Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/TF6_5RZ7Ql_eRKmFqC3dcqwnuSk.roa
File: TF6_5RZ7Ql_eRKmFqC3dcqwnuSk.roa (raw, json)
Hash identifier: Dw0OBvG2TeADKlzgwSQxBV7zI9gCDHH/wtwJlHco/+k=
Subject key identifier: 4C:5E:BF:E5:16:7B:42:5F:DE:44:A9:85:A8:2D:DD:72:AC:27:B9:29
Certificate issuer: /CN=fc55e0533efaa5624f538b92ed1a973feff89751
Certificate serial: 01944F3F0A8A9B5FD3313294C097A655026A
Authority key identifier: FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/TF6_5RZ7Ql_eRKmFqC3dcqwnuSk.roa
Signing time: Fri 10 Jan 2025 08:05:19 +0000
ROA not before: Fri 10 Jan 2025 08:05:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.84.116.0/24 maxlen: 24
185.132.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 08:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4f:3f:0a:8a:9b:5f:d3:31:32:94:c0:97:a6:55:02:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc55e0533efaa5624f538b92ed1a973feff89751
Validity
Not Before: Jan 10 08:05:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c5ebfe5167b425fde44a985a82ddd72ac27b929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:75:49:5c:fc:fe:b2:84:f6:61:12:5e:01:6d:
1d:16:c3:51:9c:3f:ee:f7:f5:09:73:6f:6b:ce:0e:
45:ff:da:7d:c5:58:1b:60:a4:e1:30:bf:f7:34:d3:
d5:a2:b5:53:d6:40:f1:c4:ce:7c:1f:81:bb:cc:39:
9d:d0:92:0c:9c:78:fb:b4:95:6b:d1:4b:69:c9:81:
49:c8:3d:dd:a6:45:7f:04:47:62:ec:ef:d8:e4:ff:
9e:67:87:ce:ea:e8:54:e0:36:6c:b5:f9:2b:27:26:
1a:7b:4d:24:33:fd:57:3d:c8:0f:8a:c4:4c:79:19:
54:c6:9f:c4:77:3b:00:bb:15:4a:96:66:d3:d1:5c:
ac:0d:2a:80:10:0e:26:87:c4:68:38:2d:5f:a5:fd:
a5:fb:d9:44:37:3d:1f:f2:44:58:c7:9e:8c:ed:1d:
16:52:9e:60:66:f6:ba:76:f3:9c:d5:8c:d7:38:7b:
51:90:0d:30:cd:db:6f:f9:d5:d6:3c:cb:ce:94:b8:
15:8a:f0:6a:09:64:26:0f:b4:79:c5:6d:07:66:4b:
f0:87:25:30:9d:2e:c3:39:a2:9f:37:0b:6d:dd:ef:
5e:4d:b7:7a:e9:ec:4a:e8:e4:a3:fd:cb:cd:0b:d1:
07:58:77:da:9c:d7:cf:d2:8a:83:12:85:fc:2e:95:
53:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5E:BF:E5:16:7B:42:5F:DE:44:A9:85:A8:2D:DD:72:AC:27:B9:29
X509v3 Authority Key Identifier:
keyid:FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/TF6_5RZ7Ql_eRKmFqC3dcqwnuSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.116.0/24
185.132.188.0/24
Signature Algorithm: sha256WithRSAEncryption
74:f7:fa:59:84:09:ba:e8:79:3b:91:3b:be:eb:cd:c2:57:f8:
e0:e8:bc:22:51:93:73:cd:b7:45:5b:d1:62:95:78:2b:f3:a4:
b3:f3:51:a2:ff:4e:6a:bf:e8:65:d5:a7:3f:4a:30:84:6b:0b:
ba:b5:54:5a:e9:e7:7f:fd:1f:11:20:68:29:ed:08:0b:c6:53:
7c:e3:d8:8c:cb:f1:b4:cd:89:f6:89:b6:40:f3:d3:62:43:30:
f2:76:ee:9f:6b:ee:36:1b:0f:9e:d9:d1:79:fe:d1:7d:70:7e:
1b:0f:57:9b:fa:61:96:43:21:20:dd:7e:64:87:d2:f2:68:51:
99:53:64:1c:a6:3b:c5:b6:98:10:91:5c:d6:9e:91:61:41:58:
da:13:94:5f:a3:00:80:98:c7:ed:2b:30:fe:a9:d0:90:39:d2:
80:7a:8d:c6:f3:22:70:e2:25:12:cb:b4:27:3c:68:16:da:8c:
b3:7f:0f:6b:18:c4:15:48:89:da:22:42:fb:fc:15:18:da:78:
4d:6c:66:51:52:67:cf:49:a5:1c:04:07:21:d3:af:25:f5:2c:
57:ce:42:17:dd:24:d3:fe:19:23:42:f5:0a:bc:17:2d:c4:5e:
ad:0b:87:61:95:27:e2:ec:1b:70:ae:85:38:9b:15:90:30:22:
f6:f2:51:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:32:41 2025 by rpki-client