Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/G_UVT2m5S5uru7VCY2KVGGJaM0w.roa
File: G_UVT2m5S5uru7VCY2KVGGJaM0w.roa (raw, json)
Hash identifier: HnHAvqJ22VXZPBJGiWZ301rTWReIb2vZHA/fGfkT6s0=
Subject key identifier: 1B:F5:15:4F:69:B9:4B:9B:AB:BB:B5:42:63:62:95:18:62:5A:33:4C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195F4AF15DC0F6067E5B25C7D314B597A34
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/G_UVT2m5S5uru7VCY2KVGGJaM0w.roa
Signing time: Wed 02 Apr 2025 04:07:49 +0000
ROA not before: Wed 02 Apr 2025 04:07:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 185.47.142.0/24 maxlen: 24
185.121.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Apr 2025 04:12:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f4:af:15:dc:0f:60:67:e5:b2:5c:7d:31:4b:59:7a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 2 04:07:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bf5154f69b94b9babbbb54263629518625a334c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:08:e5:9b:5c:38:0e:56:2e:65:67:ec:6a:38:
ed:23:93:cf:dd:e6:4a:73:c8:32:34:d4:c0:7f:ff:
e2:e7:8e:dd:16:aa:21:e0:01:72:d2:86:69:8a:59:
ab:6c:13:51:61:c5:69:7d:8d:30:6d:48:96:de:ba:
1d:64:1a:08:da:f4:50:ba:dd:70:24:ee:b4:a8:28:
85:b7:b8:e1:04:b8:3a:3d:49:91:e5:e1:a0:79:de:
43:1a:5c:dc:c5:84:a2:f8:e1:e1:49:96:4d:88:80:
98:25:06:82:2e:6e:76:9c:78:5c:6d:7a:64:bd:b2:
75:50:90:66:84:41:36:4f:a4:f3:fc:b8:73:3e:a6:
26:1e:34:a3:3e:30:95:21:be:eb:1a:fa:e1:c2:36:
75:15:0f:f1:22:ea:7c:9b:eb:19:5d:02:b8:e5:f9:
a7:b4:0e:25:c7:ed:17:9b:24:e3:a3:08:a0:65:b5:
99:b3:6a:df:14:24:b3:da:5c:29:90:e2:b6:af:89:
52:24:8f:d0:ad:96:05:dd:67:63:81:54:a3:7c:83:
0f:35:ea:77:a0:28:36:8c:73:af:6f:75:df:d0:94:
2b:ee:82:58:ae:45:55:81:7d:41:36:14:73:f1:5e:
74:1f:db:3e:49:53:7e:2e:4c:e4:19:a3:d6:f5:c6:
e8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F5:15:4F:69:B9:4B:9B:AB:BB:B5:42:63:62:95:18:62:5A:33:4C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/G_UVT2m5S5uru7VCY2KVGGJaM0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.142.0/24
185.121.69.0/24
Signature Algorithm: sha256WithRSAEncryption
62:dd:b4:92:78:57:14:6d:20:6b:a3:19:f8:d1:39:6f:b4:b8:
43:c6:12:cd:37:6e:b9:a6:2e:18:f2:c8:ac:a0:89:a4:39:b2:
39:87:c0:50:dd:5f:c0:50:8e:9f:9c:d8:92:80:26:7a:7d:d6:
ba:ec:8d:40:e5:1a:0d:b3:56:72:92:fb:7c:e3:75:61:dc:bc:
b8:d6:f3:be:93:51:77:64:42:45:97:7b:79:0e:6f:55:56:ad:
ea:d8:7a:31:81:3f:67:cb:ee:3a:fb:aa:93:c5:e8:2b:e5:20:
00:67:85:c3:8b:1a:bc:28:b7:e9:ce:18:eb:cc:f6:44:a9:e3:
e9:83:3c:e6:32:8e:65:18:ae:5f:62:fb:09:1e:73:12:b3:bb:
9d:09:ab:5f:4e:e0:90:22:4d:e9:16:59:0d:69:bd:08:fd:b5:
12:09:ce:f8:3b:9c:5c:a5:d2:6b:df:11:a4:5a:81:ee:2b:20:
dd:71:7a:96:a2:e6:43:ba:89:16:b9:b6:cd:d1:ee:99:ba:6f:
f4:71:b9:76:f4:88:d4:73:68:8d:e7:81:d3:8b:25:04:92:8b:
41:7a:bb:ff:cd:f2:25:e1:2b:c8:17:bc:c6:aa:51:33:43:86:
d0:38:16:6e:77:a8:98:c7:8f:c3:7b:14:4a:da:99:03:ca:1e:
c6:3c:33:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:28:01 2025 by rpki-client