Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/Mp7UPH5lLdY7B-f7m5A6kvFeEy8.roa
File: Mp7UPH5lLdY7B-f7m5A6kvFeEy8.roa (raw, json)
Hash identifier: Z+EaKJhBF9N821KY6AfWK4JR3xoM+hYWUQ4gzkBFD08=
Subject key identifier: 32:9E:D4:3C:7E:65:2D:D6:3B:07:E7:FB:9B:90:3A:92:F1:5E:13:2F
Certificate issuer: /CN=ff32d6463621b13f78e530d144feac023e1e4582
Certificate serial: 01953288369812B637A060A77BA784C0FE2A
Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/Mp7UPH5lLdY7B-f7m5A6kvFeEy8.roa
Signing time: Sun 23 Feb 2025 11:19:02 +0000
ROA not before: Sun 23 Feb 2025 11:19:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202391
IP address blocks: 185.84.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 16:19:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:32:88:36:98:12:b6:37:a0:60:a7:7b:a7:84:c0:fe:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582
Validity
Not Before: Feb 23 11:19:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=329ed43c7e652dd63b07e7fb9b903a92f15e132f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f6:35:ed:7f:89:5b:22:dc:fe:a3:1a:16:3a:
0e:41:6b:6b:0a:0e:80:07:1b:71:25:e7:ea:dc:54:
5e:ba:0c:e3:53:43:a6:76:3d:96:86:3d:10:56:22:
da:c0:03:f0:66:1e:28:d4:7c:1c:65:e2:e0:02:8f:
b4:b6:cb:3c:af:7d:ac:93:2f:6b:19:90:24:8e:4a:
1e:c9:03:1e:0b:2e:8d:77:6b:61:2a:fe:af:af:ab:
29:6d:d0:2d:5c:04:d3:54:b5:45:67:03:da:cf:6e:
a7:8a:a7:53:8e:39:19:3a:c9:0f:d1:f6:aa:60:a2:
7d:44:2a:5b:16:ae:c1:ff:ed:07:93:4f:ae:65:35:
39:88:cc:55:5f:8f:da:9a:9e:00:b6:da:03:e8:3c:
96:0a:5c:0b:72:b1:c0:e4:2d:7b:b5:91:df:5f:e4:
1d:0e:95:c1:1d:fe:6e:24:64:59:d0:f4:22:c1:f7:
c3:c2:98:99:07:67:f1:00:2c:ac:2e:e2:81:fc:33:
9a:8d:f5:b2:04:e2:49:1e:c6:25:66:37:d7:55:65:
c8:a6:3d:c5:69:c0:af:ce:df:45:b9:01:62:25:c8:
63:55:03:84:9c:76:89:72:5c:3f:c7:00:7a:26:49:
bc:d5:a0:75:ea:f1:a0:df:47:fd:bb:6c:9f:83:03:
e7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9E:D4:3C:7E:65:2D:D6:3B:07:E7:FB:9B:90:3A:92:F1:5E:13:2F
X509v3 Authority Key Identifier:
keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/Mp7UPH5lLdY7B-f7m5A6kvFeEy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.158.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:d1:07:1e:11:42:c9:52:4d:cb:81:34:e3:5f:43:b5:e6:d2:
1a:9d:f3:aa:9a:6e:3a:d0:cd:52:3c:c5:07:7c:c7:ea:7a:c1:
96:2d:6e:2b:e0:45:2a:d3:ae:7e:43:fc:33:7a:37:83:03:16:
df:d3:5c:b3:62:08:08:6a:1a:a2:b3:0a:c2:25:60:4e:5e:8c:
09:89:cc:9a:9c:34:ba:ae:87:f8:52:a9:86:96:0e:c0:bd:5a:
02:eb:60:70:e5:f2:ba:46:ad:f4:b6:35:6e:ba:9a:f0:78:80:
5b:1e:a1:14:2a:31:ea:a1:db:da:85:aa:83:a1:a8:2c:81:c8:
ae:b9:70:79:89:41:03:38:20:96:3d:c9:1c:ad:60:8b:1c:70:
bb:a2:76:de:50:fb:5d:68:c3:db:2a:ea:7d:a8:3c:ab:ed:9f:
2b:cd:89:9f:17:c5:06:f7:1b:9b:28:ca:7e:ca:c1:b9:aa:f8:
8c:fe:5f:36:94:5f:92:1b:0c:35:1c:2f:05:f9:70:9c:99:2a:
da:01:fe:88:94:25:8d:56:ea:0c:76:fa:79:11:00:e8:e0:75:
a5:a5:10:d8:52:dc:35:7f:9e:ab:ff:10:fc:01:f6:c6:6a:29:
c9:15:6d:0a:b7:96:7f:57:8d:78:6c:96:b4:46:48:77:3c:c1:
27:66:35:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:03:46 2025 by rpki-client