Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/SCbQwmT1LBd6vMvIhSz8wEJJlF8.roa
File: SCbQwmT1LBd6vMvIhSz8wEJJlF8.roa (raw, json)
Hash identifier: v55wtFAcs5huUepgKvXjyu/peBaeK65+1eYv4A3c7ME=
Subject key identifier: 48:26:D0:C2:64:F5:2C:17:7A:BC:CB:C8:85:2C:FC:C0:42:49:94:5F
Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial: 0194AECEA7BCD32192E344E647DE7EAD35EB
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/SCbQwmT1LBd6vMvIhSz8wEJJlF8.roa
Signing time: Tue 28 Jan 2025 21:26:06 +0000
ROA not before: Tue 28 Jan 2025 21:26:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61135
IP address blocks: 185.73.200.0/22 maxlen: 24
185.165.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Feb 2025 17:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ae:ce:a7:bc:d3:21:92:e3:44:e6:47:de:7e:ad:35:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Validity
Not Before: Jan 28 21:26:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4826d0c264f52c177abccbc8852cfcc04249945f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:94:50:fe:21:2f:45:74:04:b3:2c:f0:ea:
be:1e:55:cd:81:45:bd:73:20:08:1e:88:29:be:7e:
32:2d:51:08:a7:a7:de:a1:c8:de:13:52:f7:00:77:
a1:a4:90:5e:f1:96:f3:ba:7f:fc:35:9f:8a:5f:90:
d0:de:56:56:2e:47:39:97:44:32:b2:fe:76:93:56:
10:bb:5d:2f:fe:8d:70:01:ee:99:68:d4:5b:9d:4f:
69:d5:8f:1c:1d:f4:9c:0b:d8:d7:67:9e:c7:22:22:
e3:62:99:9d:65:48:9f:43:a5:14:22:9d:45:97:09:
41:cc:ff:a1:23:7c:99:94:c3:df:c6:bf:76:31:a0:
c7:8d:5f:dd:6b:eb:b0:10:1a:8f:ee:b3:6e:6c:3e:
7b:65:8b:7d:6b:14:e7:7c:a7:6a:02:99:c2:73:28:
32:36:50:cf:54:a5:6a:2c:73:0c:58:12:62:81:36:
b5:81:ac:f0:a9:1f:9a:d3:9f:b6:d2:f0:a4:ee:57:
ad:37:36:09:30:4e:35:f4:4f:e9:35:80:be:d3:b6:
21:75:df:eb:69:38:2f:13:68:b3:18:a6:cc:f7:49:
9f:15:cf:70:1a:54:9b:08:68:72:34:70:31:f7:e0:
ab:12:2e:7e:4a:81:83:df:28:96:ef:55:a3:1b:13:
84:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:26:D0:C2:64:F5:2C:17:7A:BC:CB:C8:85:2C:FC:C0:42:49:94:5F
X509v3 Authority Key Identifier:
keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/SCbQwmT1LBd6vMvIhSz8wEJJlF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.200.0/22
185.165.77.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:0b:cc:f9:06:20:1e:fa:bc:b5:c2:62:b6:27:49:9b:7e:9a:
f1:8e:fe:1f:d5:61:ed:07:96:cb:ae:03:22:32:33:83:b7:dd:
e5:d6:78:00:5e:18:05:d3:53:70:65:43:86:34:0d:09:39:a3:
71:e0:f0:b5:ea:1f:e7:e6:bd:bc:80:49:af:22:cb:8f:02:b7:
d1:4c:47:40:77:aa:c0:ea:0e:11:e3:25:62:59:9d:ef:6e:52:
b4:a1:ad:fd:e2:6e:8f:bc:95:bb:fb:b0:97:1f:71:b0:a2:7e:
d4:10:8a:6a:21:54:5a:21:88:31:0d:95:d6:1b:4c:28:e0:fd:
0b:17:3c:ae:42:e5:79:88:b0:d5:08:ee:6d:0b:00:ae:42:f3:
43:e3:62:bc:d2:1f:cf:9c:dc:5f:64:d3:6d:af:b5:ab:cb:fd:
c6:07:37:6f:07:73:c6:30:57:d0:14:93:61:b4:85:d3:ce:d8:
2e:9b:54:da:30:39:1c:4c:82:a3:a7:41:5b:24:cf:bc:7a:f0:
2d:01:0a:08:fa:bd:f4:ea:bc:a9:59:30:3c:b0:d2:5b:ea:63:
7f:08:31:73:57:66:2e:9e:5d:0f:4d:22:c2:05:27:b0:6b:6f:
b0:d1:f9:36:50:c8:2d:a4:2a:96:06:1b:13:5f:72:80:5f:83:
82:39:34:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:34:16 2025 by rpki-client