Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/hT0-2B1crqEBg97bW6W5LE1js4s.roa
File: hT0-2B1crqEBg97bW6W5LE1js4s.roa (raw, json)
Hash identifier: c72ZTUi2tY2N31P50zcy6I3xA4UTG7DMFnzCbNuafx4=
Subject key identifier: 85:3D:3E:D8:1D:5C:AE:A1:01:83:DE:DB:5B:A5:B9:2C:4D:63:B3:8B
Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial: 01968ACCA9A3C0418742D7C612735C337802
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/hT0-2B1crqEBg97bW6W5LE1js4s.roa
Signing time: Thu 01 May 2025 07:43:10 +0000
ROA not before: Thu 01 May 2025 07:43:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203971
IP address blocks: 37.32.64.0/20 maxlen: 20
185.129.92.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 21 May 2025 15:24:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:cc:a9:a3:c0:41:87:42:d7:c6:12:73:5c:33:78:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Validity
Not Before: May 1 07:43:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=853d3ed81d5caea10183dedb5ba5b92c4d63b38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:10:56:e2:a1:e3:31:d9:65:1c:c6:80:ce:a9:
3b:ce:39:47:91:00:a7:e9:54:4a:b7:a4:87:13:1d:
3b:00:38:a6:8a:9d:d8:6e:11:1b:58:6d:51:c0:16:
5a:1f:2a:39:6a:83:c4:08:c9:b2:9f:0f:61:03:7a:
a2:ee:1b:74:31:71:10:14:be:8b:d6:24:dc:dd:e8:
7e:74:bc:4d:31:b8:1d:88:36:6f:e9:4d:03:79:82:
56:c8:8f:ac:f6:8e:b4:4b:fa:b3:a2:1f:5d:68:d4:
ea:73:af:c3:0e:b1:6c:43:54:26:df:8c:f7:ab:14:
03:8b:81:65:36:cd:3b:5a:0a:a8:34:9d:25:ab:d2:
86:9d:e8:67:9b:06:e2:91:8e:a5:19:41:c3:1d:bd:
c6:58:79:d5:a5:41:7c:43:fa:f3:f2:9d:af:c3:40:
35:25:c1:d8:20:e9:13:be:4e:d6:31:47:98:59:2e:
c7:fd:03:76:ff:cf:11:eb:54:4f:fc:fb:24:02:85:
be:7e:21:43:2b:01:db:d9:1e:b8:67:d0:ca:7c:31:
7e:2f:ce:79:c0:7d:bd:38:37:2b:d6:3a:16:08:4e:
81:54:25:6e:07:f5:0b:2b:dd:c6:1a:72:33:fc:5d:
0a:b3:31:da:55:58:d8:38:e0:08:00:22:7a:55:53:
c6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3D:3E:D8:1D:5C:AE:A1:01:83:DE:DB:5B:A5:B9:2C:4D:63:B3:8B
X509v3 Authority Key Identifier:
keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/hT0-2B1crqEBg97bW6W5LE1js4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.64.0/20
185.129.92.0/22
Signature Algorithm: sha256WithRSAEncryption
82:ae:4a:ee:b5:2d:fe:8c:5c:75:0c:80:08:89:ae:20:4d:ad:
0e:2b:de:8a:c9:b7:d7:5b:79:1f:e7:50:33:ea:b6:6a:ae:e0:
e6:40:67:03:4a:1f:8a:05:e3:c8:c4:b0:a0:6e:6a:19:30:cb:
fe:35:80:e6:a4:26:e3:87:f3:d3:ba:54:e6:3d:ae:84:96:9b:
62:71:8b:02:c4:e6:b0:e3:cc:f5:55:ec:de:23:63:62:df:b3:
ed:ec:29:7c:6e:a3:f0:b5:38:f0:6b:52:e6:ff:13:6e:83:24:
c0:74:d2:c1:15:e9:37:41:3d:c8:36:b0:32:96:9d:0b:52:3b:
ce:ab:9e:21:7c:16:81:55:57:c5:58:91:f3:99:87:b1:50:25:
e7:e4:b0:b2:f9:81:b7:fb:09:02:48:4e:9d:39:bf:9e:a3:74:
1e:eb:1d:5c:06:1c:95:46:7a:75:c4:6e:ec:6f:72:7d:c3:4e:
0a:9f:95:01:86:08:9c:78:63:b5:62:13:b2:2c:28:dc:1a:e8:
ec:da:0d:0a:33:84:21:1d:76:fd:bf:a5:51:93:78:41:6e:9a:
b3:fc:ba:ad:24:ea:ad:a0:05:24:7b:ad:b3:5b:0a:8e:f2:ee:
0a:b5:58:6e:e0:46:f9:0d:f1:82:dc:bf:1c:6c:7b:32:f5:f2:
6f:08:b6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:53:27 2025 by rpki-client