Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/4F-qIQU6J7qjERy1oGQD6D1Af7w.roa
File: 4F-qIQU6J7qjERy1oGQD6D1Af7w.roa (raw, json)
Hash identifier: HudXuxrarvSRb7wkKgm0xrHOlWrkjsR2AhX4fbMBkWw=
Subject key identifier: E0:5F:AA:21:05:3A:27:BA:A3:11:1C:B5:A0:64:03:E8:3D:40:7F:BC
Certificate issuer: /CN=cb645bc0fdb8626bce2c0425c4087b54e150d386
Certificate serial: 01942747EDB82A4668061D79C11213B8A8A9
Authority key identifier: CB:64:5B:C0:FD:B8:62:6B:CE:2C:04:25:C4:08:7B:54:E1:50:D3:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2RbwP24YmvOLAQlxAh7VOFQ04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/4F-qIQU6J7qjERy1oGQD6D1Af7w.roa
Signing time: Thu 02 Jan 2025 13:50:12 +0000
ROA not before: Thu 02 Jan 2025 13:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210924
IP address blocks: 185.210.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Mar 2025 23:35:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ed:b8:2a:46:68:06:1d:79:c1:12:13:b8:a8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb645bc0fdb8626bce2c0425c4087b54e150d386
Validity
Not Before: Jan 2 13:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e05faa21053a27baa3111cb5a06403e83d407fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:84:ee:09:fb:cc:8b:70:33:9a:ed:00:70:c6:
92:1f:5a:09:cd:da:83:a1:78:b8:54:01:c4:81:d6:
82:0c:31:60:8c:38:45:63:c3:81:9b:e3:05:3c:ef:
25:81:09:c0:1f:0b:f9:32:cd:42:d3:db:cb:f7:47:
a1:34:84:6d:5f:b0:d1:6f:7c:ec:b0:d6:58:87:61:
b1:96:ce:88:5e:76:85:c6:c5:65:ad:cf:50:c9:e8:
55:aa:06:ed:cf:9e:20:0d:80:66:63:9d:dd:07:1c:
ba:72:1f:aa:18:e5:c0:11:3b:fc:1d:92:de:40:a9:
4d:53:fb:1f:28:d7:a0:e6:22:53:74:22:44:a0:c7:
ce:d9:63:f9:d4:9f:e8:3d:ae:56:ed:17:8f:b4:4e:
6f:04:14:5a:ca:e9:63:2d:80:3d:9c:24:f6:e6:f7:
cc:c0:af:99:af:1f:15:fb:d1:2e:c7:97:69:b8:c4:
ab:07:b0:85:d7:e7:b8:8f:6a:b9:32:aa:c3:57:99:
8e:4f:68:ab:0a:ad:02:5e:a9:8e:a2:16:47:6d:62:
5e:00:a4:98:cf:f6:8d:4e:4a:67:8f:39:51:97:6b:
f1:b6:1f:a2:a7:35:93:ad:06:ae:44:44:2f:ce:32:
c5:09:eb:36:01:81:fc:06:eb:92:59:99:1b:58:c1:
03:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5F:AA:21:05:3A:27:BA:A3:11:1C:B5:A0:64:03:E8:3D:40:7F:BC
X509v3 Authority Key Identifier:
keyid:CB:64:5B:C0:FD:B8:62:6B:CE:2C:04:25:C4:08:7B:54:E1:50:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2RbwP24YmvOLAQlxAh7VOFQ04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/4F-qIQU6J7qjERy1oGQD6D1Af7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/y2RbwP24YmvOLAQlxAh7VOFQ04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.157.0/24
Signature Algorithm: sha256WithRSAEncryption
75:12:de:fb:82:e5:63:9c:24:97:37:93:10:c4:88:67:70:f1:
18:8c:c1:5d:ba:ed:8f:3f:84:93:eb:f8:0f:32:f0:fc:43:00:
fb:d3:b2:13:78:f3:b6:dd:82:e7:03:a4:35:8e:51:02:8e:a8:
43:f7:a5:28:2b:e5:8a:4e:5f:95:0c:15:55:96:48:06:ce:84:
37:2d:37:f3:b9:9e:16:de:17:05:38:b1:74:db:95:73:73:97:
f0:64:ba:ef:f4:c3:68:89:29:a6:4f:29:92:9a:77:e1:2d:40:
74:84:a3:a7:3c:82:a9:95:42:7f:d4:3f:8d:9c:86:10:4d:74:
45:ca:52:40:1b:c1:6c:f3:be:65:ec:48:bc:42:9a:e7:42:94:
bc:bb:b4:07:b4:c9:28:f1:9d:30:30:44:9d:0a:96:35:04:02:
59:d5:8d:e3:c6:a0:71:45:26:b7:e7:d1:4a:54:cc:3f:16:4f:
ac:88:25:56:17:0b:c5:93:b2:dd:08:4f:aa:f9:90:e9:2b:5d:
49:d4:a8:67:24:5b:dd:b8:8d:ce:0b:67:ca:3e:30:b6:fb:84:
9f:d8:5d:10:70:c5:db:c0:75:4c:50:5b:bc:d1:ff:0b:4b:66:
e4:54:42:34:03:71:2c:97:57:a6:ad:3e:14:e1:5e:00:1d:d9:
ba:3e:de:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:24:43 2025 by rpki-client