Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ezzi_nLaZjPnEUoA-dmanQ_Yueg.roa
File: ezzi_nLaZjPnEUoA-dmanQ_Yueg.roa (raw, json)
Hash identifier: sYJccOXBJki0AqJm6/GiE95hWT6ttvDd2cdyB/VyU/c=
Subject key identifier: 7B:3C:E2:FE:72:DA:66:33:E7:11:4A:00:F9:D9:9A:9D:0F:D8:B9:E8
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01957FCE47E29DF888909F94E7EB126D5096
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ezzi_nLaZjPnEUoA-dmanQ_Yueg.roa
Signing time: Mon 10 Mar 2025 11:26:20 +0000
ROA not before: Mon 10 Mar 2025 11:26:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57758
IP address blocks: 185.126.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Mar 2025 11:28:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7f:ce:47:e2:9d:f8:88:90:9f:94:e7:eb:12:6d:50:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 10 11:26:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b3ce2fe72da6633e7114a00f9d99a9d0fd8b9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:80:43:ed:2e:1e:a7:ae:12:84:4d:86:eb:ec:
de:02:1b:8d:33:86:85:9a:fe:37:c0:82:73:23:9f:
56:8c:3a:97:a5:d9:0e:ef:aa:a8:cb:08:dc:be:d8:
4d:55:00:13:af:2e:bb:77:ac:b1:9d:78:71:f4:82:
a8:00:d3:06:9b:85:65:6c:01:b9:da:89:c7:76:57:
55:94:cf:4d:ac:04:5f:ed:a2:89:36:97:99:b0:68:
c0:46:60:0f:cc:cd:05:66:75:9b:2f:29:2d:20:8b:
7c:11:1f:45:8b:6a:d5:97:e4:7d:94:93:a5:83:1d:
05:dc:b9:ab:1b:ce:13:83:f5:20:33:03:ca:68:76:
b7:18:54:f2:e5:2f:bb:16:2a:d1:e0:00:36:e0:a0:
77:53:57:78:72:66:59:0b:b5:90:d4:9f:69:67:47:
78:c4:45:88:28:1d:79:e0:e4:ea:73:2a:20:3d:08:
d9:1d:e2:f1:84:94:ea:9d:3c:cf:5b:cf:e1:a8:e3:
cb:4a:aa:00:0a:f8:9b:4c:0d:47:37:c7:d5:19:1b:
c9:41:6d:84:ee:69:f1:48:12:df:49:2f:15:af:45:
6c:c4:b1:bf:b4:f6:33:dc:f8:ad:b0:35:a9:05:16:
e6:49:fb:bd:dd:99:ae:4b:47:8e:95:2a:61:ff:35:
08:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3C:E2:FE:72:DA:66:33:E7:11:4A:00:F9:D9:9A:9D:0F:D8:B9:E8
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ezzi_nLaZjPnEUoA-dmanQ_Yueg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.65.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:cc:c3:95:a9:bc:e2:50:5e:86:36:b2:99:ad:6f:c4:5f:9a:
d2:3d:38:f6:37:2d:dd:c8:ae:20:77:2d:af:76:13:a4:09:1f:
f9:9a:31:52:43:5e:9e:b3:de:7d:ba:fd:64:7b:a2:2b:45:89:
e6:87:bf:6f:5e:0f:3c:3b:01:5f:01:3b:60:05:55:bf:09:f0:
0f:a3:a6:56:2c:2a:89:73:a2:8d:10:f0:86:fd:3c:0b:c5:b5:
79:ed:ce:be:2c:3c:97:8f:97:28:1d:12:0d:d8:98:7d:ee:29:
98:28:bf:fc:18:7c:83:f1:cb:d5:51:75:b1:d6:b6:fe:75:ba:
00:4b:0c:c6:48:20:2d:82:ba:0f:71:d9:28:48:42:e3:f0:ed:
44:2c:5c:9f:05:48:8b:f2:d0:f3:70:9a:4d:30:dc:3d:20:9c:
95:96:e6:a8:97:66:e6:9c:de:d9:16:37:d0:c0:c1:9e:c6:72:
6c:d2:5a:21:08:e9:50:bc:fd:77:ad:92:a1:f3:ff:f7:01:bf:
3c:68:b1:dd:ac:72:62:c7:2a:85:27:b0:17:71:b6:54:45:b1:
0a:17:3f:0d:d9:15:f1:38:cd:88:e0:69:2f:0d:6d:a1:30:4e:
55:9c:d9:e0:f5:85:94:d2:c3:b2:03:c0:06:5b:49:6d:17:14:
ea:66:6a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:24:51 2025 by rpki-client