Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/XU9Eu98-fDzyKoA3Up56o7mZR5U.roa
File: XU9Eu98-fDzyKoA3Up56o7mZR5U.roa (raw, json)
Hash identifier: AyNmvEtTSOIw4nKPKy7enei3HUBfH2KDP8ps/8l0KTw=
Subject key identifier: 5D:4F:44:BB:DF:3E:7C:3C:F2:2A:80:37:52:9E:7A:A3:B9:99:47:95
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019422200A46EB08EB42434BED1045E49D29
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/XU9Eu98-fDzyKoA3Up56o7mZR5U.roa
Signing time: Wed 01 Jan 2025 13:48:32 +0000
ROA not before: Wed 01 Jan 2025 13:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400536
IP address blocks: 185.24.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Mar 2025 11:05:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0a:46:eb:08:eb:42:43:4b:ed:10:45:e4:9d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 1 13:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d4f44bbdf3e7c3cf22a8037529e7aa3b9994795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7b:5c:c9:30:de:db:fd:82:3d:a1:30:a4:18:
77:1e:88:3a:0b:8a:d5:67:37:5a:c1:7b:ed:ff:b0:
4d:d7:43:ab:78:79:04:6d:ed:c1:fd:78:0d:3a:95:
06:ee:af:1c:48:a3:01:81:49:bd:63:1e:2e:06:8e:
c3:45:4d:61:16:e4:d6:0f:8b:54:9f:a8:f5:1b:88:
83:33:71:19:dc:2a:50:d3:4a:a6:50:1e:6c:63:98:
b7:40:75:3f:a2:ca:ba:00:a2:2e:02:16:ae:fe:19:
6b:7b:a7:a8:8c:5b:ff:61:4c:a0:7c:8e:b3:8c:9f:
07:c8:14:a0:97:dc:a8:3b:be:03:2d:62:d7:0f:db:
3f:45:2a:24:2f:74:ea:d0:6e:15:4b:2b:9e:13:eb:
e8:81:ea:44:73:ab:53:6e:30:cb:ab:6c:49:32:af:
9a:09:54:e9:1f:aa:52:de:50:3d:40:fa:fb:47:da:
cd:03:65:58:5b:f5:c9:a7:7e:49:2c:a7:de:70:d6:
96:1f:b8:5c:c9:00:92:ea:ce:e3:8f:93:72:a2:4b:
da:d2:8b:46:38:0f:14:d1:16:4e:10:ba:08:8b:25:
bd:06:86:a0:77:d8:ef:64:30:02:9d:7c:e1:02:ce:
30:af:d7:47:e9:ef:43:02:94:66:ef:1f:b2:63:53:
e7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4F:44:BB:DF:3E:7C:3C:F2:2A:80:37:52:9E:7A:A3:B9:99:47:95
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/XU9Eu98-fDzyKoA3Up56o7mZR5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.148.0/24
Signature Algorithm: sha256WithRSAEncryption
22:e6:18:ea:fa:ac:a2:08:91:10:7e:12:cc:e9:cd:80:54:8c:
59:7b:84:4c:3c:ca:a0:c3:47:ed:21:b2:8f:99:88:99:7d:3b:
63:01:91:4a:e6:ed:84:7f:98:a4:70:f6:7b:71:42:eb:e9:00:
3e:f0:b6:e3:69:ae:cc:1d:c1:5c:a3:02:c5:15:bf:d0:43:77:
4e:7d:d4:b5:8c:d4:64:ae:af:96:28:1b:2f:cc:19:ce:b3:69:
70:46:eb:a5:63:55:15:9d:d8:6a:13:07:2b:10:50:78:e6:1b:
30:6a:78:46:87:40:c8:82:7e:5a:30:7d:51:16:46:6e:cf:cf:
b9:dd:85:37:c0:79:7b:cc:f7:c6:c2:f8:73:d0:18:9b:b2:bf:
f3:e9:a9:a2:41:99:0e:91:75:2e:76:04:4f:bd:42:b3:96:6a:
6d:0d:d8:60:5f:ef:a1:0c:7e:e4:25:af:99:b6:ad:ef:96:2c:
86:ad:c2:32:c7:7e:9a:21:8a:6d:6a:a4:a6:d2:b3:34:bb:86:
ad:10:c5:37:15:e9:76:f3:a0:d0:2e:d9:d4:cc:74:57:b2:b3:
26:a8:b4:c9:55:93:68:4b:b7:fb:43:aa:3b:41:02:7d:94:77:
49:fb:7c:0a:29:c3:20:df:e5:9d:51:6e:29:f2:3b:dc:82:bd:
06:58:18:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:40:04 2025 by rpki-client