Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/z-bPMr2_AQdRg1NenH-fOh1B_so.roa
File: z-bPMr2_AQdRg1NenH-fOh1B_so.roa (raw, json)
Hash identifier: nZHvsc/Y2B+A7JsjxiR7kjUGKDKTahSQ/F4Px6Sz49U=
Subject key identifier: CF:E6:CF:32:BD:BF:01:07:51:83:53:5E:9C:7F:9F:3A:1D:41:FE:CA
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019402F159C42BC49B5E387B27603E38DEAB
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/z-bPMr2_AQdRg1NenH-fOh1B_so.roa
Signing time: Thu 26 Dec 2024 12:29:19 +0000
ROA not before: Thu 26 Dec 2024 12:29:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198429
IP address blocks: 185.29.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:02:f1:59:c4:2b:c4:9b:5e:38:7b:27:60:3e:38:de:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Dec 26 12:29:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfe6cf32bdbf01075183535e9c7f9f3a1d41feca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c4:98:70:33:c7:05:62:68:a3:8e:21:ab:11:
f6:d1:25:ac:e1:c9:5b:54:6b:5e:b1:e8:61:c6:23:
97:0c:bf:54:fd:c0:04:26:de:64:e9:91:30:28:ea:
fa:af:f4:40:62:2c:9f:01:3e:01:f7:47:f5:0e:cb:
07:3b:16:a8:c1:ef:91:0e:5a:10:c1:0f:84:54:d1:
3d:d8:4c:72:ea:84:f8:d9:a7:1d:1c:1c:e2:b9:ed:
90:34:a0:64:88:34:6e:ba:a8:78:5d:23:55:41:e3:
c0:a1:c6:10:e2:d1:89:26:70:76:cd:2f:d9:b4:26:
31:2d:d2:68:01:8b:0e:64:88:aa:0d:dc:9a:49:de:
48:8a:19:17:d4:25:8b:25:2c:88:25:75:0d:dd:ab:
30:46:88:4e:da:8c:87:06:91:b2:a1:23:0a:ef:67:
e8:17:d2:c1:00:79:d6:30:d3:a7:01:d8:6c:85:a0:
f8:53:99:93:04:d4:50:ef:ae:5e:68:d9:bc:51:76:
c1:61:a3:ff:b8:c2:8f:67:d0:be:25:72:f4:92:59:
24:31:0f:c6:c6:d2:49:0b:f7:21:52:50:5b:8d:d0:
02:65:d3:59:da:83:49:fb:b3:82:ca:2c:13:14:c5:
5e:9b:1c:cc:65:db:17:55:cb:6a:3c:37:27:6e:4b:
9b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E6:CF:32:BD:BF:01:07:51:83:53:5E:9C:7F:9F:3A:1D:41:FE:CA
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/z-bPMr2_AQdRg1NenH-fOh1B_so.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.254.0/24
Signature Algorithm: sha256WithRSAEncryption
e4:39:5c:df:3d:f2:ab:c4:9c:c8:da:8a:35:1e:88:e7:ec:e3:
64:0a:89:90:bc:5c:66:8e:21:f5:47:6c:ac:2f:7e:b9:73:9c:
d2:4f:08:f4:ca:4e:b5:69:d4:01:c0:79:8c:47:85:e4:4b:43:
cd:07:37:16:3c:f7:6a:76:fa:9d:ea:0e:71:a7:30:eb:59:d9:
a8:76:68:ed:e3:e5:49:8f:ac:ab:b5:da:d3:97:7e:cd:a0:fe:
73:06:b5:e7:d4:4d:50:5a:af:4c:bf:a4:82:72:c8:52:92:0a:
ca:f3:43:06:91:0a:36:00:c2:36:8a:99:35:e2:c3:29:79:b1:
0a:59:1f:c3:38:e3:86:2b:32:4a:7f:db:95:61:98:05:72:9f:
a4:37:65:76:a4:fd:5e:5a:59:97:c8:e4:81:63:93:6a:09:6b:
b6:ee:6d:52:d8:38:14:3f:4b:c7:7b:ff:6e:b7:ba:25:eb:5e:
b2:6b:67:c6:bd:4a:b4:94:f4:18:9f:5d:6d:65:b9:a8:d9:32:
c3:75:7d:1d:ad:c9:a2:e9:c5:81:f0:b7:46:21:94:41:4f:6c:
b3:17:03:d1:3f:16:ec:fa:68:21:f6:a5:00:d3:c6:14:f1:2a:
66:a5:c4:a2:84:56:0d:d1:1d:37:e5:03:e0:31:f9:a8:54:c4:
7d:c2:8f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:14:09 2025 by rpki-client