Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Grrux5vmskxEPZUR53UdTM16His.roa
File: Grrux5vmskxEPZUR53UdTM16His.roa (raw, json)
Hash identifier: JPBJufPItXjFlwMydL6HfA9Srpk6/byd/AVxkpBk/y4=
Subject key identifier: 1A:BA:EE:C7:9B:E6:B2:4C:44:3D:95:11:E7:75:1D:4C:CD:7A:1E:2B
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0196F75219D9A3327EA7C2E134581F3067E0
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Grrux5vmskxEPZUR53UdTM16His.roa
Signing time: Thu 22 May 2025 09:27:54 +0000
ROA not before: Thu 22 May 2025 09:27:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 272869
IP address blocks: 185.244.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 May 2025 11:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:52:19:d9:a3:32:7e:a7:c2:e1:34:58:1f:30:67:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: May 22 09:27:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1abaeec79be6b24c443d9511e7751d4ccd7a1e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:1b:1b:62:32:7f:d4:c1:d1:05:e6:05:30:
ba:00:64:3e:76:c5:19:ad:89:06:b6:e4:b9:30:8f:
06:b0:94:fa:85:ad:d3:98:16:79:66:ba:3b:bd:b5:
dd:4c:0b:9e:d9:05:58:13:aa:06:aa:ed:0a:de:43:
5d:d1:33:1f:ab:24:e0:c9:c1:9e:06:be:5c:f0:69:
b0:3b:fa:2d:5d:06:26:e4:ba:07:8d:15:0f:8c:bc:
f8:ec:55:30:5e:4d:8d:f0:ee:e8:e5:79:e8:65:ed:
6a:93:ba:e8:e7:23:1d:54:cd:61:2b:ff:6b:f1:e2:
3d:3b:a6:ff:ae:ce:d2:4a:44:44:f6:22:c9:9c:8b:
2d:6f:d1:4d:3f:8b:7a:d5:8f:19:1a:17:1c:30:72:
a0:54:ab:68:4c:82:86:05:04:3a:cc:6a:5b:1d:2c:
25:05:1d:fa:75:ec:39:5a:95:ab:02:02:53:39:17:
20:90:92:61:43:90:c0:e4:3e:26:49:49:34:0c:6c:
94:10:0b:70:8d:b4:ac:d2:b1:a8:b1:17:94:b8:dd:
c9:89:33:21:0e:22:02:65:e0:c6:cc:64:74:84:37:
eb:be:0d:11:5a:9b:7c:7d:46:ca:e0:69:21:35:01:
97:99:78:e4:3e:d0:9a:87:c7:64:f1:52:d5:c6:fa:
f8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BA:EE:C7:9B:E6:B2:4C:44:3D:95:11:E7:75:1D:4C:CD:7A:1E:2B
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Grrux5vmskxEPZUR53UdTM16His.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.235.0/24
Signature Algorithm: sha256WithRSAEncryption
06:14:c4:22:34:96:98:23:7a:f6:ac:47:fb:82:36:fb:cf:ef:
1a:1c:f6:96:a2:f9:89:70:3f:68:5d:18:2f:79:06:fc:6d:84:
62:d7:d2:ed:27:e6:b0:0e:0a:1a:2a:d4:1e:5a:34:6a:81:32:
ed:df:23:ef:a6:9d:9c:aa:bf:2d:62:f0:dc:da:9e:0f:7c:84:
4c:04:5b:1f:67:cb:36:45:a8:e0:34:4f:40:ec:07:64:2a:d3:
f3:c1:58:eb:41:64:ac:0c:8c:29:1c:32:84:4d:ae:c6:cb:2f:
d2:82:a0:39:59:32:e3:99:be:0a:5b:d6:d7:2a:48:5d:cb:8e:
ec:55:d6:5f:d9:2a:f6:7c:cd:65:ef:8c:88:47:9b:2e:a7:2d:
8e:f1:7d:70:a8:b6:0c:91:18:05:59:90:59:07:1c:46:3b:aa:
31:21:d0:82:24:73:90:35:93:66:d5:5a:a4:3c:a4:50:95:54:
55:80:c0:c1:e2:19:b7:cd:b4:93:88:a8:cf:f6:a6:5b:02:23:
86:1d:bb:71:92:d6:c6:9d:51:e7:3e:b6:05:76:72:30:32:86:
00:49:06:57:0d:5a:9a:30:2f:c1:61:35:7f:f3:0c:f6:ff:0a:
24:26:01:4e:8a:b0:5d:c5:0d:da:9a:b5:a1:13:a6:3c:2e:10:
52:f8:72:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:19:31 2025 by rpki-client