Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/ie8EgkUGX5txbUJqwzIihZsqfuE.roa
File: ie8EgkUGX5txbUJqwzIihZsqfuE.roa (raw, json)
Hash identifier: HM+JsaUiKyBq1VxQwLaRGwKha4thhaIFeyfV2aqHA3o=
Subject key identifier: 89:EF:04:82:45:06:5F:9B:71:6D:42:6A:C3:32:22:85:9B:2A:7E:E1
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019402F243DBC6C98FB705CD6E53615CF26F
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/ie8EgkUGX5txbUJqwzIihZsqfuE.roa
Signing time: Thu 26 Dec 2024 12:30:19 +0000
ROA not before: Thu 26 Dec 2024 12:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44673
IP address blocks: 185.29.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:02:f2:43:db:c6:c9:8f:b7:05:cd:6e:53:61:5c:f2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Dec 26 12:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89ef048245065f9b716d426ac33222859b2a7ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1a:fd:fe:81:82:a6:72:04:a4:f3:f7:69:09:
2a:07:46:4b:d9:63:d4:36:86:c8:d6:42:f8:4c:e1:
98:27:f2:32:eb:36:a4:c7:95:3a:48:ee:ca:bf:ef:
65:97:2f:4c:35:28:8e:e7:08:8d:00:96:7b:c3:5d:
98:d7:80:e7:56:38:cd:55:22:59:2d:a0:86:c2:af:
27:1c:54:66:4d:39:04:d0:15:96:9a:7c:b1:a4:fb:
d7:fc:1e:70:7d:e8:18:d4:c0:7c:fd:7e:60:9f:92:
01:61:34:16:2f:83:ca:bd:0c:d1:2c:81:fe:85:ff:
9f:cd:85:d0:d9:6c:94:31:a6:dd:16:7a:5d:5e:56:
7e:1c:a8:c9:b5:f1:0a:32:ff:13:d4:17:94:ef:3f:
25:ac:ad:d1:7c:6d:06:25:a3:c2:ef:8d:6b:66:05:
82:14:a0:cb:e9:41:49:d6:c4:3e:33:5c:1b:19:4b:
60:a6:5f:f8:d8:f9:1f:14:8a:16:6a:ac:c8:2c:b5:
33:5b:47:35:e6:44:69:12:9c:d5:52:2a:ce:80:a0:
6a:f6:f0:0e:d4:d2:83:fd:7f:80:56:9e:03:75:32:
b4:0a:72:33:88:10:a3:63:c4:af:49:ef:22:90:6f:
78:8c:81:5b:65:49:4b:1f:12:58:00:68:3d:fe:02:
f8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EF:04:82:45:06:5F:9B:71:6D:42:6A:C3:32:22:85:9B:2A:7E:E1
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/ie8EgkUGX5txbUJqwzIihZsqfuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.255.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:42:7d:2d:ec:55:f5:c3:d9:33:a1:68:82:89:a5:79:f8:4a:
56:89:68:df:16:15:29:04:f1:38:2f:77:bb:67:8c:69:09:99:
f6:d4:8f:70:9d:34:86:41:4d:e3:4c:75:be:a7:e1:08:8a:07:
24:9c:a4:30:d7:96:1e:0b:75:84:3c:af:fa:aa:7c:84:00:2c:
82:78:52:34:bb:71:3e:59:36:eb:6e:fd:26:9c:47:7e:cd:7b:
f9:c1:9a:25:f4:47:12:59:d2:30:3d:ff:82:3c:98:4d:7e:85:
5f:a1:fd:cc:3c:b1:2b:93:ff:e3:b4:c2:1f:b8:e8:f0:16:46:
51:c0:69:ed:ff:8d:06:97:57:32:a0:b5:b3:83:75:1c:2c:87:
36:0c:85:2b:52:77:03:ec:42:49:d9:81:a7:36:c1:ce:cf:70:
e7:69:53:73:29:0b:31:bf:aa:69:50:8b:e1:75:04:d9:96:f0:
a7:54:3c:e5:67:2b:77:a0:fe:04:be:e7:6b:d0:c5:dc:6c:4f:
02:16:9b:2c:a4:ce:fa:b7:c5:82:dd:43:fc:d7:b4:59:38:99:
c7:00:f8:ec:30:29:fc:cb:9a:49:9f:4d:73:c1:1e:f4:46:16:
bc:e1:6a:88:af:85:51:81:f2:21:2f:bb:8b:b1:df:69:db:3d:
9b:19:35:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:24:02 2025 by rpki-client