Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/uOEjwoLr8xdMYaS_crH8VoirEb0.roa
File: uOEjwoLr8xdMYaS_crH8VoirEb0.roa (raw, json)
Hash identifier: NY6iFAL2C7enWlcwSwqqZGN7lJMqCxGf3U2PRg8Ruag=
Subject key identifier: B8:E1:23:C2:82:EB:F3:17:4C:61:A4:BF:72:B1:FC:56:88:AB:11:BD
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 0196B46AA7D734970FC4225EDEFAF752A6D1
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/uOEjwoLr8xdMYaS_crH8VoirEb0.roa
Signing time: Fri 09 May 2025 09:40:10 +0000
ROA not before: Fri 09 May 2025 09:40:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209604
IP address blocks: 185.23.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jun 2025 18:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:6a:a7:d7:34:97:0f:c4:22:5e:de:fa:f7:52:a6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: May 9 09:40:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8e123c282ebf3174c61a4bf72b1fc5688ab11bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5e:81:2f:3a:b1:ea:ad:2a:41:99:2c:ca:b6:
e1:7c:52:26:50:22:75:09:ea:e0:ec:94:53:1d:db:
c5:c6:7b:b6:71:49:23:4d:14:a4:96:db:e9:f9:9b:
f3:92:e1:99:54:5a:0d:76:5d:a0:9a:a9:a5:bb:be:
6b:4b:97:0f:63:bb:31:2d:96:36:2b:98:93:e2:df:
07:85:ea:de:d3:aa:76:7a:b2:82:9a:af:f5:6b:8f:
7c:ce:99:bc:6f:a2:20:37:2d:6e:bb:2e:cb:4d:7a:
6d:60:d3:70:03:ff:8c:4f:07:9c:b6:b0:8f:0d:8d:
f4:7a:a7:08:7b:90:e4:19:8e:d5:01:ba:ac:ea:a6:
8f:5c:42:4a:73:07:b8:61:c4:e8:73:8a:26:a3:8e:
56:ca:d2:b3:9e:56:33:6f:db:8f:fa:de:10:3b:27:
0c:23:e5:ec:fb:94:a0:6d:10:da:e6:e7:db:6b:39:
ef:5a:08:d9:e1:8b:1a:92:d8:3c:ea:1d:65:d3:3e:
cb:52:8c:dc:3d:ac:a6:92:65:e4:8a:e3:3e:eb:ae:
37:eb:b8:c4:a0:26:cc:2b:6c:85:0a:66:e0:a9:e7:
7b:15:b9:40:81:b4:b2:4b:a0:5e:1d:1d:c9:05:d5:
9a:16:14:dc:07:6f:ab:9b:23:e7:c1:be:2c:2d:2f:
05:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E1:23:C2:82:EB:F3:17:4C:61:A4:BF:72:B1:FC:56:88:AB:11:BD
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/uOEjwoLr8xdMYaS_crH8VoirEb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.239.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:32:aa:fc:32:9e:fe:78:5a:ec:ba:0d:61:24:58:df:6d:cd:
4c:e1:b9:97:ed:09:3e:0c:cd:4c:b6:64:87:fb:e9:07:5c:63:
e5:28:99:5f:5d:3f:95:7a:1d:99:57:97:9e:b0:61:4a:46:b3:
46:92:cc:88:97:56:e8:27:e0:92:50:38:75:8e:54:6b:1a:c7:
f3:0f:34:4d:e3:d0:3e:41:ce:68:ff:89:ae:28:c6:2b:0f:ff:
f7:59:5e:78:bd:14:ea:01:7f:00:e8:2c:4a:db:f2:0b:37:f0:
71:56:01:16:90:9c:9a:24:a6:f5:3c:af:70:2f:4f:78:c1:52:
b9:d4:94:39:9b:34:1e:4a:ec:64:f7:33:9d:b3:e9:14:2a:50:
f2:8c:9e:c2:e3:2c:91:d6:14:22:bc:1f:f8:78:bb:e8:1a:55:
4d:75:c2:db:10:d3:d7:b3:2e:6b:b1:33:02:69:86:d2:d1:b1:
f5:99:c8:8e:23:23:d3:7f:f0:00:4f:76:2f:57:f0:dd:10:6c:
c1:fa:db:5e:8f:c1:69:67:4b:49:2d:c0:89:2b:86:29:9a:de:
46:cf:29:c6:7c:fd:e8:81:e2:16:11:0e:e8:b9:00:49:96:f0:
4a:6d:95:7e:24:1b:9e:0f:10:81:29:e9:da:34:8c:96:3e:e0:
a9:89:d7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:24:19 2025 by rpki-client