Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/HX5SZqLKZ1AiWOkZAMr_pGP6OJA.roa
File: HX5SZqLKZ1AiWOkZAMr_pGP6OJA.roa (raw, json)
Hash identifier: FC+VoexE1zdPLSYhO6CQLsfKB/iHI77OA5uQhzRjdFg=
Subject key identifier: 1D:7E:52:66:A2:CA:67:50:22:58:E9:19:00:CA:FF:A4:63:FA:38:90
Certificate issuer: /CN=05f2748cb43862a104b56f8c6204b6209706558c
Certificate serial: 01969B953A96396E558A9E6B009EDE7B3424
Authority key identifier: 05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/HX5SZqLKZ1AiWOkZAMr_pGP6OJA.roa
Signing time: Sun 04 May 2025 13:56:10 +0000
ROA not before: Sun 04 May 2025 13:56:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211098
IP address blocks: 185.184.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 May 2025 15:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9b:95:3a:96:39:6e:55:8a:9e:6b:00:9e:de:7b:34:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f2748cb43862a104b56f8c6204b6209706558c
Validity
Not Before: May 4 13:56:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d7e5266a2ca67502258e91900caffa463fa3890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:98:52:d5:b6:bd:fb:aa:db:64:3f:99:77:37:
9b:cb:f0:82:4a:8b:4d:af:12:d2:fb:41:2f:17:13:
76:b7:48:fd:d2:b2:7b:f8:1e:88:2a:7a:aa:ee:69:
df:4d:ea:57:1d:82:0b:f4:d5:1b:2b:2a:83:27:94:
c2:94:bc:6c:7c:5e:5e:3f:37:ea:b0:a3:b7:ed:62:
1d:70:a2:d9:08:48:dc:45:05:23:b3:cf:ad:ce:21:
a1:d4:d3:fe:dc:a9:3a:20:3b:4d:b8:34:97:ed:e4:
bc:7d:aa:0d:81:fa:78:f5:c7:27:09:21:fd:0e:1f:
5a:b3:70:83:df:54:55:1a:ee:72:7c:a7:c8:18:fd:
a2:25:cd:f4:fa:0c:fd:ef:65:2b:f7:9c:08:37:eb:
e6:12:e8:ef:4b:5a:38:de:59:89:58:c9:88:e1:43:
a2:23:ec:26:4a:b1:90:a1:fa:87:9b:4f:5b:d4:5d:
24:73:f3:e1:9f:4a:80:3d:65:48:17:37:be:2b:54:
40:82:64:9f:83:0d:a6:58:e4:69:45:60:69:e6:88:
7b:52:c7:05:4e:fd:d0:91:22:51:3d:75:2e:3c:c8:
ba:a8:a1:eb:06:68:00:b3:f4:0e:a9:f3:c6:03:39:
d5:f9:ed:55:2b:de:5e:33:e5:d6:fa:5a:54:60:8b:
9e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7E:52:66:A2:CA:67:50:22:58:E9:19:00:CA:FF:A4:63:FA:38:90
X509v3 Authority Key Identifier:
keyid:05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/HX5SZqLKZ1AiWOkZAMr_pGP6OJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.217.0/24
Signature Algorithm: sha256WithRSAEncryption
65:37:ad:4c:f1:f1:df:8c:93:57:3f:d7:63:54:1e:08:bb:51:
c4:83:2f:f8:e7:37:71:eb:39:9c:cf:ea:db:a1:71:d4:28:6f:
99:3a:22:20:21:f4:7d:bb:5e:27:26:d8:93:a8:9c:b0:ab:c2:
cc:b7:cf:59:de:88:87:66:17:9d:f2:e0:5a:0f:f4:63:64:9b:
18:ef:af:c3:89:a4:42:f5:96:5f:74:0b:da:ba:23:15:d0:d4:
c1:9a:22:81:f7:81:54:ce:0e:a1:f9:50:2a:38:d8:9c:91:a4:
e9:cf:f4:c9:ce:ac:de:e3:f2:ed:85:27:c2:98:80:ac:ff:ec:
40:f1:fe:e6:90:c2:d0:80:42:38:ec:45:d2:28:01:82:08:ae:
7b:65:0a:4a:84:1b:b9:60:f2:87:f6:ba:e0:32:98:32:3b:7e:
e8:2e:d9:5e:d3:74:2b:34:d9:3b:48:10:bb:11:64:24:74:1b:
d3:8f:65:bc:e4:ce:77:f2:e5:db:6d:ef:49:43:e9:ab:bf:8e:
da:a2:b6:f9:c2:46:a5:af:cc:e9:84:e5:db:03:df:20:81:b1:
85:f6:59:61:b5:07:72:a1:9c:43:3f:ef:20:04:23:93:23:d0:
65:3b:df:d9:e1:ed:41:30:c8:47:95:cc:c0:57:31:5b:df:7f:
42:b5:82:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:02:28 2025 by rpki-client