Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/bNi_FWVCyeYg3oeyKSoIYu-7_Lc.roa
File: bNi_FWVCyeYg3oeyKSoIYu-7_Lc.roa (raw, json)
Hash identifier: 2IJGt28cno7K3I/MlGfCeu6a1K1imDgZGK8JuZr180E=
Subject key identifier: 6C:D8:BF:15:65:42:C9:E6:20:DE:87:B2:29:2A:08:62:EF:BB:FC:B7
Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial: 0194266A2859F62476C77DCECD9EC3683475
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/bNi_FWVCyeYg3oeyKSoIYu-7_Lc.roa
Signing time: Thu 02 Jan 2025 09:47:58 +0000
ROA not before: Thu 02 Jan 2025 09:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42533
IP address blocks: 185.175.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Jan 2025 15:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:28:59:f6:24:76:c7:7d:ce:cd:9e:c3:68:34:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
Validity
Not Before: Jan 2 09:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cd8bf156542c9e620de87b2292a0862efbbfcb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c7:ee:4a:b6:89:5c:af:80:1c:e7:a8:ab:d2:
dc:de:79:0f:30:57:dc:8b:38:d5:f0:59:43:e0:a7:
2a:05:4f:71:8b:c7:47:c3:0d:b7:c0:66:a2:10:36:
d4:ac:b1:1f:94:40:52:5a:a8:4d:db:1a:3d:fe:51:
d0:40:f9:aa:b8:c1:fa:a9:c1:61:14:8a:3c:d4:e8:
af:0d:f8:9f:77:46:1a:aa:ab:13:d7:e9:2e:df:8f:
76:98:61:b5:73:df:4b:f2:7c:1c:8b:a1:27:1a:e8:
8f:a7:e7:38:49:48:59:f8:27:88:61:79:85:b5:30:
41:18:04:0d:a7:03:cc:2c:e8:70:c6:ca:5b:95:4e:
bb:bd:82:e3:c5:b1:97:57:26:7a:13:b5:f5:52:ae:
bc:9b:6f:92:ee:60:d2:f7:8e:dd:45:cb:12:fa:12:
fe:41:00:80:10:99:a3:7e:61:b9:01:35:33:52:ba:
32:37:fa:7b:58:ac:0d:d3:1d:67:1d:7f:85:f8:a2:
3a:04:1c:d8:0e:75:35:27:09:00:6b:01:c3:c7:aa:
19:eb:5b:1d:9f:f0:c5:7a:5b:d8:ce:44:9c:44:e4:
a6:64:4a:1b:31:74:13:c4:64:94:bf:43:46:7b:b5:
c4:a6:28:f0:e3:d2:a2:81:a2:6c:c9:1d:0f:ea:d6:
6f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D8:BF:15:65:42:C9:E6:20:DE:87:B2:29:2A:08:62:EF:BB:FC:B7
X509v3 Authority Key Identifier:
keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/bNi_FWVCyeYg3oeyKSoIYu-7_Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.93.0/24
Signature Algorithm: sha256WithRSAEncryption
00:e6:10:ef:a8:6c:7b:ab:c1:68:35:e3:0b:95:30:45:f5:6a:
bd:d8:dc:e5:11:7a:da:dd:58:f6:5b:bf:ee:05:20:62:54:f8:
51:14:d0:0b:9b:92:a6:b0:fb:ab:14:9e:68:e4:65:89:25:85:
dd:d0:d8:95:1b:52:d1:de:cd:33:94:b8:64:82:ff:ba:9e:bb:
8e:25:21:e5:7c:d8:f6:9d:e7:24:5d:c6:13:53:87:0c:e8:2d:
ad:df:bb:c4:5c:b0:fd:e2:97:ab:6d:7a:7b:da:f8:d2:48:96:
8f:3d:83:df:2c:95:f0:88:9b:5d:c6:f8:af:36:6b:c0:0a:6c:
49:9d:ec:1c:19:5c:74:c5:a9:f4:99:ac:e8:b5:d5:3d:5e:b0:
7d:a0:1b:94:2f:79:54:9f:30:43:29:fb:5a:f8:77:d0:89:4a:
57:91:97:41:4c:31:64:ec:e5:c8:62:0a:b7:aa:78:f3:3c:2f:
0f:ba:df:b7:82:3e:06:bb:e7:0c:48:a8:62:54:72:bb:81:ee:
38:13:33:1e:27:82:3a:22:5a:83:4a:09:88:6f:0c:2c:7e:84:
35:c3:a2:3e:4d:fa:f7:82:88:4b:e6:73:56:25:e7:21:e4:9b:
a7:73:53:2a:16:4e:48:ba:54:8a:78:68:51:72:3f:bc:05:0a:
d5:bf:28:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:36:40 2025 by rpki-client