Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/XFKcz7_lKFua51YeHyav9wq5P2U.roa
File: XFKcz7_lKFua51YeHyav9wq5P2U.roa (raw, json)
Hash identifier: 7LlOSWqyemOQ12JepmNlhcN/FrC++upWcFb8QTzkUfk=
Subject key identifier: 5C:52:9C:CF:BF:E5:28:5B:9A:E7:56:1E:1F:26:AF:F7:0A:B9:3F:65
Certificate issuer: /CN=ff32d6463621b13f78e530d144feac023e1e4582
Certificate serial: 0194E4CB5FCFD53BAE9AF1644F7A4776BF55
Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/XFKcz7_lKFua51YeHyav9wq5P2U.roa
Signing time: Sat 08 Feb 2025 09:02:00 +0000
ROA not before: Sat 08 Feb 2025 09:02:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 185.84.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Feb 2025 11:19:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e4:cb:5f:cf:d5:3b:ae:9a:f1:64:4f:7a:47:76:bf:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582
Validity
Not Before: Feb 8 09:02:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c529ccfbfe5285b9ae7561e1f26aff70ab93f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:85:17:79:f3:a2:21:c4:dd:b8:ae:1f:48:81:
a1:2c:fa:cb:8e:3d:c4:a1:db:35:3b:d4:71:63:b3:
fe:18:84:5e:33:27:23:07:da:35:c9:4d:86:0d:8b:
2e:77:f4:d7:b3:79:5d:83:58:79:cf:ff:af:2d:5c:
3c:7b:f6:2c:39:23:cb:a2:04:16:ce:5f:c5:48:74:
18:2b:a9:31:8b:94:12:70:f8:07:f2:0e:c7:21:90:
6f:09:cd:94:9b:bc:e4:ce:31:97:80:39:6a:ed:04:
48:33:8e:2a:8b:3e:08:9b:9a:42:a8:86:6f:31:b3:
ef:06:5c:41:b9:00:df:68:97:28:57:fd:c5:f3:64:
ac:6b:ea:b9:3a:be:21:80:dd:9b:2b:66:21:0f:76:
c7:0c:95:08:21:f3:28:9e:52:0a:04:e9:34:4d:08:
c2:81:d7:7f:63:89:cf:13:8d:c7:f9:8f:03:d2:51:
62:ed:95:7b:c4:01:83:92:92:85:c1:5a:3e:65:58:
48:89:93:4a:15:7f:5f:ec:76:f9:b6:35:ee:4f:b7:
a7:01:39:7a:a6:fa:62:cb:35:64:ce:44:3d:bc:50:
bd:88:dc:45:21:bc:fc:77:5d:41:de:c1:ac:8a:c6:
5f:42:14:78:3f:5a:b2:08:e4:28:5e:19:7e:72:13:
e8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:52:9C:CF:BF:E5:28:5B:9A:E7:56:1E:1F:26:AF:F7:0A:B9:3F:65
X509v3 Authority Key Identifier:
keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/XFKcz7_lKFua51YeHyav9wq5P2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.158.0/24
Signature Algorithm: sha256WithRSAEncryption
22:cf:ef:07:cd:7e:85:81:ba:3f:60:9c:e1:cd:85:bd:5f:b5:
18:23:68:9e:99:5e:11:9e:e3:1d:a9:90:8e:1b:22:25:64:a6:
e0:46:1e:71:e6:29:ba:e8:1f:bb:84:b0:7e:b2:f3:b3:37:be:
d7:d6:1a:7d:77:4f:b3:89:11:c1:25:8f:13:7c:9b:8e:f6:31:
e7:29:64:f7:a0:fc:ec:d5:80:9c:fd:fb:5a:49:94:17:53:5e:
46:5c:1f:74:23:fa:c0:52:a0:5e:cb:ba:b5:a7:4e:40:1c:c0:
85:43:b5:25:39:41:52:7e:4a:59:8c:84:f7:5a:f6:ef:a7:0d:
ec:42:58:46:a6:30:01:bb:85:29:e0:4d:a6:4a:b7:ee:00:b1:
92:fc:17:d3:47:21:69:89:1f:19:eb:0a:24:fa:73:42:dd:69:
59:7b:48:17:41:a0:a3:1d:06:28:10:62:d8:41:9b:d0:14:ee:
12:82:e5:61:2c:b8:af:3e:dc:1e:dd:3c:46:d1:58:6c:c7:c5:
9a:52:d4:6e:98:01:99:71:6b:f8:b7:cc:fc:3e:a6:5e:89:77:
cc:cd:5a:1a:5c:e9:55:93:f2:b9:9d:89:17:a4:42:fc:5e:cd:
bf:de:16:89:af:5a:3c:65:4e:dc:b3:e4:30:89:fc:8b:9b:35:
98:c3:2b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:29:09 2025 by rpki-client