Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/vWWOYHazZ26LCo3KOxOAvS9pR6M.roa
File: vWWOYHazZ26LCo3KOxOAvS9pR6M.roa (raw, json)
Hash identifier: 6xqSM/32MkBeh0NxssQJ5g9BmJNeEUdcwRgAnRWQ9uM=
Subject key identifier: BD:65:8E:60:76:B3:67:6E:8B:0A:8D:CA:3B:13:80:BD:2F:69:47:A3
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 019421B25626ABD9F052F3F98C6266DCC83B
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/vWWOYHazZ26LCo3KOxOAvS9pR6M.roa
Signing time: Wed 01 Jan 2025 11:48:43 +0000
ROA not before: Wed 01 Jan 2025 11:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.126.158.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Jan 2025 04:25:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:56:26:ab:d9:f0:52:f3:f9:8c:62:66:dc:c8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jan 1 11:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd658e6076b3676e8b0a8dca3b1380bd2f6947a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:7c:b9:15:23:e6:c4:78:0d:39:55:ae:ce:
1e:cc:35:8a:c7:c6:f3:03:c7:99:9b:24:1d:97:98:
f4:7e:57:54:83:04:c4:f3:82:41:df:fb:12:02:86:
26:8f:b1:8a:78:12:53:dc:0b:22:d9:1d:43:93:4e:
59:a8:55:8d:ce:99:a7:54:9c:fa:52:09:e3:af:5e:
97:a3:a7:59:12:b5:b4:a5:7a:8b:a9:75:b1:c0:a1:
64:a7:68:38:f6:38:cf:fc:03:6c:c4:6f:cd:dc:80:
c8:e9:94:fd:38:c7:15:95:3e:9d:03:b9:a0:1f:4a:
ce:9f:22:e4:5e:38:7f:04:ea:eb:59:cf:5e:73:67:
58:2c:05:6a:54:b2:8d:93:4b:4d:0d:7a:66:46:83:
c6:ea:cc:1f:31:5b:ed:25:bf:bd:14:dc:73:2b:94:
13:94:64:51:29:dd:a7:54:7a:99:2c:46:d3:51:79:
c5:97:85:0b:c3:77:39:d2:89:99:9b:8c:86:63:bd:
b0:86:11:b1:d4:df:eb:f5:5c:9d:41:ee:eb:be:16:
a2:a4:7c:a3:d6:d8:cb:9e:80:57:93:f2:5b:63:80:
d2:f2:c8:e2:b8:8b:cd:c3:80:fe:66:67:3f:bd:da:
96:ae:74:e0:6f:48:48:de:9a:26:bc:ba:ff:61:d7:
01:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:65:8E:60:76:B3:67:6E:8B:0A:8D:CA:3B:13:80:BD:2F:69:47:A3
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/vWWOYHazZ26LCo3KOxOAvS9pR6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.158.0/23
Signature Algorithm: sha256WithRSAEncryption
26:2c:f0:a5:7a:50:e7:9a:53:07:52:ee:a6:29:3e:75:9e:29:
1c:6a:4c:33:2d:d9:03:ca:53:b0:c3:c1:c3:a6:50:72:b8:05:
03:0e:fc:77:19:63:85:91:4b:23:eb:d3:c7:41:1f:84:d5:2d:
59:5f:8e:17:95:a6:2c:eb:a6:93:52:55:7e:8c:82:be:38:b2:
ee:3c:eb:21:04:48:dd:00:14:94:9f:78:bc:73:86:39:b3:a5:
87:5a:ad:c4:79:43:f1:f3:d4:aa:67:53:e2:30:f0:ed:b1:66:
c1:d4:07:a7:77:5b:3d:07:92:d7:e7:09:be:2d:86:64:4b:de:
f0:41:74:06:d5:0f:5f:1f:72:52:ac:9e:41:f9:bc:70:c7:f3:
ef:ee:04:c0:37:7b:5a:ba:e1:23:37:1b:38:d1:df:65:36:9d:
04:76:73:16:04:6c:a5:a2:99:10:97:df:23:55:b9:26:38:60:
f1:a1:b7:e4:97:18:d9:d6:92:1a:5a:72:9d:cf:e2:ed:7d:1a:
73:59:c7:fb:d6:23:35:06:ec:d8:61:2e:7b:98:d3:6c:38:89:
64:ea:c3:ea:ad:18:1a:62:83:c5:62:1c:2d:f0:5c:be:71:17:
91:be:e7:73:30:f2:08:a1:1d:a9:6e:3f:49:78:7c:9c:d0:9c:
42:3a:ed:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:21:35 2025 by rpki-client