Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/lVK3Dj2Z0Rp-xcKhXqA75JUzvW8.roa
File: lVK3Dj2Z0Rp-xcKhXqA75JUzvW8.roa (raw, json)
Hash identifier: +6yCEd/heS00MLN8FOryj+Zb4E0Bz/sIbjZlEyqiLWQ=
Subject key identifier: 95:52:B7:0E:3D:99:D1:1A:7E:C5:C2:A1:5E:A0:3B:E4:95:33:BD:6F
Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial: 019427481FD51B66491474D298668210AA15
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/lVK3Dj2Z0Rp-xcKhXqA75JUzvW8.roa
Signing time: Thu 02 Jan 2025 13:50:25 +0000
ROA not before: Thu 02 Jan 2025 13:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57786
IP address blocks: 185.129.92.0/22 maxlen: 22
185.129.92.0/24 maxlen: 24
185.129.93.0/24 maxlen: 24
185.129.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 08:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1f:d5:1b:66:49:14:74:d2:98:66:82:10:aa:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Validity
Not Before: Jan 2 13:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9552b70e3d99d11a7ec5c2a15ea03be49533bd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:25:0d:a3:83:6c:a3:8f:85:5f:49:3a:bd:7e:
67:18:d7:63:2a:26:f2:91:61:20:31:7c:01:c0:87:
3c:37:3c:5d:1b:89:2d:72:04:24:87:f0:fd:58:6e:
12:c1:76:d3:cf:ce:c3:b9:c8:8e:bb:cd:95:b4:25:
46:0e:35:d1:2c:96:be:a6:83:09:84:99:47:de:ef:
1e:7f:ea:a4:d0:72:a9:4a:f8:d5:df:c8:87:88:5d:
0a:23:c9:14:2e:7d:5f:73:81:1f:5b:c1:71:77:27:
a1:d7:74:ab:3a:69:47:60:94:62:da:c2:a1:e6:56:
af:c1:2b:d0:4a:03:8d:67:e5:4c:d7:9f:d3:51:25:
47:76:a0:70:65:17:b6:18:fc:42:c9:f2:df:bf:e1:
44:fd:ee:ea:1f:ee:fc:97:d3:e9:e1:d9:b8:cf:0e:
d7:66:a4:ce:ef:3a:2d:23:73:e8:ca:58:69:5c:ba:
3c:06:b6:21:7b:05:b2:29:44:6a:9a:1c:e9:c7:c7:
3b:6a:b3:ce:ce:1f:91:3f:c2:01:a8:0c:84:e9:c2:
23:3c:78:70:66:0f:84:30:ed:e4:0d:ca:69:4b:f0:
0b:ae:59:1d:9c:e2:32:ba:bd:b5:ec:78:2d:9c:79:
82:eb:99:53:63:07:9d:37:83:f4:6c:f5:a2:b8:a1:
a2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:52:B7:0E:3D:99:D1:1A:7E:C5:C2:A1:5E:A0:3B:E4:95:33:BD:6F
X509v3 Authority Key Identifier:
keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/lVK3Dj2Z0Rp-xcKhXqA75JUzvW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.92.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:8c:f8:02:4f:19:7b:ba:7f:bd:e6:ff:62:ae:89:a0:81:52:
2e:86:a8:dc:c6:1c:1e:3c:b9:dd:48:cc:5e:be:55:4d:1f:e6:
3c:26:a1:0c:a9:b7:65:57:62:d9:a6:e7:9f:5a:bb:de:71:8c:
d4:5d:9c:ca:a3:ee:6a:3a:33:e3:ca:24:3f:b3:f7:9b:63:2f:
9d:0d:37:fe:3c:0c:f6:a2:3f:de:67:3b:d1:d3:a1:88:5a:90:
0e:c3:4a:0c:3d:c1:d2:ba:f5:db:09:c7:c1:62:3a:00:29:78:
97:50:1c:93:98:67:37:88:f7:62:72:34:82:7d:5f:eb:0b:94:
34:ab:7a:cb:62:a6:2f:02:2c:ea:02:21:37:d9:87:25:19:2d:
2c:86:10:88:d8:de:9b:29:07:fd:8e:ef:45:5f:b6:c8:da:16:
8d:de:7e:2b:ff:cb:a1:06:d7:ed:56:18:e1:f9:54:fe:64:89:
19:98:3b:e2:8e:ef:8d:7b:02:67:4e:d1:d0:78:bb:e9:e6:1f:
c6:4d:3b:80:42:f6:df:45:8f:28:f5:95:9b:09:ef:43:96:7a:
81:ca:12:e6:f4:1c:9e:a8:eb:4f:74:bd:85:22:d0:4a:63:06:
65:e4:df:7c:2d:a9:16:a8:64:03:99:82:ef:e8:57:c6:ea:c8:
40:03:08:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:49:04 2025 by rpki-client