GR23Zj4HIBK9Pc.roa (raw, json)
Hash identifier: +c1Nqtnc9MMTnPBlUUE6q/Ua+bVqrAcioRTZarLTGV8=
Subject key identifier: 55:99:33:00:AD:A3:3F:71:77:D0:64:76:DD:98:F8:1C:80:4A:F4:F7
Certificate issuer: /CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Certificate serial: 019508F535FC73AE0055ECD6CA680BB2F6D9
Authority key identifier: 15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/VZkzAK2jP3F30GR23Zj4HIBK9Pc.roa
Signing time: Sat 15 Feb 2025 09:34:02 +0000
ROA not before: Sat 15 Feb 2025 09:34:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209564
IP address blocks: 82.146.23.0/24 maxlen: 24
84.238.223.0/24 maxlen: 24
185.32.150.0/24 maxlen: 24
185.32.151.0/24 maxlen: 24
185.240.182.0/24 maxlen: 24
185.240.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Feb 2025 09:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:08:f5:35:fc:73:ae:00:55:ec:d6:ca:68:0b:b2:f6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Validity
Not Before: Feb 15 09:34:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55993300ada33f7177d06476dd98f81c804af4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2d:cf:df:2a:c1:f7:89:4c:59:25:54:7e:47:
96:ef:3a:9b:4d:a4:9f:ea:7e:e7:c6:b7:c6:80:6e:
b4:ec:69:b9:1f:eb:0f:c6:ed:48:dc:77:37:ea:a3:
84:6a:b6:9f:1a:19:f4:0c:e5:97:e8:b2:dc:7e:52:
f7:fd:b2:3a:a0:7f:96:e2:9c:4f:44:93:7f:6c:19:
c4:ef:3a:ca:a8:0f:98:3f:7f:10:ea:8f:55:b2:6c:
82:a2:b2:1d:97:d9:c1:3f:d5:5d:18:c5:0c:1b:d5:
29:ce:5c:8f:7d:f5:c6:05:07:e2:1a:7b:34:78:4f:
59:34:72:e0:57:98:84:07:22:47:dd:5a:fa:e0:a1:
e1:73:30:f9:5a:f9:d4:26:84:0e:e2:f2:97:9b:88:
8c:34:93:33:0b:81:83:5e:45:f2:ef:9c:ba:a7:1a:
e8:c5:91:3a:9f:ed:55:ff:6f:6b:0b:26:13:bd:8f:
7a:2c:3e:41:2a:f0:b7:26:88:35:04:d8:02:a7:c7:
b8:c9:98:a2:0e:82:f3:e1:0f:a0:4a:0f:19:46:8c:
99:85:00:12:0f:ea:c9:82:65:2d:15:ed:1d:75:8d:
8d:86:38:e5:31:3c:28:77:23:d9:36:8e:45:12:3c:
0b:00:1f:c1:fd:e9:1d:e9:56:18:87:3a:c5:99:31:
7f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:99:33:00:AD:A3:3F:71:77:D0:64:76:DD:98:F8:1C:80:4A:F4:F7
X509v3 Authority Key Identifier:
keyid:15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/VZkzAK2jP3F30GR23Zj4HIBK9Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.23.0/24
84.238.223.0/24
185.32.150.0/23
185.240.182.0/23
Signature Algorithm: sha256WithRSAEncryption
05:f5:ed:15:a7:06:68:0a:16:a3:cb:2a:ce:a5:33:ea:e6:0a:
79:d2:d3:92:d8:26:6b:4b:9f:e0:e0:fc:c2:74:8f:3e:92:a3:
ab:0f:1a:34:53:36:ef:ce:b3:65:6c:08:26:4e:bb:b4:32:43:
d3:b7:92:32:8f:e0:7c:5d:44:12:8d:c8:aa:7e:89:61:2b:89:
51:68:6d:ac:da:46:70:e3:ab:1d:b8:f6:54:e3:68:b0:32:35:
8c:fe:12:a7:d9:5e:c7:11:7a:19:94:6e:ba:84:f9:49:5e:f5:
c3:0f:45:f5:73:ff:6e:c0:c6:76:25:06:db:c1:be:e7:bc:ff:
c1:2c:2e:d7:07:50:73:a1:a3:b2:d5:4c:53:52:90:df:b0:cf:
73:c5:f8:5b:65:26:de:a7:d9:46:56:52:4d:dc:d8:47:02:44:
7c:3c:a5:aa:10:30:cb:da:6c:91:8c:76:de:20:22:41:57:5a:
22:d1:9f:5b:46:6a:68:a5:d8:7f:5f:c0:ca:f1:d2:7a:ad:05:
ab:22:7c:d6:d4:7a:86:d9:41:a2:71:e9:0b:02:57:53:1b:e8:
d6:7c:7e:4d:ec:b0:bb:85:64:28:63:4c:4f:89:e9:0e:53:96:
d0:5a:d2:0d:ea:f4:2b:aa:bd:6a:fd:d2:6a:c8:b2:00:0e:17:
e4:84:42:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:47:39 2025 by rpki-client