Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/391350-a970-4ba1-8a94-3979b800cda8/1/dGyqTduD6M_vJJJMBojx6QRpujA.roa
File: dGyqTduD6M_vJJJMBojx6QRpujA.roa (raw, json)
Hash identifier: J0XmBlTWr60A12FwJ5/B8hz6Dn/QGAOcXQrjNlXx9+I=
Subject key identifier: 74:6C:AA:4D:DB:83:E8:CF:EF:24:92:4C:06:88:F1:E9:04:69:BA:30
Certificate issuer: /CN=1c422dd7ed73d1c004850033bf9579b4fef5e9d1
Certificate serial: 0196E6F88B96BDFBF8AA6CFF8672BD1A9057
Authority key identifier: 1C:42:2D:D7:ED:73:D1:C0:04:85:00:33:BF:95:79:B4:FE:F5:E9:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HEIt1-1z0cAEhQAzv5V5tP716dE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/391350-a970-4ba1-8a94-3979b800cda8/1/dGyqTduD6M_vJJJMBojx6QRpujA.roa
Signing time: Mon 19 May 2025 05:16:10 +0000
ROA not before: Mon 19 May 2025 05:16:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48559
IP address blocks: 185.27.52.0/22 maxlen: 22
195.26.12.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 05 Jun 2025 05:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e6:f8:8b:96:bd:fb:f8:aa:6c:ff:86:72:bd:1a:90:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c422dd7ed73d1c004850033bf9579b4fef5e9d1
Validity
Not Before: May 19 05:16:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=746caa4ddb83e8cfef24924c0688f1e90469ba30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cd:22:78:1c:5a:59:6a:51:8b:59:61:48:70:
63:40:29:52:2d:58:ab:c6:b9:b8:45:ee:d7:5f:9a:
bd:37:bb:b0:f4:d8:cd:73:ab:dc:0c:f5:59:b9:1e:
29:d2:1c:d1:fa:2a:4c:d4:5c:3e:c5:62:7a:eb:7f:
b7:5a:c5:2e:d5:1e:22:50:d1:83:24:8e:ac:c2:e4:
60:00:2d:fe:81:69:23:56:d4:34:fd:da:49:7d:51:
46:22:98:b0:54:73:2a:a4:2b:90:47:12:6b:52:e9:
1b:1b:1e:f0:89:32:06:a0:dc:67:83:8a:f5:b1:8a:
bd:b2:d7:eb:29:bb:72:d3:75:97:36:f1:d5:10:78:
7a:21:c6:b4:8b:e4:9a:d8:5e:8b:df:ca:a6:ee:3c:
60:82:6b:f9:57:42:d4:c0:30:90:6b:0e:6c:fb:5f:
9e:aa:01:56:ca:e2:80:b4:e7:75:92:a6:df:94:79:
e2:9f:cf:b6:e9:eb:94:6d:69:4c:73:b5:8a:65:c2:
2a:c2:c4:97:c1:fb:9c:d3:e8:ea:fe:0e:1d:9b:63:
14:4a:1f:28:59:20:f9:00:24:66:a4:57:55:9c:48:
72:75:85:f9:ec:fa:cb:f0:92:3e:db:9f:d3:ed:2c:
63:2d:e6:18:22:b1:e5:bf:40:4a:25:57:e6:8e:48:
ac:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6C:AA:4D:DB:83:E8:CF:EF:24:92:4C:06:88:F1:E9:04:69:BA:30
X509v3 Authority Key Identifier:
keyid:1C:42:2D:D7:ED:73:D1:C0:04:85:00:33:BF:95:79:B4:FE:F5:E9:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HEIt1-1z0cAEhQAzv5V5tP716dE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/391350-a970-4ba1-8a94-3979b800cda8/1/dGyqTduD6M_vJJJMBojx6QRpujA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/391350-a970-4ba1-8a94-3979b800cda8/1/HEIt1-1z0cAEhQAzv5V5tP716dE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.52.0/22
195.26.12.0/23
Signature Algorithm: sha256WithRSAEncryption
16:75:d3:12:63:55:23:bc:19:5c:3e:cc:b5:ba:1f:c9:19:ab:
1a:d6:0f:78:a7:9d:bc:45:17:32:94:e9:55:c4:ca:82:ad:63:
b3:6e:fd:36:b6:53:85:54:d7:d3:9c:c1:7c:ed:33:b5:e4:00:
4d:26:de:71:9d:94:d4:4e:19:7f:35:ba:90:33:74:45:45:b9:
ee:53:ad:d2:9a:2f:73:12:a1:13:c3:fa:18:56:f6:e7:8b:78:
72:ef:5e:9d:76:31:52:26:62:ec:68:cf:7a:00:da:f2:40:1a:
9c:37:70:69:7c:2a:b6:26:f3:61:1b:6b:34:28:72:70:22:ca:
8d:b0:98:95:2e:fa:12:c9:db:7c:8c:df:3a:c4:8e:27:66:f8:
f3:9f:de:1f:d6:3e:a2:c0:09:b5:f7:8d:74:56:12:cb:f4:37:
32:e8:e9:00:28:dc:51:1d:f2:cb:c4:89:ee:aa:c4:39:39:68:
e4:72:99:92:52:c6:39:e1:06:1c:93:f3:a2:2d:b2:e5:a3:1c:
2e:98:6f:6d:87:19:32:33:44:40:7a:72:30:f0:5b:63:7c:61:
66:67:89:fb:af:92:4f:4a:8c:d2:06:bf:07:ac:d7:d1:68:2d:
02:be:be:68:e1:0a:f9:77:53:1f:7d:e4:16:5a:76:b0:e5:98:
d3:c5:77:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:20:16 2025 by rpki-client