Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/VclMF6Zg1UeNc4BKIiQYyzD3xag.roa
File: VclMF6Zg1UeNc4BKIiQYyzD3xag.roa (raw, json)
Hash identifier: KYR6gEPOihBssDDYN5NhLFvTg7q9Yz2aDaZ8SUnnzxI=
Subject key identifier: 55:C9:4C:17:A6:60:D5:47:8D:73:80:4A:22:24:18:CB:30:F7:C5:A8
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0195682F391D82257BEE751FDF2FC4B6998C
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/VclMF6Zg1UeNc4BKIiQYyzD3xag.roa
Signing time: Wed 05 Mar 2025 21:21:19 +0000
ROA not before: Wed 05 Mar 2025 21:21:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20326
IP address blocks: 185.227.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 18:23:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:68:2f:39:1d:82:25:7b:ee:75:1f:df:2f:c4:b6:99:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Mar 5 21:21:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55c94c17a660d5478d73804a222418cb30f7c5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:93:00:69:74:39:de:01:66:ff:7b:53:72:
f9:44:67:3f:16:11:68:de:a2:51:ff:a8:19:b6:60:
50:ee:56:f1:89:52:f9:a3:50:af:57:52:a1:26:c0:
91:6f:03:66:99:14:17:47:9f:fb:85:ae:35:7d:94:
55:76:cf:a0:f4:b6:7f:0e:11:6b:60:00:51:56:57:
b0:c3:a2:b5:f5:f4:ee:e2:72:03:bc:54:fc:36:e3:
26:fe:0b:57:b4:c3:ef:39:bd:b5:97:f4:37:bc:ef:
3b:ce:c6:04:13:e4:e9:7d:10:e7:b3:f3:38:70:48:
98:53:c7:cb:58:93:85:02:d3:61:9a:a1:48:63:d1:
6e:68:2b:ac:28:ae:40:19:5f:89:5d:25:8f:46:37:
70:7b:74:4d:b7:89:89:bf:c6:51:4f:21:52:9b:dd:
e1:29:09:b1:13:46:07:5a:38:39:b1:69:a6:03:0c:
39:25:45:76:24:e3:fb:0a:95:85:bb:00:90:d8:5c:
00:a2:c4:6d:2b:19:ed:95:ae:78:3d:e7:38:d2:14:
62:be:04:8b:fa:d0:02:58:08:bc:4b:76:fe:9a:5f:
e5:2d:be:06:20:4b:29:03:01:c1:86:97:1c:fa:65:
42:30:67:b4:22:05:a9:d2:72:25:87:e5:04:90:b0:
f6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C9:4C:17:A6:60:D5:47:8D:73:80:4A:22:24:18:CB:30:F7:C5:A8
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/VclMF6Zg1UeNc4BKIiQYyzD3xag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.69.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:56:af:09:63:93:1e:83:c9:9b:1d:61:b9:4e:29:7d:6f:ae:
08:18:6f:66:04:2f:23:1b:6d:d8:45:77:2b:94:f6:62:dc:a3:
b4:3a:a7:32:3b:06:f4:bd:fe:44:ec:f9:b2:53:d5:ee:b6:6c:
d4:ec:98:7a:73:2a:08:d4:2c:11:b9:dc:7c:34:96:17:15:09:
02:a8:5a:a8:78:11:b8:6b:85:53:4b:e2:97:a4:ae:a8:15:12:
08:8a:4c:5a:50:1c:b3:12:91:fc:0b:9f:81:aa:19:d5:71:6f:
5e:71:23:1e:3d:37:f4:89:87:f2:ce:25:58:e9:c0:e0:14:ad:
5e:6d:93:35:f3:6c:56:35:be:64:95:9e:7b:3c:f0:77:b1:74:
a1:b5:8e:12:28:b6:10:a3:5a:9a:d5:6c:f2:48:fe:a2:69:a1:
90:72:5c:e7:b4:3b:e2:69:77:12:71:19:fb:db:be:f3:d8:a0:
14:a4:27:4d:cb:9d:4b:ec:b6:ab:fc:16:95:4a:95:57:fc:b5:
2d:b9:cd:dc:ab:62:ac:a1:85:15:51:89:93:50:03:75:27:10:
3e:3c:63:ec:f8:cd:a1:05:e9:3f:2b:ab:2b:5e:74:32:15:5f:
bd:80:b9:69:26:4d:7d:c2:0a:8a:d7:3d:4b:88:43:42:9e:56:
2b:33:4b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:33:27 2025 by rpki-client