Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/xNhpj_0oJVvJsvePe89N8LRzCH8.roa
File: xNhpj_0oJVvJsvePe89N8LRzCH8.roa (raw, json)
Hash identifier: x+izSmM3HLtUwi9VWIMjJEyTRpDBQ75UMqoUGdfTNfE=
Subject key identifier: C4:D8:69:8F:FD:28:25:5B:C9:B2:F7:8F:7B:CF:4D:F0:B4:73:08:7F
Certificate issuer: /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial: 01956965EB9DE9FC1E65DECEA9A520B44833
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/xNhpj_0oJVvJsvePe89N8LRzCH8.roa
Signing time: Thu 06 Mar 2025 03:00:41 +0000
ROA not before: Thu 06 Mar 2025 03:00:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.69.1.0/24 maxlen: 24
195.42.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Mar 2025 03:58:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:69:65:eb:9d:e9:fc:1e:65:de:ce:a9:a5:20:b4:48:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
Validity
Not Before: Mar 6 03:00:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4d8698ffd28255bc9b2f78f7bcf4df0b473087f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:9c:a3:7a:19:d8:5c:c8:51:de:0b:92:a1:
30:22:df:fc:44:5a:ed:17:05:6a:42:2f:8a:e5:69:
27:b2:0f:42:0c:9c:5e:2a:29:a9:3d:84:e0:95:00:
d5:b5:dd:03:fb:12:f4:6f:cf:02:b2:27:c7:b5:84:
17:b2:60:37:89:36:6a:f1:6f:ba:dd:52:c3:b3:28:
c6:53:e6:59:97:51:a0:f6:12:0a:9f:26:4c:37:f7:
fa:09:1d:e3:a3:5f:04:bb:e0:68:a8:78:42:1b:39:
be:c1:98:99:f5:cf:70:28:3f:f2:ee:6d:1c:e3:80:
b5:da:6c:a4:3b:f7:a2:3f:15:8c:45:b3:d0:fd:44:
3e:01:79:4a:74:bd:12:69:f3:10:d7:b9:2a:c0:35:
bd:05:3f:41:37:14:44:c3:dc:83:7a:b7:e3:f3:66:
b3:c1:51:99:28:89:d9:e5:5c:b7:ed:14:05:71:72:
d8:3f:30:e4:da:ba:31:0d:7c:9e:1c:39:4d:29:1a:
b3:89:ea:74:09:80:8b:38:5a:3e:67:44:1b:c7:a0:
03:13:c4:16:15:f9:eb:01:ba:a6:f3:e0:c7:df:81:
5c:af:7e:58:73:de:4b:d2:6d:7b:79:8e:85:df:43:
cf:91:a1:90:50:c8:87:91:51:74:b3:f0:27:8e:df:
c4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D8:69:8F:FD:28:25:5B:C9:B2:F7:8F:7B:CF:4D:F0:B4:73:08:7F
X509v3 Authority Key Identifier:
keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/xNhpj_0oJVvJsvePe89N8LRzCH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.1.0/24
195.42.240.0/24
Signature Algorithm: sha256WithRSAEncryption
46:fa:6b:e7:b5:a5:a9:bd:82:b1:33:9c:79:05:46:ad:1f:85:
4e:b5:4d:94:03:ef:f4:07:c4:b1:bc:60:e8:aa:15:d5:6b:b2:
8a:3b:db:a4:18:9e:2f:a1:6c:1b:c0:40:9b:53:e8:a3:0d:6f:
ff:7a:34:05:ea:07:03:81:08:d9:37:d7:74:96:09:af:6c:62:
fe:5d:3f:50:1e:ce:fd:82:01:1e:c7:33:fd:af:40:2e:20:a1:
2b:32:31:95:c6:ad:14:93:74:b3:e3:4d:09:6f:58:fd:62:94:
73:80:5d:ca:d8:94:16:7e:82:0d:da:52:cc:18:cf:2d:4e:7d:
36:8d:10:6e:9c:c3:f2:a0:a2:fe:ef:7b:3a:44:5e:55:5e:95:
3c:82:95:76:e9:9e:c4:d7:e4:91:8f:40:bd:9a:0e:07:99:ae:
83:fc:29:5e:1c:b6:1c:06:aa:b6:b1:b0:77:44:f9:35:e3:68:
43:ac:1b:b5:f6:a9:62:97:f2:ba:58:c1:bf:40:f4:93:0b:5e:
cb:de:18:2f:f1:dd:18:ac:60:57:d7:b0:09:93:8c:ce:ab:da:
74:96:ac:2e:03:10:59:16:6c:27:8b:57:b9:ce:ac:d8:0d:68:
00:17:d3:65:d6:5f:4b:87:16:b2:8f:a0:5c:29:2a:f8:67:ed:
58:55:91:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:35:47 2025 by rpki-client