Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/u_SgNqFibD1AS8DdFfB4ll_74gU.roa
File: u_SgNqFibD1AS8DdFfB4ll_74gU.roa (raw, json)
Hash identifier: nn+PG4JoMcoyjOV0rbV1FsAdiLA3SVuOz9Lifrsz4/8=
Subject key identifier: BB:F4:A0:36:A1:62:6C:3D:40:4B:C0:DD:15:F0:78:96:5F:FB:E2:05
Certificate issuer: /CN=07bca0482d605587eb0e0c851c38e807755f9017
Certificate serial: 0194C883773A985AA771CC25E83C26C2B7B2
Authority key identifier: 07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/u_SgNqFibD1AS8DdFfB4ll_74gU.roa
Signing time: Sun 02 Feb 2025 21:14:06 +0000
ROA not before: Sun 02 Feb 2025 21:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 185.84.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Feb 2025 09:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c8:83:77:3a:98:5a:a7:71:cc:25:e8:3c:26:c2:b7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07bca0482d605587eb0e0c851c38e807755f9017
Validity
Not Before: Feb 2 21:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbf4a036a1626c3d404bc0dd15f078965ffbe205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a0:7e:f5:2d:62:18:02:94:2d:15:79:1e:72:
33:fc:3a:ec:86:ee:ac:a9:09:ca:fc:cf:09:6f:9e:
df:85:c4:d3:89:1d:a2:5b:00:6d:3f:ec:ce:9f:9f:
1b:a5:f8:6f:76:8d:7f:b4:e8:5c:b9:60:d5:2f:e7:
06:4c:fe:a9:b5:ea:03:0c:01:a3:12:69:90:37:bf:
f6:ee:d4:79:64:01:6c:34:b4:28:df:b7:88:66:94:
18:96:22:65:0e:f9:ec:85:2c:b8:f9:26:00:da:a3:
4f:76:47:c7:59:86:bd:73:f6:08:e8:a4:dd:d2:02:
e6:b4:79:3c:d7:07:79:18:cd:e4:9a:c5:d6:92:25:
48:1d:fa:0a:73:f7:cb:78:25:11:4d:f6:f4:f4:98:
19:a3:39:39:8a:10:21:e5:52:2c:9a:28:9c:4f:58:
c5:47:36:f2:0c:8c:ce:d8:d3:ad:8b:aa:bb:ae:d1:
e2:fe:9d:6c:f0:35:0c:a0:18:7d:b3:19:87:bc:89:
b8:35:36:1d:23:7b:3b:43:e9:dc:a1:06:1b:29:2d:
ee:15:c3:73:14:62:5e:61:fd:fe:61:d2:c3:c7:58:
d0:d9:b0:c2:d8:58:1d:2c:92:6d:e8:16:24:44:3a:
3b:46:79:11:d0:85:6f:9b:f9:b2:f5:6e:a0:85:5b:
34:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F4:A0:36:A1:62:6C:3D:40:4B:C0:DD:15:F0:78:96:5F:FB:E2:05
X509v3 Authority Key Identifier:
keyid:07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/u_SgNqFibD1AS8DdFfB4ll_74gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.157.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:76:aa:e4:09:10:57:c2:79:d1:75:2d:f8:d4:9c:cb:68:30:
96:2b:b7:9a:31:d3:e1:72:55:4b:b2:d1:f4:e1:74:53:37:c9:
63:8a:7b:15:e8:5f:de:70:a0:1a:0d:2b:1a:fc:63:88:1d:d8:
b0:58:23:71:c8:eb:62:c8:74:bc:19:b5:d6:00:12:58:c0:03:
8d:25:9c:ff:1d:3d:8f:94:04:a3:10:b9:70:8d:41:b1:f7:5d:
0d:b0:c4:1b:7a:52:4a:22:7c:93:1e:69:47:41:9c:f5:8a:fe:
cc:7c:70:0a:c7:37:9b:8d:50:9b:62:c6:c9:11:6a:1e:d3:95:
c1:b7:9a:c2:18:05:46:fa:5e:90:80:4e:ba:33:5b:8b:da:00:
21:ce:ae:f8:2f:eb:95:b0:7d:bc:4a:18:8f:15:3b:f5:ce:c8:
3e:54:ea:29:f5:ba:3f:04:57:db:2d:61:9e:ad:ff:72:c4:cc:
b3:4b:97:1a:7e:24:4e:97:fc:5b:f4:97:ab:c6:a9:9f:de:7a:
42:38:eb:40:30:75:c6:38:bf:fd:d2:a7:fc:52:71:8c:5e:c2:
a3:6d:9d:89:16:1d:07:90:ec:7c:64:1c:7b:e3:c1:70:29:6c:
2f:2b:8d:13:6d:42:03:3b:26:dc:63:7f:59:49:e4:60:83:8d:
42:5f:ad:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:08:59 2025 by rpki-client