Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/Tvb4ADjKL1iMuB1TTJ73E25Hqo4.roa
File: Tvb4ADjKL1iMuB1TTJ73E25Hqo4.roa (raw, json)
Hash identifier: ETxXHWE83uMCUNdC2cD0JO7JTZK5oT8LM12Gxz6JTJw=
Subject key identifier: 4E:F6:F8:00:38:CA:2F:58:8C:B8:1D:53:4C:9E:F7:13:6E:47:AA:8E
Certificate issuer: /CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
Certificate serial: 0196D9836A039335F494464A423E313826BC
Authority key identifier: FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/Tvb4ADjKL1iMuB1TTJ73E25Hqo4.roa
Signing time: Fri 16 May 2025 14:33:10 +0000
ROA not before: Fri 16 May 2025 14:33:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211659
IP address blocks: 185.147.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 May 2025 17:43:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d9:83:6a:03:93:35:f4:94:46:4a:42:3e:31:38:26:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
Validity
Not Before: May 16 14:33:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ef6f80038ca2f588cb81d534c9ef7136e47aa8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f5:65:cd:0c:48:1f:97:1f:f6:8d:f9:da:f2:
ae:2d:01:6e:5d:e8:41:c4:68:af:10:cb:00:71:c4:
c7:aa:6d:fe:f5:3d:64:de:ac:0a:7a:ab:17:5d:e0:
7f:2e:cb:fc:5f:2b:88:b1:ec:56:6d:5f:c8:b2:0c:
ea:7f:c7:50:d0:66:dd:4d:fb:fa:bd:c0:b8:61:a8:
9c:06:34:e3:0f:95:d4:55:67:c3:19:68:d7:13:98:
23:30:4b:36:e7:40:7e:e2:d7:14:1e:6a:ea:f4:a4:
87:7f:a5:bf:69:79:a3:a0:e4:20:e7:21:eb:61:9e:
8a:9c:43:54:6c:a7:6b:50:c7:f3:39:2f:8e:30:57:
34:66:14:52:d9:f0:ee:c3:ec:1a:5f:98:4e:77:c8:
f8:c9:8f:e6:ef:84:da:1c:e1:16:b2:fd:a7:d0:98:
e3:d9:e0:c0:e9:c1:2f:bd:bb:d5:b3:6a:d4:9f:a7:
ea:26:41:f9:e5:2b:47:62:f7:69:2c:d1:9b:68:a7:
2a:38:9d:1f:a7:ca:1a:c5:1e:99:55:7a:1e:85:45:
ec:61:28:ae:94:aa:77:08:83:60:45:89:08:01:7e:
9f:6e:9f:24:ce:be:b3:05:1d:8c:a4:a4:b3:77:ee:
e8:8f:f9:f2:dc:1d:88:5a:96:b4:17:7d:a6:f6:ee:
7e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F6:F8:00:38:CA:2F:58:8C:B8:1D:53:4C:9E:F7:13:6E:47:AA:8E
X509v3 Authority Key Identifier:
keyid:FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/Tvb4ADjKL1iMuB1TTJ73E25Hqo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.124.0/24
Signature Algorithm: sha256WithRSAEncryption
58:3c:7f:e8:69:98:8d:63:45:1d:16:21:f4:98:12:99:75:7f:
24:54:3a:99:6f:42:f6:19:60:61:0c:b8:32:c5:d7:56:48:7f:
3a:d7:c6:55:72:ac:bf:aa:e1:13:68:2a:2b:b9:75:c3:c7:1d:
c8:47:8a:3f:0f:34:1c:32:a8:55:6f:04:23:fc:c8:6d:62:21:
f7:ed:2e:60:18:9d:f0:5d:f0:9c:d9:59:3e:88:a5:56:f6:d0:
a2:e1:18:43:cb:2e:e4:73:25:9c:11:03:d2:89:87:4b:47:78:
25:19:f3:7b:19:70:1e:c5:73:9d:29:81:20:3f:92:31:b4:1f:
47:3b:11:6e:f6:99:44:a2:95:99:99:39:31:48:20:39:01:1c:
ea:fc:80:fc:77:da:93:c6:08:40:42:cb:fc:0d:d5:9e:b2:74:
a4:b7:75:d3:22:39:ae:ee:10:47:1b:31:10:19:fb:0b:7b:c5:
f0:96:77:1d:1e:0e:d6:95:c0:5b:98:a7:c2:ff:9e:b5:36:ab:
c9:96:9a:fb:85:a5:2e:b8:0c:7f:15:98:4a:05:55:bc:c5:64:
6a:b4:03:ba:0e:cf:63:7b:fa:a6:e8:43:e0:ba:39:a2:33:d2:
ab:e9:58:80:b8:b9:0f:63:d1:0d:60:bf:ab:c9:8a:ef:f5:62:
df:4c:9e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:41:18 2025 by rpki-client