Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/tOOQ0JpmMnuJ2y7t4Zof9Fv2LZQ.roa
File: tOOQ0JpmMnuJ2y7t4Zof9Fv2LZQ.roa (raw, json)
Hash identifier: U+xt+B17MD4Iax9VF7MOPZ/+hWTU7xcgetipW4UvI20=
Subject key identifier: B4:E3:90:D0:9A:66:32:7B:89:DB:2E:ED:E1:9A:1F:F4:5B:F6:2D:94
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0194F91014F1848E3B257C42A1A32BEFBC6C
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/tOOQ0JpmMnuJ2y7t4Zof9Fv2LZQ.roa
Signing time: Wed 12 Feb 2025 07:29:28 +0000
ROA not before: Wed 12 Feb 2025 07:29:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 185.227.7.0/24 maxlen: 24
188.191.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Feb 2025 09:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f9:10:14:f1:84:8e:3b:25:7c:42:a1:a3:2b:ef:bc:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Feb 12 07:29:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4e390d09a66327b89db2eede19a1ff45bf62d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:90:6f:5c:3f:62:06:25:25:cc:6c:45:1b:9c:
aa:91:57:62:0c:d5:d6:45:ba:82:b7:d4:9d:af:4e:
d9:c0:ff:68:99:dd:b2:d1:34:1d:6b:44:dc:11:07:
6c:49:67:1f:97:c8:4e:e3:bf:dd:f2:a9:ae:24:18:
1f:6c:ff:3b:9f:88:0e:55:c4:96:60:df:8d:aa:b8:
94:cf:58:93:dc:d9:10:26:b7:d5:b4:27:2e:f6:4c:
bb:ee:4f:a5:dc:99:fc:12:35:f5:76:87:24:c1:22:
91:19:18:86:a0:40:cf:20:fe:9e:42:70:61:38:d1:
a2:c1:b0:11:29:af:60:b0:cb:a7:6d:5c:74:26:cf:
d6:71:8d:9c:98:00:aa:fd:b7:ed:16:d2:b2:3f:00:
78:9d:ee:9a:dc:b8:0f:0f:49:8c:98:85:a4:e8:5b:
53:51:23:23:b4:80:89:09:62:36:54:20:bc:cf:ff:
3e:b8:8b:ff:33:dc:d9:49:c0:af:68:08:4b:cc:2f:
ca:f0:53:e6:b0:ae:05:8f:08:e7:9b:ed:20:4c:94:
ce:79:48:25:72:bb:3e:0e:8f:62:0e:b7:62:1f:8f:
5d:a8:bc:b0:9a:d3:16:00:6a:41:1a:ac:6f:6f:de:
66:e9:ec:de:11:ed:c4:70:7f:51:2f:29:42:54:29:
34:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E3:90:D0:9A:66:32:7B:89:DB:2E:ED:E1:9A:1F:F4:5B:F6:2D:94
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/tOOQ0JpmMnuJ2y7t4Zof9Fv2LZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.7.0/24
188.191.97.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:51:cd:e7:07:61:3e:9f:cf:4c:44:f2:6b:0b:27:25:95:e2:
f8:81:66:7e:22:db:54:48:7f:37:f5:d0:36:37:ff:fe:4e:c3:
76:13:14:67:32:b8:84:63:54:43:83:66:f2:6f:1e:ca:14:48:
f0:5f:53:43:df:52:71:5c:d8:bd:f6:d9:13:06:9c:13:5d:06:
7a:a7:17:5b:b4:c7:19:80:8b:89:00:d3:6f:50:6e:8f:a5:67:
47:e7:6d:21:d0:9d:47:6b:19:d5:97:a0:e9:81:16:c9:80:de:
3b:44:d4:fd:15:e1:fb:bb:7b:bc:66:b9:cc:85:42:a5:e0:a4:
c9:9f:6c:a4:34:14:32:f0:9b:32:ba:27:e9:25:29:dd:c2:c0:
95:6f:fe:00:27:e5:2e:af:13:93:8f:7a:1d:6f:1c:d2:58:97:
27:a6:59:9f:90:4f:0b:1f:eb:83:42:ad:a6:df:5c:65:24:fb:
3b:71:b2:d6:30:3e:4f:82:a4:7a:c0:93:64:ae:0c:85:d7:6e:
47:c9:05:1a:9a:90:eb:65:bc:63:72:0a:eb:14:a8:34:83:8a:
ce:8e:be:f3:5c:bb:4e:1a:7e:0a:55:ef:e8:35:35:78:ef:f5:
2b:13:ea:cb:ad:e2:56:d4:f0:69:7b:7e:ee:32:c8:43:c5:f6:
b2:c9:ee:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:22:00 2025 by rpki-client