Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/pUUlfUvQW3bpVWFJSWjtqGtipWk.roa
File: pUUlfUvQW3bpVWFJSWjtqGtipWk.roa (raw, json)
Hash identifier: P7OmQLjENv5CK2lPe0nA9Qd4uSq82B7QZTMLiELa9bY=
Subject key identifier: A5:45:25:7D:4B:D0:5B:76:E9:55:61:49:49:68:ED:A8:6B:62:A5:69
Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial: 019426D9A39318D7F28FD50EF0521EC808AE
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/pUUlfUvQW3bpVWFJSWjtqGtipWk.roa
Signing time: Thu 02 Jan 2025 11:49:44 +0000
ROA not before: Thu 02 Jan 2025 11:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41368
IP address blocks: 185.40.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Feb 2025 07:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a3:93:18:d7:f2:8f:d5:0e:f0:52:1e:c8:08:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Validity
Not Before: Jan 2 11:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a545257d4bd05b76e95561494968eda86b62a569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:24:b0:e4:4b:cf:b4:ca:f9:c3:1b:9a:d9:d8:
be:b5:d9:8c:be:58:dc:86:fa:15:7f:53:c2:ff:6f:
bf:69:4a:ee:75:89:a7:70:e0:35:37:61:e9:3d:0f:
27:39:0a:a4:e7:a6:ea:f6:22:6f:68:6a:56:9e:bc:
54:51:25:fe:44:94:92:dc:4f:96:0f:06:37:6c:e8:
81:47:e2:c7:6c:c7:34:37:d8:2d:f3:45:8b:91:be:
5b:05:7d:e1:f8:1e:c1:bf:70:97:41:69:97:0e:b5:
68:cf:da:c9:a0:cd:52:fa:41:2e:81:dc:3c:16:ac:
dc:ef:ee:68:5a:77:55:60:84:4a:bd:e3:68:73:5b:
2e:89:13:98:83:ae:f3:18:ee:86:83:11:3b:12:2f:
1b:11:e9:20:7a:c1:6f:f5:e7:af:9a:0a:60:7d:c1:
15:3c:ea:14:d0:bc:81:01:75:a5:3a:67:5b:91:27:
10:22:74:64:ca:a1:0a:1d:02:67:8b:84:c2:a3:e9:
a8:fa:f4:6d:80:e6:68:d8:6e:f1:86:d5:60:82:d0:
14:92:ea:91:7e:81:01:09:59:a9:e7:1f:a4:3e:2e:
19:d1:79:f9:bd:d5:d7:60:ef:ba:87:38:39:5d:57:
7b:22:0e:3f:d8:e7:cd:47:f4:f7:ed:36:c9:5a:de:
09:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:45:25:7D:4B:D0:5B:76:E9:55:61:49:49:68:ED:A8:6B:62:A5:69
X509v3 Authority Key Identifier:
keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/pUUlfUvQW3bpVWFJSWjtqGtipWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.37.0/24
Signature Algorithm: sha256WithRSAEncryption
33:db:09:c7:1c:d7:69:37:f6:55:c4:41:1e:0f:9c:99:7f:4a:
d2:87:90:bc:6c:c4:50:65:bb:2b:14:23:f1:c5:a1:84:cf:f4:
6e:47:66:63:99:ca:e9:a4:ab:6a:8c:3a:5b:b1:f2:9a:6d:95:
02:f0:3c:63:c5:54:bb:6c:4f:69:ca:e7:c7:b0:78:d1:ad:f5:
2f:66:e9:f5:91:a2:00:04:3b:74:dd:32:33:e6:e8:4f:65:94:
eb:0e:6c:5a:ce:c0:1b:e1:83:0b:82:39:32:ad:15:de:d3:be:
90:03:a5:7e:9a:a0:64:dd:c9:06:b9:51:54:9d:8a:84:9d:23:
a5:d2:d4:48:50:07:ff:6c:60:f0:3f:10:b3:a1:46:7f:7b:08:
8b:cb:da:8c:34:3e:df:06:2b:81:9d:d2:e5:ae:f6:58:24:5d:
e9:63:eb:6f:b2:61:27:1a:cf:7c:ab:18:55:a3:bb:f5:e0:93:
8c:25:43:76:0c:61:3f:56:2c:42:3c:c9:0e:f2:2c:df:75:30:
e3:3e:45:65:aa:a3:f0:2e:2a:d6:6a:d6:14:47:19:2b:6e:e6:
29:21:b3:d2:72:6c:85:97:31:8d:5e:12:b7:7c:df:4b:e3:c9:
33:2e:52:ba:e2:77:32:07:fd:b1:a0:c7:56:e5:9c:dc:4a:09:
3d:a5:1f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:08:20 2025 by rpki-client