Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/25pvc9_6Isc77StOSNQOoTRg9AQ.roa
File: 25pvc9_6Isc77StOSNQOoTRg9AQ.roa (raw, json)
Hash identifier: 76WdUpLF9Iqu8Ba/6vchWgCVlwbQNg5Trv7xtOe36l4=
Subject key identifier: DB:9A:6F:73:DF:FA:22:C7:3B:ED:2B:4E:48:D4:0E:A1:34:60:F4:04
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193E0183C07F72D3EEAE4D6C15777EF5E2F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/25pvc9_6Isc77StOSNQOoTRg9AQ.roa
Signing time: Thu 19 Dec 2024 18:05:04 +0000
ROA not before: Thu 19 Dec 2024 18:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43824
IP address blocks: 185.226.173.0/24 maxlen: 24
185.226.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e0:18:3c:07:f7:2d:3e:ea:e4:d6:c1:57:77:ef:5e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 19 18:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db9a6f73dffa22c73bed2b4e48d40ea13460f404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:84:94:33:6b:f6:17:b1:55:8d:39:49:e6:88:
55:d0:88:a3:d4:b4:8a:c2:5e:04:83:bd:a3:45:8d:
a8:91:d8:55:a1:c0:9c:36:4a:16:a5:8b:17:bc:93:
25:9e:c7:06:1f:a9:8c:28:fb:be:3b:15:db:1c:de:
06:e5:b4:14:33:2f:b9:73:7b:8a:d4:0e:dc:0e:ac:
04:42:a5:d2:35:50:1e:55:fa:2a:9c:28:7a:7b:9d:
05:6e:2f:93:44:55:26:e7:5c:32:20:04:2c:5a:06:
1c:4b:7c:df:43:6f:f5:26:be:e4:70:1c:8e:98:e9:
5c:cb:03:16:87:e4:9e:bf:40:ac:f0:0b:49:8d:80:
96:23:04:5a:13:ff:9b:59:93:1b:7a:34:b1:36:73:
19:9a:84:50:e4:62:27:0d:d8:50:68:e7:38:c1:47:
ed:7f:32:d4:a5:d6:1a:d5:bb:bb:99:48:96:15:eb:
da:9b:08:3e:d9:5c:4f:61:a5:a7:c6:bb:52:14:63:
3d:a4:3b:59:0f:85:a5:cf:3c:75:e5:5f:a1:8b:b2:
a3:a2:c7:8b:dc:75:88:0f:06:4a:21:a2:b4:91:13:
5c:52:4b:b9:75:82:d6:92:08:35:31:b9:75:74:29:
7c:2a:b2:3f:d5:3f:8d:b3:ed:c2:57:83:0d:f2:79:
48:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9A:6F:73:DF:FA:22:C7:3B:ED:2B:4E:48:D4:0E:A1:34:60:F4:04
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/25pvc9_6Isc77StOSNQOoTRg9AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.173.0/24
185.226.175.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:81:d2:4b:98:b8:fa:c7:ac:dd:88:2c:8d:bf:98:c2:10:57:
3f:08:45:c5:e3:54:69:66:0d:44:e4:08:ed:f1:b7:84:2f:6f:
40:a3:bb:2d:1d:e7:ea:2e:fe:e3:cf:5d:d7:c5:0c:c6:76:bf:
ab:d1:c8:13:b7:48:2c:de:23:3a:36:44:13:2b:e5:29:b1:82:
a0:4c:22:ca:35:da:d9:be:5a:53:47:bb:a2:cf:92:1b:06:31:
66:04:29:f7:44:7d:83:86:6e:b9:31:a7:96:8e:1f:88:38:1e:
bd:3e:32:af:49:b1:7f:6a:73:97:1f:8a:39:51:e5:2b:8e:a7:
93:71:18:c9:d3:97:b2:72:31:90:26:13:5a:63:f8:f6:5d:4b:
ff:06:d8:7f:81:ae:27:3f:44:02:d6:4c:3a:e7:04:41:68:e4:
db:8e:0b:2e:25:c7:34:be:52:1d:4a:58:6c:87:80:fe:8a:5f:
9f:ce:cb:bd:0b:15:44:f2:13:1c:c2:fe:2d:b2:cd:ee:0a:06:
1f:a6:5f:eb:71:c9:6f:88:dc:e8:96:d0:25:7d:97:72:48:44:
cb:e3:09:a1:c8:5b:e5:d7:16:bf:47:59:44:fc:19:06:77:a3:
55:1d:3d:f0:fd:cd:6f:5a:ac:ff:38:72:c4:26:96:85:d4:45:
f5:70:40:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:38:12 2025 by rpki-client