Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/mU4luHY93OVJLQvznw0Gy7ceV_4.roa
File: mU4luHY93OVJLQvznw0Gy7ceV_4.roa (raw, json)
Hash identifier: 35pFkhImaFBzex9WzHzAMGtL+XaMNifXM+s8NQy24TM=
Subject key identifier: 99:4E:25:B8:76:3D:DC:E5:49:2D:0B:F3:9F:0D:06:CB:B7:1E:57:FE
Certificate issuer: /CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Certificate serial: 019547A042708B076846E7C72F79DB4E10F6
Authority key identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/mU4luHY93OVJLQvznw0Gy7ceV_4.roa
Signing time: Thu 27 Feb 2025 13:37:19 +0000
ROA not before: Thu 27 Feb 2025 13:37:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 185.84.176.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 14:45:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:47:a0:42:70:8b:07:68:46:e7:c7:2f:79:db:4e:10:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Validity
Not Before: Feb 27 13:37:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=994e25b8763ddce5492d0bf39f0d06cbb71e57fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:61:a2:95:1a:53:74:f8:82:04:e7:b4:a4:
98:b1:08:e1:9c:fe:3d:9d:53:bd:7c:79:1d:2b:98:
9b:a3:a2:ee:81:09:e9:df:27:51:c8:2b:b2:eb:03:
ca:b5:8f:d6:2c:23:99:2b:73:68:39:23:ba:d9:83:
ad:b1:9c:97:d1:45:13:c7:aa:a9:89:96:5e:a6:ae:
04:a8:71:a7:e2:51:f1:cf:c2:ef:71:0c:be:9c:8c:
ea:c2:62:ad:5f:9b:39:37:e1:f1:14:60:71:6b:d9:
42:ba:d0:ab:01:35:fc:f0:90:22:15:97:95:5a:aa:
d2:28:a8:72:94:b7:d4:22:09:03:cb:dc:7e:a0:03:
c9:bc:cb:a9:47:be:c2:fa:59:39:6b:91:83:04:cb:
dc:3c:c4:1e:81:2e:f1:5b:28:42:68:5a:9c:af:cd:
c0:c9:72:0b:a6:c4:f2:f7:85:76:8b:77:4f:37:6d:
5c:08:93:04:e4:51:1b:21:74:0f:f0:fb:76:a5:eb:
d5:7b:0f:3e:b5:d0:ef:98:2a:26:6e:9c:03:de:44:
9d:9c:0f:0a:00:02:1d:50:64:3b:77:37:33:5d:75:
54:70:12:23:3c:67:ec:03:2c:2d:7c:96:8b:24:e3:
47:c6:a2:66:9b:ac:9c:56:b5:6b:96:75:85:1f:b0:
45:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4E:25:B8:76:3D:DC:E5:49:2D:0B:F3:9F:0D:06:CB:B7:1E:57:FE
X509v3 Authority Key Identifier:
keyid:BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/mU4luHY93OVJLQvznw0Gy7ceV_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.176.0/22
Signature Algorithm: sha256WithRSAEncryption
18:72:9f:e0:4d:a2:88:22:f3:0c:74:2d:11:80:fb:10:4d:ab:
fa:d2:db:37:d4:d0:5f:75:eb:5e:3c:41:9d:6d:cf:67:72:11:
de:b3:33:45:2d:7a:57:3c:17:36:d0:ff:e3:fa:ad:33:b5:41:
e4:f7:54:e7:32:9a:44:07:58:4e:51:74:b2:25:80:6a:de:ff:
5a:46:9d:7a:85:e4:ee:2d:b1:e0:29:28:30:34:a7:7b:95:5e:
2e:99:51:93:6b:a5:27:25:94:7e:f9:3b:17:ab:b0:b6:3f:27:
82:0b:6b:74:96:bd:89:f9:ff:b0:d4:24:ce:2b:34:2e:d8:3c:
fd:18:0c:1c:b6:ce:6d:42:e2:c8:fd:f8:04:28:ab:4f:60:c2:
70:be:46:0b:99:79:89:66:eb:0f:2b:72:60:06:fe:e4:52:75:
18:10:60:f7:2d:a3:09:79:44:53:ca:7a:75:61:78:dc:32:70:
5b:97:a4:f5:ab:dd:40:a1:ca:bb:83:ee:97:ee:7e:3c:fc:67:
ec:05:34:ee:31:65:61:10:ef:19:9b:e5:83:5c:af:d4:b3:bd:
5b:b7:b2:2b:df:10:74:95:9e:99:6f:f6:10:da:87:6c:e4:fb:
a9:db:99:61:ca:ba:b4:bb:79:1b:18:5c:91:6c:8a:71:23:f0:
35:da:63:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 22:51:08 2025 by rpki-client