Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/1mY0yqcivB2XXUpwY2jyRPdBRLw.roa
File: 1mY0yqcivB2XXUpwY2jyRPdBRLw.roa (raw, json)
Hash identifier: F6eKGt5g424W6uOnpiCsm0pd9vDHdBnjw/3UOuUCzWc=
Subject key identifier: D6:66:34:CA:A7:22:BC:1D:97:5D:4A:70:63:68:F2:44:F7:41:44:BC
Certificate issuer: /CN=acd6be97bcfe12becbe82b7841047f57972a935a
Certificate serial: 0194228DD5C2D7F1A7D54E8A4D1D1CE0854C
Authority key identifier: AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/1mY0yqcivB2XXUpwY2jyRPdBRLw.roa
Signing time: Wed 01 Jan 2025 15:48:28 +0000
ROA not before: Wed 01 Jan 2025 15:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48795
IP address blocks: 185.176.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Feb 2025 06:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d5:c2:d7:f1:a7:d5:4e:8a:4d:1d:1c:e0:85:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd6be97bcfe12becbe82b7841047f57972a935a
Validity
Not Before: Jan 1 15:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d66634caa722bc1d975d4a706368f244f74144bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cc:af:f7:1d:f3:e6:23:7e:f8:28:3b:ad:cd:
c1:e3:bd:88:7f:d0:bf:89:af:42:ad:91:39:10:72:
88:95:1e:90:cd:54:24:70:53:41:41:d8:35:3a:90:
4a:a7:12:42:be:c2:d9:c2:a5:80:22:2f:46:44:ee:
62:2d:65:ed:41:55:81:e4:2e:c3:55:b4:d8:c8:0f:
db:14:74:02:a8:47:54:9a:99:11:d4:80:2c:a2:70:
d9:4b:0d:bc:23:3f:9f:5e:09:93:e6:23:85:fc:73:
75:5f:4a:70:31:64:10:a2:c6:c5:a7:59:43:7e:b0:
19:a5:55:ae:98:f1:74:ae:e9:39:a2:05:20:77:c2:
e8:b0:f0:63:a8:5f:8b:93:4b:66:34:77:74:bb:b1:
ce:a0:4a:21:50:2b:fe:28:78:02:23:74:11:8b:5f:
2b:e6:2f:87:a4:11:29:1d:90:66:8e:e8:ba:9d:8d:
a5:a1:30:3f:ed:bd:10:cc:c0:ef:d5:ea:45:e0:f0:
88:83:74:cf:8e:ad:a8:46:05:d5:2d:0e:a7:bb:db:
99:0c:04:d8:96:80:6d:c9:8d:59:f5:81:e1:3a:98:
cf:a0:aa:e3:7c:10:c6:92:8c:e8:9a:57:45:f5:3f:
97:6a:70:7f:c4:37:e6:2f:ec:46:0f:d1:31:fe:05:
00:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:66:34:CA:A7:22:BC:1D:97:5D:4A:70:63:68:F2:44:F7:41:44:BC
X509v3 Authority Key Identifier:
keyid:AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/1mY0yqcivB2XXUpwY2jyRPdBRLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.134.0/24
Signature Algorithm: sha256WithRSAEncryption
04:e1:08:4a:24:96:03:69:c0:47:e8:88:1c:c1:fd:1f:31:90:
9d:88:01:7b:ba:bc:14:95:a1:6a:37:ad:7b:18:dc:56:24:39:
0a:68:19:3c:80:c0:35:78:6d:28:5d:08:0d:fb:42:43:7e:f9:
7b:e8:13:a0:fb:6a:58:38:5f:69:75:eb:51:84:88:fc:52:fb:
9d:9f:81:1c:c2:60:bb:29:4b:0c:ea:42:d7:47:24:04:7d:c4:
4d:3d:94:d5:3f:c4:02:fc:48:f4:57:ee:7c:5f:f3:6e:a3:1b:
57:11:d7:4f:44:94:75:6e:3c:f2:27:a7:ee:76:7b:65:4e:e6:
ab:66:0c:76:6c:01:4f:7a:ac:72:7e:f8:12:59:7b:40:88:e5:
c8:e2:90:5c:df:5c:02:ad:12:f0:1c:9e:ef:02:d0:cd:ee:07:
05:9e:ee:14:dc:fc:e9:05:2a:39:bd:a2:33:0c:9a:44:b4:58:
80:57:01:98:e4:c2:ba:32:b0:84:7d:aa:1b:c9:d8:97:c6:32:
93:04:3d:4f:17:95:34:aa:d0:f9:eb:f0:63:01:89:3a:c4:ad:
09:ad:4f:63:e8:15:3d:f2:57:ba:05:3b:61:cd:31:c8:fc:14:
b8:e9:1e:e2:18:c1:93:67:18:81:b4:4f:e1:66:04:e7:c9:b6:
22:d7:f3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:33:57 2025 by rpki-client