Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rZWf3rgyssqSbYGzYugvvCr1uNo.roa
File: rZWf3rgyssqSbYGzYugvvCr1uNo.roa (raw, json)
Hash identifier: 2UD2Cmn1VBeoY7Zi/NermSV58HrOvlCHW9xdxR0D+M8=
Subject key identifier: AD:95:9F:DE:B8:32:B2:CA:92:6D:81:B3:62:E8:2F:BC:2A:F5:B8:DA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193E0183C4E5B107B67DC7F1984911D05E1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rZWf3rgyssqSbYGzYugvvCr1uNo.roa
Signing time: Thu 19 Dec 2024 18:05:04 +0000
ROA not before: Thu 19 Dec 2024 18:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56902
IP address blocks: 185.226.173.0/24 maxlen: 24
185.226.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e0:18:3c:4e:5b:10:7b:67:dc:7f:19:84:91:1d:05:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 19 18:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad959fdeb832b2ca926d81b362e82fbc2af5b8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:00:24:b8:5e:5f:85:69:18:c6:b3:4e:6d:88:
e9:a8:ce:9f:48:9c:e1:25:c6:7e:d8:f8:18:5e:e2:
17:3a:ef:69:49:a2:bd:26:a7:a7:12:47:de:db:ee:
3f:20:b8:57:57:b0:de:57:57:d8:fa:b5:9c:80:77:
ba:47:2d:b1:9a:a6:8b:bf:05:57:9a:a9:e9:4a:ac:
09:6c:18:a9:4f:fe:a3:44:2e:e8:7c:fb:52:73:39:
f3:86:30:72:df:7c:21:b5:3f:77:b1:1d:f8:09:d0:
47:42:01:da:eb:91:00:4a:85:13:e7:04:4e:d0:3a:
79:1c:9e:07:cf:a2:0f:df:93:ee:84:52:bf:07:42:
97:54:43:13:fd:e6:ae:6b:03:82:26:ff:8c:b5:05:
31:ee:1e:86:6e:b2:89:6d:0e:41:24:a9:cf:e3:b0:
c3:fc:e2:70:0c:f7:e9:57:a0:4a:2a:29:f3:68:00:
f5:3e:cb:fd:67:94:a4:0b:86:a5:20:cc:12:f1:8d:
da:11:85:b2:e1:18:00:97:6d:15:51:5e:c1:e8:22:
56:4b:dd:2a:62:24:60:58:d6:04:d1:96:2a:3f:82:
59:d6:05:4e:04:b2:95:8d:92:85:8a:68:c9:72:77:
ac:93:1f:22:97:0a:4d:21:e9:42:ff:7a:3b:43:f2:
1e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:95:9F:DE:B8:32:B2:CA:92:6D:81:B3:62:E8:2F:BC:2A:F5:B8:DA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rZWf3rgyssqSbYGzYugvvCr1uNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.173.0/24
185.226.175.0/24
Signature Algorithm: sha256WithRSAEncryption
94:d8:bd:ee:da:08:0d:aa:f9:3d:53:8c:33:7d:78:a7:2a:99:
ba:9b:d7:54:72:7a:b3:05:90:be:9f:3f:95:11:74:0b:1a:d2:
a4:80:11:80:d5:b1:a9:f2:42:ba:22:7f:78:80:07:a5:05:3e:
84:f1:be:5a:71:a1:93:53:c6:36:3b:83:50:7a:d1:06:15:26:
91:01:b5:50:29:d4:50:d7:26:32:b5:7d:24:f4:f6:98:95:2c:
3e:41:4e:6f:ec:ec:bd:08:a9:c0:ab:d4:71:9b:0a:9f:5e:8d:
da:59:e7:6f:cc:7a:24:9c:aa:c1:61:e7:c0:12:c4:38:04:35:
28:35:e8:70:19:ba:f3:fc:a7:25:0e:65:c4:95:53:15:95:6f:
81:87:55:9b:ef:4f:e5:f7:60:81:f4:cc:40:19:ac:1e:5f:ee:
db:94:b8:7a:bb:74:a2:f9:0b:eb:08:76:40:86:cf:eb:1d:bd:
07:da:21:b5:a5:98:6d:60:e2:95:10:32:ae:d5:be:88:fc:af:
c6:9e:ae:8c:23:a9:fc:94:be:4c:6c:34:f4:59:38:4f:99:34:
13:e2:e5:cb:34:5f:13:b3:39:f8:74:a5:79:d7:00:b1:75:ce:
09:d0:af:e2:b6:80:0f:5b:b5:99:fc:29:ff:ce:be:71:1f:bd:
6a:0b:5d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:55:16 2025 by rpki-client