Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/1-VaaCSlEvi2PsHhfDeQep_O4ME0.roa
File: 1-VaaCSlEvi2PsHhfDeQep_O4ME0.roa (raw, json)
Hash identifier: 2LQTb+HVdwpT0taNVxZt1GxwbIg8dIqdw60N0qmNfj4=
Subject key identifier: F9:56:9A:09:29:44:BE:2D:8F:B0:78:5F:0D:E4:1E:A7:F3:B8:30:4D
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 019499B420C72804DA7A57DFAE1CE88DCB7F
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/1-VaaCSlEvi2PsHhfDeQep_O4ME0.roa
Signing time: Fri 24 Jan 2025 19:05:06 +0000
ROA not before: Fri 24 Jan 2025 19:05:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 185.84.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Feb 2025 21:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:99:b4:20:c7:28:04:da:7a:57:df:ae:1c:e8:8d:cb:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Jan 24 19:05:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9569a092944be2d8fb0785f0de41ea7f3b8304d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bc:78:2d:a4:85:47:22:b0:e4:82:fc:05:af:
88:97:35:fc:ec:44:5f:6a:a1:d9:55:cb:4d:9c:09:
ca:0f:7a:a1:8d:32:d0:ec:3a:b3:2a:c8:1a:80:5b:
f2:4c:9d:5b:14:4e:ed:fa:23:bd:57:68:e2:65:ad:
0b:bd:0b:46:89:a7:84:36:80:e4:f1:9d:dd:f1:de:
d8:76:2f:32:d3:f2:c6:cf:22:24:6f:b8:ea:82:da:
9d:0b:e3:8d:b0:ef:47:a4:f1:79:bf:55:ad:88:01:
24:19:49:fa:d0:da:be:26:6e:15:76:5c:c4:a3:59:
43:1f:3e:8b:1e:d1:f8:fa:e4:43:06:1c:8f:75:80:
84:8a:35:a6:67:b0:c3:e6:38:f0:cf:61:1e:59:eb:
54:5f:00:53:75:9b:dc:dd:dc:e5:6d:cf:ef:be:a6:
06:3a:72:50:54:08:28:36:f0:5e:e0:52:1e:86:bb:
b1:41:ad:a6:56:6f:02:5f:48:fe:1b:44:7f:9d:3c:
b4:d1:a8:d9:f1:ec:18:9f:b0:82:12:56:34:a3:6d:
33:37:5b:29:cf:2f:a3:c2:66:9d:d4:a2:37:a1:96:
68:50:04:2c:d5:a8:25:33:f1:e8:56:be:b7:95:c9:
83:c1:3d:81:a3:00:ed:fc:bc:e2:56:67:8d:73:c5:
1e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:56:9A:09:29:44:BE:2D:8F:B0:78:5F:0D:E4:1E:A7:F3:B8:30:4D
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/1-VaaCSlEvi2PsHhfDeQep_O4ME0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.159.0/24
Signature Algorithm: sha256WithRSAEncryption
04:b4:16:b9:94:0d:07:6a:56:9e:ab:65:88:ef:12:42:ed:15:
6c:8f:c0:f1:b0:3d:04:c5:6f:2e:08:b4:d7:c9:01:97:4d:0c:
37:0c:da:a1:4b:2e:e1:33:3d:e6:33:6e:dc:6d:1b:df:41:34:
d0:ca:48:d0:72:75:cc:d3:4f:cd:f5:12:68:e0:58:11:4b:30:
dc:cc:1d:87:20:18:73:84:6e:9d:df:6b:f2:02:fd:74:27:43:
f8:97:ec:82:5e:3b:cd:47:f0:05:90:a8:7d:5f:c9:06:8b:d7:
ae:5e:59:a9:f3:9a:b3:79:2e:4e:ad:04:0c:1d:1b:70:e4:c7:
7b:86:fe:77:a0:37:da:a9:2e:24:24:a2:09:2d:62:66:b6:6f:
2f:f3:2e:f3:1b:0d:dd:86:38:05:07:c4:9d:c5:0b:be:f7:1a:
67:03:22:51:0b:b0:8e:53:f1:93:c9:68:03:c6:a2:c5:44:55:
73:6a:09:a0:de:a7:cc:19:6b:5f:60:9a:52:1c:e1:0c:7d:0f:
73:04:8a:61:14:87:06:42:bf:48:24:28:3f:c2:6b:3f:12:1b:
5b:db:fa:55:69:78:c4:bc:f3:d4:0c:ad:5e:0f:6e:77:d4:45:
57:9b:df:f4:33:7e:12:63:16:40:d8:73:3a:5c:65:64:ae:20:
be:99:7b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:51:01 2025 by rpki-client