Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/XmXmvYM5ELluqy02AW0rg5QOBHM.roa
File: XmXmvYM5ELluqy02AW0rg5QOBHM.roa (raw, json)
Hash identifier: /UI7KgYr+0q2zxjhSzP2IRD38srzT/jBzkTAAXIx92A=
Subject key identifier: 5E:65:E6:BD:83:39:10:B9:6E:AB:2D:36:01:6D:2B:83:94:0E:04:73
Certificate issuer: /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Certificate serial: 0194258E886AE8696542E859AF12E8F59524
Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/XmXmvYM5ELluqy02AW0rg5QOBHM.roa
Signing time: Thu 02 Jan 2025 05:48:05 +0000
ROA not before: Thu 02 Jan 2025 05:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47603
IP address blocks: 185.84.226.0/24 maxlen: 27
Validation: Failed, certificate revoked on Sat 04 Jan 2025 11:07:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:88:6a:e8:69:65:42:e8:59:af:12:e8:f5:95:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Validity
Not Before: Jan 2 05:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e65e6bd833910b96eab2d36016d2b83940e0473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:33:05:db:4f:d2:ce:1b:3c:a9:f2:63:28:c4:
35:cd:74:ac:2b:94:5f:55:46:47:43:84:45:8e:00:
d1:fd:bc:2a:3e:31:7b:82:4a:35:e9:49:74:66:fc:
91:78:89:d0:11:33:0f:3f:c6:9e:54:5c:cd:e9:f7:
9d:93:23:cd:fb:6e:98:1e:1b:87:ad:c7:33:9f:2c:
13:de:f8:c8:30:29:ef:42:fa:92:9a:ac:b2:be:29:
bc:30:5c:e8:1a:41:b1:0a:99:ad:71:f2:0f:35:93:
f7:c3:90:33:1c:6b:c5:e0:58:9f:a1:d8:75:c9:ab:
32:1c:1a:1d:73:3b:93:ab:e7:87:2c:5c:cd:18:2a:
aa:4f:7f:16:69:e6:99:5c:2b:14:96:b9:c4:5e:be:
f2:b3:f7:c8:d6:63:ed:de:14:2f:f7:d6:24:fe:5e:
e7:db:6c:a3:14:0d:4c:68:23:02:b5:75:89:e6:59:
ee:56:60:97:f5:04:4c:6c:7a:76:41:a3:eb:02:c6:
51:38:34:f7:24:24:5b:f2:7d:0e:5e:bd:d3:01:eb:
98:fb:bc:c7:95:62:79:bf:8d:4e:f1:44:ca:f5:d3:
10:a9:d1:a4:92:0b:77:60:2a:b4:d9:b1:ca:96:ae:
ac:46:b4:36:b9:6f:c7:b0:0e:99:aa:67:a9:82:16:
b6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:65:E6:BD:83:39:10:B9:6E:AB:2D:36:01:6D:2B:83:94:0E:04:73
X509v3 Authority Key Identifier:
keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/XmXmvYM5ELluqy02AW0rg5QOBHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.226.0/24
Signature Algorithm: sha256WithRSAEncryption
25:3b:be:54:07:f7:86:c5:55:05:03:4d:d8:35:9f:50:fe:9b:
cd:c6:a5:43:7c:a6:8c:d0:e4:51:68:34:35:0d:19:1e:3c:b7:
66:16:55:5b:14:c2:ce:0c:fa:aa:0c:ec:31:bd:72:a8:a8:14:
46:f7:42:77:ce:ce:33:23:73:6c:20:7c:ad:ce:1c:44:34:e5:
d2:7b:e8:83:57:6a:12:fc:e7:0e:77:82:2e:1c:5e:5b:5b:88:
b9:fc:9a:53:82:26:4a:04:e1:2e:a0:c9:26:3b:a5:a9:98:18:
77:d5:fd:63:02:53:80:1c:ea:53:37:b7:ed:13:d7:87:04:e0:
dc:c8:c9:c1:66:3d:4e:37:e8:f6:55:aa:7e:58:bf:38:77:5d:
4b:25:ff:34:18:3e:5e:f8:30:64:db:86:8a:81:e0:f8:57:bd:
65:9b:e1:26:99:a8:ce:9c:cd:2a:c2:4c:85:91:ec:f7:d7:84:
7c:68:f1:eb:87:41:2a:15:2c:13:0f:ae:8f:70:de:c4:4f:99:
4f:dd:b5:1f:5e:fa:ae:7c:5b:3a:36:b6:74:82:8f:f7:90:a7:
e5:e6:86:e7:1f:1e:fb:6a:29:f5:32:3b:2e:b0:9e:b9:ed:4a:
89:3a:fc:17:e7:12:3e:1e:da:7b:eb:8e:39:7c:00:11:61:53:
73:da:ce:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:43:45 2025 by rpki-client