Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/3R4YXpnW2HU1qe24NLkcUlmI4qw.roa
File: 3R4YXpnW2HU1qe24NLkcUlmI4qw.roa (raw, json)
Hash identifier: 4ixae2NUUGkDOG6hVVe0ElRvNff7HWVGS7cThZ1FiCs=
Subject key identifier: DD:1E:18:5E:99:D6:D8:75:35:A9:ED:B8:34:B9:1C:52:59:88:E2:AC
Certificate issuer: /CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Certificate serial: 019513A4CDFFA737F695AFD5967649B5335C
Authority key identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/3R4YXpnW2HU1qe24NLkcUlmI4qw.roa
Signing time: Mon 17 Feb 2025 11:22:02 +0000
ROA not before: Mon 17 Feb 2025 11:22:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 185.84.176.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 27 Feb 2025 13:37:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:13:a4:cd:ff:a7:37:f6:95:af:d5:96:76:49:b5:33:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Validity
Not Before: Feb 17 11:22:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd1e185e99d6d87535a9edb834b91c525988e2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:76:a0:b9:fc:7a:2e:1c:61:77:e0:27:5c:
7f:b8:db:66:79:ae:d2:52:9b:ef:65:45:eb:69:d6:
d9:9e:2f:84:6d:c3:63:95:af:34:dc:31:e1:c7:a5:
72:c7:dc:7c:58:e5:83:a2:98:d9:80:96:cf:15:c9:
2e:7b:99:8e:15:c1:a9:ea:bf:46:57:c6:14:8e:ad:
d8:80:e6:07:a9:b8:fe:97:48:f9:d5:f7:15:21:30:
4e:de:a3:5d:ff:cf:bd:af:00:6e:88:33:73:35:b3:
7b:41:1f:2d:6f:db:7a:bf:a0:a3:64:76:a7:92:05:
bf:dd:d6:fb:36:9e:7f:53:a6:ac:00:93:e8:4e:78:
d5:52:28:26:28:86:2c:d5:93:9a:d5:18:cb:7b:9a:
7c:c1:5b:cd:d4:cd:fd:5c:7f:f9:9b:7a:53:59:4f:
dc:85:a2:66:3d:0f:e2:2c:4d:bc:51:75:16:7e:30:
36:bb:a8:9f:d3:b8:0f:7c:a3:ce:2b:bc:03:6d:55:
d8:91:2f:dc:0d:c6:9a:47:ff:ab:13:ba:7b:df:54:
48:f4:a8:64:d4:ba:d4:bf:3c:28:06:9c:58:96:8a:
dd:68:96:22:63:b4:6a:29:96:37:a0:03:88:70:64:
18:d4:2b:f8:68:67:e9:c5:13:96:58:4b:ed:25:9a:
34:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1E:18:5E:99:D6:D8:75:35:A9:ED:B8:34:B9:1C:52:59:88:E2:AC
X509v3 Authority Key Identifier:
keyid:BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/3R4YXpnW2HU1qe24NLkcUlmI4qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.176.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:82:27:18:67:f4:1e:7d:a1:bd:b4:fa:b4:cc:c1:19:26:44:
43:cd:fb:30:dd:9e:0c:a8:e9:76:71:2d:10:2b:fb:b9:24:15:
a7:96:85:43:07:3c:8e:93:97:c3:38:68:14:0d:08:68:b3:7c:
1b:36:48:81:38:eb:e9:ad:38:17:3f:5e:ce:c9:4a:3f:8a:a7:
fb:b5:60:a4:bb:62:63:e7:9e:a8:90:9d:28:c5:1a:d1:30:0f:
80:ed:bd:dd:14:c5:0a:90:ea:cf:74:a0:f3:68:e4:21:de:94:
39:6c:90:9f:19:9e:50:6d:a3:22:af:57:4e:62:97:74:bd:6b:
c2:ab:08:7e:c9:b0:f4:5b:3e:44:93:8c:df:4e:e0:b7:c5:1d:
36:46:d6:91:d7:f5:1d:5f:f7:61:f5:22:59:1f:58:4f:19:50:
22:51:67:f9:f2:8f:38:07:4f:e9:92:12:07:95:70:b2:3f:0f:
bb:98:b9:c5:71:1a:a4:0a:f5:2e:c1:44:a2:37:29:55:5a:a2:
ee:06:37:e5:eb:3f:63:06:ce:42:ba:f9:f1:47:c1:37:61:77:
15:ca:23:ee:12:0b:55:b9:6c:a9:84:b2:19:f1:c5:b7:25:0c:
8f:55:21:d7:ad:ef:aa:13:18:22:cd:fc:6a:dc:2b:b3:56:79:
16:fc:b8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 22:53:30 2025 by rpki-client