Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/xYAjaUX4uCNzXlHnBrEe3pTnwq8.roa
File: xYAjaUX4uCNzXlHnBrEe3pTnwq8.roa (raw, json)
Hash identifier: ZRrU0BuCfZiZQE1ZgdynzSg2G7rxR/CwnRvJV/ulWwY=
Subject key identifier: C5:80:23:69:45:F8:B8:23:73:5E:51:E7:06:B1:1E:DE:94:E7:C2:AF
Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial: 019422203905252CC696643F88FCDFA48634
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/xYAjaUX4uCNzXlHnBrEe3pTnwq8.roa
Signing time: Wed 01 Jan 2025 13:48:44 +0000
ROA not before: Wed 01 Jan 2025 13:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203248
IP address blocks: 185.174.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Feb 2025 08:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:39:05:25:2c:c6:96:64:3f:88:fc:df:a4:86:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Validity
Not Before: Jan 1 13:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c580236945f8b823735e51e706b11ede94e7c2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6e:e0:7d:a9:6e:2a:84:5f:17:81:04:94:a1:
5f:92:7e:ac:95:fa:36:74:04:50:a2:34:35:b0:8b:
19:8d:da:18:98:9d:8c:f9:47:8d:c2:40:47:ad:6d:
f5:d1:ab:48:7b:37:eb:54:31:af:f8:99:f8:82:29:
4a:01:ba:53:4c:36:fd:50:ca:58:c1:82:78:41:c3:
e7:93:bd:d8:d6:b4:1e:be:8d:f4:09:27:41:9c:53:
27:f9:a6:09:5c:d9:f5:fa:18:e4:c7:30:09:10:d8:
6a:b7:95:3d:28:1a:23:f2:d0:37:92:1d:c2:8a:a6:
5d:9a:2b:ca:1b:94:e0:a5:f0:f0:5f:bd:0e:20:97:
7e:ae:34:1b:43:55:32:d2:5c:b0:c2:7a:af:83:83:
9e:cf:95:fa:72:98:61:40:e6:b4:81:88:33:51:3c:
06:39:1e:b0:b1:2f:b2:8b:4e:39:e4:6a:bb:8b:91:
62:68:99:bc:bb:ec:e2:be:ea:7f:6d:6a:35:1d:ad:
98:cd:82:4d:5d:16:00:cf:6f:11:94:aa:7c:df:f5:
37:36:be:61:e6:75:f2:99:86:90:0b:40:54:8a:dc:
0a:f5:c8:bd:81:4e:34:de:e1:f6:c5:31:85:d7:a9:
90:41:79:17:7b:c9:54:a7:73:5f:79:ae:ad:44:e6:
51:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:80:23:69:45:F8:B8:23:73:5E:51:E7:06:B1:1E:DE:94:E7:C2:AF
X509v3 Authority Key Identifier:
keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/xYAjaUX4uCNzXlHnBrEe3pTnwq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.69.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:fd:24:7a:6d:58:d5:39:24:bd:ce:bf:d2:78:90:b8:87:a3:
f0:d7:e6:38:f8:dd:41:51:dc:31:14:dc:d0:d5:ba:09:6f:f0:
5f:72:ca:b8:c6:bd:8d:fb:45:dc:18:c7:aa:5c:b4:d0:be:45:
c6:8d:d4:0a:a6:c7:85:75:21:80:b0:43:05:18:26:dd:35:f4:
03:5b:1b:8e:07:a7:b0:62:5e:09:66:39:af:62:78:4d:06:59:
bf:e1:ce:c3:ce:dd:9a:23:39:5b:e3:0e:c7:ec:5f:e8:e7:2f:
34:96:d8:c4:c5:30:70:dd:a7:21:ef:15:3e:f1:b1:11:f5:3c:
e5:b4:c0:29:c7:a1:d0:20:6b:10:14:7b:65:2b:4f:45:52:6a:
4e:c3:7d:a2:9d:70:0b:7e:82:27:64:6d:c9:7d:a9:6c:16:51:
1b:23:15:7a:56:f4:90:1d:74:3c:e4:62:5b:62:02:91:09:a1:
05:b7:a7:b3:ef:f9:e7:4f:78:20:18:3d:98:67:2d:ac:51:3c:
b5:19:fe:45:0f:d1:7f:af:92:fe:2e:b2:99:b3:0d:79:c3:7f:
8f:5c:63:ea:84:66:60:88:7f:58:d9:2d:51:6d:80:e6:1e:a3:
e7:07:e7:a3:83:d9:db:2e:3d:0f:73:a6:b2:a2:24:13:d5:3e:
b1:0b:01:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:35:51 2025 by rpki-client