Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/jPP2IAHahJgU-2w8aEc2n72gkFQ.roa
File: jPP2IAHahJgU-2w8aEc2n72gkFQ.roa (raw, json)
Hash identifier: u/6pQJRhAo5Z2E2sFqS5MQLtFxGkPzuqaHjErrVzaVA=
Subject key identifier: 8C:F3:F6:20:01:DA:84:98:14:FB:6C:3C:68:47:36:9F:BD:A0:90:54
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 01956CFE9A61518879B9B67F2BECD4CF770B
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/jPP2IAHahJgU-2w8aEc2n72gkFQ.roa
Signing time: Thu 06 Mar 2025 19:46:19 +0000
ROA not before: Thu 06 Mar 2025 19:46:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 274024
IP address blocks: 185.83.200.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 08 Mar 2025 12:11:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6c:fe:9a:61:51:88:79:b9:b6:7f:2b:ec:d4:cf:77:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Mar 6 19:46:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cf3f62001da849814fb6c3c6847369fbda09054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:63:15:ca:ac:3b:24:9e:9e:21:18:ab:68:ff:
53:e2:57:e4:e9:3f:e1:08:d4:3a:25:ab:78:7a:a4:
4e:92:9c:bb:8b:a3:4d:17:df:49:b4:9c:df:a9:c4:
4c:00:75:fa:6c:a3:bd:15:d8:58:db:d6:0e:21:88:
2e:c1:f5:43:4b:44:48:e8:32:8c:18:d9:91:5c:01:
f7:22:29:ae:ed:05:45:57:e3:7f:dc:13:8f:d9:30:
ca:78:17:f7:d7:a2:0d:a3:7f:67:18:22:e9:b7:df:
40:b0:d2:2d:0d:36:7b:cf:2f:9f:57:5a:7a:f0:bf:
30:75:2c:0e:4e:1c:cd:51:64:2b:c8:2a:4b:a5:62:
02:af:a2:ee:9a:ad:a6:b6:ac:1f:f4:0c:8a:db:1f:
a6:e3:ab:1b:c0:0a:67:72:19:fa:d1:a3:54:50:7d:
97:35:da:0d:0a:39:b7:95:c5:62:69:0c:b1:37:e9:
1d:37:9b:63:1e:f4:68:22:d7:d9:bb:c4:c7:8c:16:
11:65:ff:fc:ca:1c:f2:d5:82:5a:57:f3:2e:76:a8:
93:75:98:88:b6:40:79:12:c1:89:91:6b:7f:02:01:
b3:91:8e:b5:9c:93:41:5c:36:d0:84:a6:14:a8:79:
ae:cb:1f:15:3f:6e:a0:af:f7:4a:03:cc:8d:79:cc:
5e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F3:F6:20:01:DA:84:98:14:FB:6C:3C:68:47:36:9F:BD:A0:90:54
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/jPP2IAHahJgU-2w8aEc2n72gkFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.200.0/23
Signature Algorithm: sha256WithRSAEncryption
63:2c:11:ef:4a:24:fe:a8:40:96:2b:44:ec:98:7d:c0:9e:21:
44:ae:58:2b:f3:1b:e3:5d:a7:90:06:82:1f:0d:2c:dc:4c:02:
bc:48:ce:fc:8e:c0:52:71:21:fb:e3:e3:d8:14:46:5c:ee:0c:
7c:df:16:50:c7:ac:26:6d:04:74:ee:f3:22:1f:d8:f7:b5:a0:
4b:2a:da:ef:b0:15:ca:0e:cc:57:cc:78:ea:59:21:f3:5d:80:
d3:5f:50:94:ad:67:e5:96:38:b5:8a:4f:4d:c9:cf:e2:51:61:
8c:f7:42:5c:32:47:5c:68:da:f0:98:65:e1:c3:cb:f6:74:fe:
ec:85:ff:54:1a:2e:60:3e:19:bd:9e:0e:cd:31:24:8e:eb:8a:
69:29:af:d3:75:f6:b1:e4:de:70:16:01:f9:60:de:94:13:4f:
37:f8:1c:c2:0e:c8:9a:21:92:ac:b7:8f:f7:06:f1:cc:9b:e0:
40:87:2e:af:72:b9:3d:4c:36:e2:b5:34:95:c2:69:3f:e5:c0:
af:b5:8e:e8:aa:77:22:38:a9:d3:5d:e5:5c:03:57:72:97:1f:
91:7c:ab:3b:85:52:d7:79:9f:00:4c:60:f0:0a:1a:b2:a7:9c:
d4:9b:a8:f3:0e:6a:06:1b:f9:05:70:c2:1b:be:1e:ee:85:6c:
a1:fa:ab:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:41:40 2025 by rpki-client