Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pLqzyXghJne9B38kDLAX2CXrgQQ.roa
File: pLqzyXghJne9B38kDLAX2CXrgQQ.roa (raw, json)
Hash identifier: 8NL0upf2y3bv60KBVEfNqa9Z24mfn6vEaCwPfbhbM08=
Subject key identifier: A4:BA:B3:C9:78:21:26:77:BD:07:7F:24:0C:B0:17:D8:25:EB:81:04
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01954BCEB796F0373AC5A63E28B4F59A14FE
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pLqzyXghJne9B38kDLAX2CXrgQQ.roa
Signing time: Fri 28 Feb 2025 09:06:33 +0000
ROA not before: Fri 28 Feb 2025 09:06:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215925
IP address blocks: 194.85.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Mar 2025 11:20:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4b:ce:b7:96:f0:37:3a:c5:a6:3e:28:b4:f5:9a:14:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 28 09:06:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4bab3c978212677bd077f240cb017d825eb8104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:59:82:2e:96:91:9d:ea:2c:55:4e:13:cc:81:
0c:ca:2c:30:68:9a:d7:a2:ef:55:f5:ee:75:2f:64:
08:b2:f3:b6:bb:e5:1a:66:6a:cb:84:00:04:51:3e:
a6:62:9e:79:b3:31:fc:0c:50:2e:e6:43:48:2c:74:
1f:5d:be:a7:b9:87:55:06:0b:dc:fe:42:2f:5a:5e:
07:90:a6:b3:ee:b5:dd:cd:2c:1a:1d:18:67:ca:94:
5a:5c:7e:14:69:98:f1:1f:2e:84:40:57:0e:d6:ca:
6c:50:8a:c9:5e:b4:36:83:34:ff:01:53:c2:71:20:
99:de:c2:93:d6:cf:17:8f:01:82:c4:7b:03:44:dd:
00:da:9c:21:ea:8d:40:25:c9:4a:51:2e:66:41:54:
84:f6:1c:47:4d:b5:84:3d:9d:17:75:b2:f6:bc:56:
25:5e:bc:19:37:b2:69:c8:b1:f7:d9:0a:55:50:8f:
41:6f:92:26:eb:38:a3:b5:29:2a:16:42:aa:63:56:
cb:91:0c:5d:bf:26:f5:b5:18:21:f3:5a:b8:00:6e:
ff:3e:3e:6e:74:9c:a5:b3:53:67:b9:ec:64:f0:2f:
6d:dd:b8:3a:bf:b7:c2:cf:e0:48:2b:0f:b2:59:5c:
ed:71:56:df:d4:00:c9:8b:0d:61:d8:f9:eb:da:64:
58:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BA:B3:C9:78:21:26:77:BD:07:7F:24:0C:B0:17:D8:25:EB:81:04
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pLqzyXghJne9B38kDLAX2CXrgQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.85.251.0/24
Signature Algorithm: sha256WithRSAEncryption
76:61:ce:4d:21:4e:82:62:2e:e1:5f:c2:cf:c1:96:c4:9a:b7:
85:d7:b0:09:70:22:e2:4c:86:05:72:10:7e:c9:1c:9b:56:df:
6d:bb:87:ff:8d:e4:2e:39:ed:ff:62:5d:1e:53:9d:8c:99:1b:
51:77:62:40:b7:5f:a5:4e:36:6f:d4:ba:5c:e9:65:dc:6e:a5:
e4:b5:a4:d8:cf:3f:46:61:5d:a5:ab:94:30:d4:3f:83:68:49:
fd:46:eb:4a:ec:0e:d2:6b:d7:2b:74:e6:74:8b:69:b1:eb:fc:
9b:1b:ea:36:ad:e9:7e:df:e7:ba:4c:89:10:d2:e5:d3:04:e3:
da:e0:ee:34:44:f5:f8:3c:6e:c1:09:db:15:75:b4:04:cd:35:
cb:4e:f4:e1:26:fe:96:8c:8c:3c:a2:65:d8:72:c5:f2:55:84:
91:dc:95:31:88:86:45:a2:d0:85:9a:60:15:e4:1b:39:37:c3:
48:14:e2:72:c1:db:47:ff:29:63:30:f3:7f:f7:f0:8b:68:07:
c7:af:60:44:db:74:eb:08:a2:63:ec:20:83:26:e6:09:5f:64:
00:3f:a4:b2:a6:35:f2:2a:a2:84:de:72:66:ad:41:9a:41:9c:
0b:e5:cb:40:ca:cd:78:c4:d1:15:5a:44:04:18:39:45:52:f3:
46:b2:a7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:04:18 2025 by rpki-client