Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/PHoIIbhzgk96fZb5dWTtJha0i_4.roa
File: PHoIIbhzgk96fZb5dWTtJha0i_4.roa (raw, json)
Hash identifier: cE85ra2j6WC0BV1IjaVn+t+cjol2sWgO6EQKjQ5fy2k=
Subject key identifier: 3C:7A:08:21:B8:73:82:4F:7A:7D:96:F9:75:64:ED:26:16:B4:8B:FE
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 019423D6E6101C4F7CB9218F43DFBFA03DEB
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/PHoIIbhzgk96fZb5dWTtJha0i_4.roa
Signing time: Wed 01 Jan 2025 21:47:53 +0000
ROA not before: Wed 01 Jan 2025 21:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25211
IP address blocks: 85.11.161.0/24 maxlen: 24
85.11.163.0/24 maxlen: 24
85.11.180.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Mar 2025 11:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:e6:10:1c:4f:7c:b9:21:8f:43:df:bf:a0:3d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Jan 1 21:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c7a0821b873824f7a7d96f97564ed2616b48bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:aa:39:c6:6d:0a:ae:f9:ca:7e:50:04:73:
4d:24:98:10:88:86:9d:93:58:26:9f:c7:f6:12:42:
e0:c1:bf:44:f0:81:3c:1a:06:4a:9c:06:7c:99:d8:
91:00:6f:1b:42:5c:23:08:ac:53:17:99:e3:95:b0:
b9:65:cb:18:31:ae:c3:9a:79:47:81:29:a3:0c:39:
9d:29:8f:44:de:70:ee:20:d6:8f:8e:0a:4e:19:20:
cd:0f:75:be:0d:39:62:b4:be:1f:cb:6c:a9:9f:9c:
af:fc:46:ef:d7:ed:15:4e:03:95:e4:dc:82:43:f0:
e4:1f:be:f2:ef:82:4b:49:33:37:5d:62:d3:91:16:
90:da:51:24:3e:f3:4b:86:2f:0b:cd:60:b1:dd:d1:
db:f4:87:50:3f:29:54:7a:50:b8:84:55:f0:ff:8a:
8f:b0:13:69:0b:9a:22:e0:41:12:0b:b3:86:70:3f:
b8:94:66:eb:39:99:b6:70:fd:c5:c6:5f:1f:1b:22:
c0:20:e1:2c:06:b2:fa:3f:22:a3:19:aa:91:2d:47:
50:ea:07:46:0e:cb:c6:9f:98:3a:cb:9a:d1:54:5b:
e7:5d:36:6b:47:97:fd:5d:14:e8:29:24:47:62:75:
ad:00:d2:ac:41:64:00:06:b7:9c:58:0b:5d:47:07:
c8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7A:08:21:B8:73:82:4F:7A:7D:96:F9:75:64:ED:26:16:B4:8B:FE
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/PHoIIbhzgk96fZb5dWTtJha0i_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.161.0/24
85.11.163.0/24
85.11.180.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:45:c1:84:2d:a1:aa:63:74:eb:42:8e:83:1f:6b:d1:48:c6:
cc:6e:83:ed:78:90:73:51:66:38:9b:ee:a6:13:98:09:dc:b3:
3c:35:1d:29:9a:6e:bf:0e:7b:c2:ef:28:12:73:24:30:ea:fc:
c2:5d:5c:1d:d2:99:e5:04:83:2c:54:96:bf:bb:94:fe:3b:8b:
fc:f4:89:6a:f3:6e:e4:a2:54:11:69:2b:b2:4d:46:eb:ea:d0:
67:87:e6:eb:78:d8:c1:3b:64:25:e6:cc:55:6f:f5:9c:e2:da:
44:a5:c9:18:5c:5f:eb:49:7a:9c:61:7b:9d:ab:e8:b9:ce:f2:
8a:07:64:5f:9b:47:68:67:a6:5d:dd:d5:0a:1d:99:e7:66:d8:
2f:70:c6:f8:e4:18:f5:16:c1:79:0a:1b:b1:bd:fc:cb:fc:4e:
1a:10:49:dc:00:92:d9:0a:59:3d:e8:84:12:bc:c4:11:70:49:
cf:56:9f:ee:d2:21:62:c3:c5:a7:84:53:bd:13:20:f8:0d:33:
13:4a:a0:55:ab:83:9b:6c:b5:67:05:ad:53:d5:2f:14:29:f9:
10:17:e7:4a:d5:f6:59:0c:86:40:3b:3b:1d:e3:d4:6b:6f:9b:
90:5b:39:40:69:dc:53:8a:70:c7:61:3a:d9:cb:c5:70:63:4f:
81:47:55:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:58:04 2025 by rpki-client