Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/voyb2hg9nuM3TUiJtyNkXrFA0qs.roa
File: voyb2hg9nuM3TUiJtyNkXrFA0qs.roa (raw, json)
Hash identifier: sTVb0Da1YLQXtAaaH6IkVtD2bRbGXjdUVKOpz57o/5A=
Subject key identifier: BE:8C:9B:DA:18:3D:9E:E3:37:4D:48:89:B7:23:64:5E:B1:40:D2:AB
Certificate issuer: /CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Certificate serial: 019547A042F9128C7578E0105D670A09FA00
Authority key identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/voyb2hg9nuM3TUiJtyNkXrFA0qs.roa
Signing time: Thu 27 Feb 2025 13:37:20 +0000
ROA not before: Thu 27 Feb 2025 13:37:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35485
IP address blocks: 185.84.176.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 14:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:47:a0:42:f9:12:8c:75:78:e0:10:5d:67:0a:09:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Validity
Not Before: Feb 27 13:37:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be8c9bda183d9ee3374d4889b723645eb140d2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:03:f1:31:33:59:77:21:9a:ab:61:78:d5:37:
d0:f4:52:27:7c:f5:1c:59:cf:cb:f2:b3:e3:73:97:
7f:ed:80:99:4a:13:4a:5a:6e:09:df:33:ac:07:19:
76:00:94:af:83:2f:80:19:3f:ad:24:67:8c:9d:9f:
f6:73:63:1e:c7:16:c2:40:e4:60:24:01:17:99:9f:
db:85:72:b0:8c:1c:08:52:18:da:e0:85:ff:1b:18:
40:12:01:d4:8b:37:42:e9:55:b1:18:e2:ef:2c:dc:
98:31:6e:2f:b5:02:f7:8f:86:6e:b4:4c:1a:26:d5:
48:89:eb:14:56:4a:47:c7:66:0c:1f:96:d1:c1:01:
04:4c:9d:b2:fe:4f:ec:76:9a:d0:01:4c:38:f2:e8:
2e:8d:72:b5:99:12:50:38:ee:d5:eb:a8:0d:08:8c:
23:b5:2a:b2:1f:cf:b0:e1:b1:56:25:6c:93:cc:c1:
cc:79:47:ab:c7:46:3c:9d:27:ad:63:21:fa:a0:95:
3f:1e:d8:06:a6:2b:fc:6a:79:d3:ed:55:af:b6:3a:
47:c3:3a:08:93:55:3c:38:80:e1:fe:5e:e0:bc:cd:
d6:16:40:c8:50:83:37:6a:61:15:8f:b1:aa:1c:40:
84:c6:8d:1d:64:e5:a0:94:98:90:bb:63:4a:44:6b:
26:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8C:9B:DA:18:3D:9E:E3:37:4D:48:89:B7:23:64:5E:B1:40:D2:AB
X509v3 Authority Key Identifier:
keyid:BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/voyb2hg9nuM3TUiJtyNkXrFA0qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.176.0/22
Signature Algorithm: sha256WithRSAEncryption
31:5c:62:06:f5:2c:85:50:27:81:0f:05:53:c7:ba:64:7f:c9:
98:f0:86:58:df:bb:78:d3:ad:96:08:05:2b:84:e6:5e:4d:02:
19:ab:ca:d2:9c:cc:c6:b5:50:ca:b8:1b:51:28:12:ac:45:c0:
0a:2a:f3:06:7a:69:af:51:92:40:aa:a1:67:92:12:05:9a:af:
bd:aa:e6:9a:d1:8e:1d:8a:cf:38:ee:80:a1:ba:e7:30:c9:d7:
e6:9c:62:50:b3:a1:e6:56:db:d4:6f:ab:1f:14:10:4a:00:88:
d5:fa:3c:18:e4:6a:14:e3:13:24:b3:9c:31:3c:4b:c0:75:3f:
8a:e8:c1:eb:22:e4:b4:c3:48:13:a4:0b:49:b1:27:d1:b9:f8:
de:8d:0a:26:19:65:f5:9a:d9:9e:46:d1:d7:79:93:3f:b3:6c:
69:81:57:07:b3:73:66:10:48:d6:6e:89:c9:40:ae:c2:35:d1:
38:20:d2:9a:5f:32:b2:46:2e:07:6c:43:9d:76:bb:23:ef:8c:
7b:cd:82:3a:2d:a4:ad:b9:2c:77:57:95:08:89:97:95:d5:87:
72:f3:01:c2:7d:91:78:75:66:80:ad:2c:51:a5:96:81:57:87:
0e:ef:1f:12:3c:a5:72:fb:2a:69:30:72:64:0c:24:ad:66:52:
06:78:71:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 22:58:10 2025 by rpki-client