Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/U13Dkg3O5GhpHdhGthiDNoBCo_4.roa
File: U13Dkg3O5GhpHdhGthiDNoBCo_4.roa (raw, json)
Hash identifier: r+jyFEtpCm7zbYosZDgNou4vDrOR5i/ijtHsl1BSVqM=
Subject key identifier: 53:5D:C3:92:0D:CE:E4:68:69:1D:D8:46:B6:18:83:36:80:42:A3:FE
Certificate issuer: /CN=acd6be97bcfe12becbe82b7841047f57972a935a
Certificate serial: 0194E4E32B17875E4F18AFDB6DE69497C0ED
Authority key identifier: AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/U13Dkg3O5GhpHdhGthiDNoBCo_4.roa
Signing time: Sat 08 Feb 2025 09:28:00 +0000
ROA not before: Sat 08 Feb 2025 09:28:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48795
IP address blocks: 185.176.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Feb 2025 10:29:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e4:e3:2b:17:87:5e:4f:18:af:db:6d:e6:94:97:c0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd6be97bcfe12becbe82b7841047f57972a935a
Validity
Not Before: Feb 8 09:28:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=535dc3920dcee468691dd846b61883368042a3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:32:4d:32:5a:e7:28:91:ac:0c:f6:3f:93:e7:
9c:bd:b1:b9:8d:ee:b6:91:16:74:3b:18:f8:f2:66:
c4:63:b0:4d:f9:99:1e:3d:2b:68:2b:37:9f:02:dd:
45:1f:f9:43:ef:13:78:87:dc:ee:55:27:ea:7c:5a:
20:63:98:63:77:47:3c:bf:54:f2:b1:f0:b2:38:d6:
5b:48:ea:3a:d2:f2:e3:2f:dd:7f:dd:83:7d:05:fa:
7c:fb:80:af:39:d8:14:53:09:58:c6:4c:11:17:1c:
aa:cd:47:13:61:5a:d7:2b:64:f7:63:82:4c:41:a3:
b0:ce:2b:dc:05:73:78:83:cd:0e:0d:a7:f1:b4:dd:
74:6e:de:fd:0c:21:4a:31:34:a3:6d:f2:4a:a4:fb:
8f:19:c7:b5:72:96:5d:19:12:32:46:f9:39:26:be:
3f:51:29:89:47:81:4e:8f:33:7d:d4:b0:30:c7:c6:
16:bf:83:5f:76:a2:aa:f3:5d:9c:c6:95:62:9c:aa:
31:76:e8:0f:f1:66:94:86:62:da:c4:f7:37:e2:b5:
a2:64:10:54:b5:0d:42:8b:36:cf:81:01:89:cb:95:
63:83:b8:46:1c:d5:03:cd:dc:7b:cc:39:b8:4f:db:
73:be:ee:8e:3a:45:4a:f6:f7:2c:03:f1:5c:c3:b4:
52:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5D:C3:92:0D:CE:E4:68:69:1D:D8:46:B6:18:83:36:80:42:A3:FE
X509v3 Authority Key Identifier:
keyid:AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/U13Dkg3O5GhpHdhGthiDNoBCo_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.134.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:d4:88:19:09:c6:d9:65:7b:78:c9:c2:29:a1:19:bf:a9:f1:
0b:ec:17:dd:bc:51:a2:30:a5:95:20:02:c0:ee:11:86:a3:b8:
4c:4c:f8:94:84:cf:9b:67:b3:01:9b:41:65:72:42:10:37:23:
45:0e:56:31:6e:d1:4e:64:88:5a:a4:37:32:59:e3:90:43:19:
b7:45:9c:6f:a9:2e:8b:0c:9c:bd:69:24:3e:d6:ac:30:87:51:
79:65:31:07:24:cd:84:f2:6a:0f:bd:1c:f7:0c:42:e0:6f:ad:
d2:bc:17:f1:bf:1c:dd:f6:cf:79:92:a8:8c:f0:38:27:1f:24:
01:dc:53:78:b5:19:5a:bf:88:d2:0b:f4:a6:67:d6:f8:86:9d:
d7:dc:f3:1c:c6:c7:75:49:84:19:79:e4:91:9f:1d:ca:2e:78:
17:b4:ba:94:75:65:6d:9a:79:f4:d3:07:75:b7:c4:05:8b:65:
d3:82:ef:12:e8:81:2c:d3:4a:0a:31:49:e2:14:b1:eb:ad:db:
a6:ac:9f:02:23:cb:f4:9f:14:23:77:dd:5e:63:c5:3e:0d:40:
74:61:25:55:b8:de:a2:5e:87:c3:b9:d0:2f:fc:9e:53:e3:24:
9a:57:30:d2:a8:4e:7f:9f:87:1f:41:43:d2:ca:f3:90:66:01:
e7:77:95:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:20:24 2025 by rpki-client