Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/RV_tb8ZE2a3XPMdBiAcbY1hQJw0.roa
File: RV_tb8ZE2a3XPMdBiAcbY1hQJw0.roa (raw, json)
Hash identifier: KLSxyUSwvblAIN/1GM3mQubV75ytUvL7SB4PReyKeCc=
Subject key identifier: 45:5F:ED:6F:C6:44:D9:AD:D7:3C:C7:41:88:07:1B:63:58:50:27:0D
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0194E7D4A825BCA184CB865F88BD5FA07AF6
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/RV_tb8ZE2a3XPMdBiAcbY1hQJw0.roa
Signing time: Sat 08 Feb 2025 23:11:00 +0000
ROA not before: Sat 08 Feb 2025 23:11:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11798
IP address blocks: 185.176.92.0/24 maxlen: 24
185.207.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 19:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e7:d4:a8:25:bc:a1:84:cb:86:5f:88:bd:5f:a0:7a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Feb 8 23:11:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=455fed6fc644d9add73cc74188071b635850270d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:dc:e2:3e:26:49:ef:32:52:7e:b8:25:94:
de:5a:a2:15:9b:ae:3c:a6:c9:6e:ad:40:5a:f1:1e:
99:05:e8:08:c5:5b:9d:df:01:75:c9:73:fe:07:4c:
19:c5:86:8f:57:e4:22:d3:26:cf:44:8b:c4:32:0b:
a3:c8:c7:ed:35:71:7e:81:e9:36:3b:c9:ed:b4:70:
35:1c:65:c2:2d:d0:a1:0f:27:2b:86:bc:eb:c3:98:
a1:31:9a:32:2e:7f:53:ab:40:9b:d5:4c:8e:45:38:
80:13:7f:57:ef:ea:14:bf:bd:cc:68:9e:f0:7a:a0:
aa:2b:4d:eb:ec:5e:7e:9c:24:87:96:e6:ba:a0:e2:
a7:cb:84:79:f6:9e:4d:28:f3:92:8c:51:f2:e6:60:
3b:49:8d:71:09:a7:6c:19:e5:40:2f:57:23:57:9e:
e3:11:37:19:8e:5a:c6:bf:f9:ea:9c:5e:b5:59:f8:
1e:94:04:e3:29:c6:1a:3b:a7:2f:d7:5d:f1:19:1e:
95:63:e7:12:31:05:5a:47:14:1b:64:93:00:55:9a:
98:eb:28:fe:0c:5b:3d:e1:39:9e:b7:7c:54:89:27:
de:50:2e:55:95:ee:2f:62:f2:ea:52:86:3a:6c:26:
d5:10:e6:ac:82:32:74:c1:1e:50:f6:d6:84:a3:d8:
c6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5F:ED:6F:C6:44:D9:AD:D7:3C:C7:41:88:07:1B:63:58:50:27:0D
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/RV_tb8ZE2a3XPMdBiAcbY1hQJw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.92.0/24
185.207.135.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:11:e4:37:52:ea:9d:df:f3:fa:7f:df:b6:3e:7b:4d:42:ba:
79:d8:e7:eb:1a:fa:79:4b:56:d8:c9:e6:56:28:c6:4a:b5:72:
f4:83:38:49:8a:b3:d2:91:74:9a:ee:82:bc:6d:f9:16:fe:6a:
36:f7:c4:53:f7:23:63:50:ce:3c:85:ea:c7:0d:5e:dd:85:e8:
66:f8:3c:8f:5d:d8:b4:64:76:86:6b:d8:62:dd:8f:2e:6a:00:
54:b9:b4:14:15:ba:ff:3b:c4:68:3a:61:7c:35:2f:d6:36:62:
ef:c2:cd:9d:b9:c5:9d:b3:33:38:e2:0e:22:96:6e:1c:df:7d:
82:9b:d1:4a:b9:78:d9:f9:59:cc:ab:2e:78:0e:16:fd:2d:ce:
9a:5d:77:98:bc:80:e6:1e:5d:7d:b1:16:b0:32:f5:4f:54:55:
cb:1e:d6:9e:d7:e9:3d:e6:29:ff:88:f2:36:49:ae:26:ec:f4:
d9:24:c4:46:0c:eb:b7:c8:c3:53:14:44:ce:b2:43:db:a0:17:
af:74:b0:12:b8:1f:21:87:aa:fb:99:7e:88:1e:54:21:dc:d6:
3d:e2:c7:67:fb:42:98:40:e6:f8:14:b9:41:d5:71:3d:7c:91:
02:f8:7f:92:43:d4:9f:ca:73:d6:16:33:05:8e:93:34:86:99:
8e:37:77:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:49 2025 by rpki-client