Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TU7ZGBt-_pxqbDu-QBces1QGr6U.roa
File: TU7ZGBt-_pxqbDu-QBces1QGr6U.roa (raw, json)
Hash identifier: VVUtoxHlHXEc+v+CY/RBAHuCXYricfgzzjYNmmgGNyw=
Subject key identifier: 4D:4E:D9:18:1B:7E:FE:9C:6A:6C:3B:BE:40:17:1E:B3:54:06:AF:A5
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01950600FD995D6F81743068B87B056E96F7
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TU7ZGBt-_pxqbDu-QBces1QGr6U.roa
Signing time: Fri 14 Feb 2025 19:48:02 +0000
ROA not before: Fri 14 Feb 2025 19:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11798
IP address blocks: 185.207.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Feb 2025 17:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:06:00:fd:99:5d:6f:81:74:30:68:b8:7b:05:6e:96:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Feb 14 19:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d4ed9181b7efe9c6a6c3bbe40171eb35406afa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4b:f4:87:e9:94:4a:3b:48:80:f1:b2:5c:2d:
69:62:55:73:fd:ba:7a:c0:b5:a0:37:d5:ec:20:d2:
30:98:f5:dd:53:d2:be:74:61:06:8e:29:78:c9:32:
4f:b2:1e:62:32:c7:c2:f2:01:9c:9b:99:8b:51:1d:
83:ca:37:c7:7f:1b:dd:21:99:b7:14:86:c5:b9:69:
de:d6:5f:24:6d:9f:79:63:ea:57:db:5c:df:ea:32:
4b:e1:ff:6f:f7:c2:c9:55:26:0c:1f:8e:db:d8:23:
06:93:9b:f3:13:fa:86:2d:1e:87:06:88:97:34:fa:
31:9f:11:95:67:fc:76:c5:56:3e:dd:21:4c:1a:4f:
25:aa:d8:53:4d:4c:93:2d:88:85:2d:82:00:0c:2f:
6d:f8:35:74:95:da:9c:0c:77:41:66:23:12:b5:50:
99:66:06:9f:f0:bd:de:76:83:84:49:07:9a:57:bb:
f2:6e:72:69:7b:50:31:e0:2a:4c:18:1a:bc:a2:28:
1c:ca:be:52:fa:86:28:57:69:5a:71:75:ff:b6:93:
ae:ad:41:0f:87:4c:a2:66:a6:af:c8:4c:fc:79:17:
30:e2:06:22:74:0f:f5:9d:8f:b3:3d:9c:79:c3:78:
57:14:76:36:2f:d3:d1:f0:ea:4e:6b:10:7b:01:e2:
77:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4E:D9:18:1B:7E:FE:9C:6A:6C:3B:BE:40:17:1E:B3:54:06:AF:A5
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TU7ZGBt-_pxqbDu-QBces1QGr6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.135.0/24
Signature Algorithm: sha256WithRSAEncryption
59:61:60:e1:e2:bb:94:01:62:43:f1:8a:11:35:22:4d:76:70:
03:8c:d8:53:95:60:6d:74:0a:5f:ed:94:f8:a0:b5:ed:35:39:
01:40:c2:8f:30:ff:e3:a8:52:7d:ee:1f:fa:9e:55:08:c6:2e:
1d:e5:a1:7d:f6:fe:da:03:92:87:e9:3d:ea:20:6e:3d:ca:3b:
9e:31:1d:cf:cc:62:7e:60:e0:ba:13:fe:39:82:b0:4c:06:84:
40:d1:63:98:2b:da:c7:1e:cd:07:f0:0a:55:16:44:c7:e4:9c:
bf:d8:2a:1b:f9:c3:f0:fb:28:df:fe:f3:d9:1f:56:e7:01:ba:
f8:f0:75:13:4c:31:cc:c4:12:ea:fc:e5:a4:ad:3d:73:a3:d8:
64:98:23:09:5e:25:1d:95:bd:92:8e:17:b6:70:a6:15:e0:0a:
05:be:ea:b8:ee:53:91:0e:a6:eb:cd:d0:ad:b2:8b:31:f1:0d:
a5:b8:b2:9e:d9:fe:c8:55:51:3c:21:e5:96:d5:8e:08:ba:5a:
a6:bd:38:19:de:67:9f:5a:f6:42:89:bb:4f:04:3e:c1:95:2f:
04:81:df:e8:14:b6:ea:f5:ef:fb:1d:df:fb:e9:85:37:5e:10:
24:ff:4e:d8:e0:42:0c:cd:c1:f0:6b:d7:a3:35:8b:a1:a4:95:
51:57:76:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:12:45 2025 by rpki-client