Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/Vb8TtsMYkg7PlI8Cme1VQe8UA1I.roa
File: Vb8TtsMYkg7PlI8Cme1VQe8UA1I.roa (raw, json)
Hash identifier: uNcyJnTVWkE+GQrW4G7wnE9HTcovBeasdssD+b250Po=
Subject key identifier: 55:BF:13:B6:C3:18:92:0E:CF:94:8F:02:99:ED:55:41:EF:14:03:52
Certificate issuer: /CN=fc55e0533efaa5624f538b92ed1a973feff89751
Certificate serial: 0193D89FF7474661025D534CD8E799A95E03
Authority key identifier: FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/Vb8TtsMYkg7PlI8Cme1VQe8UA1I.roa
Signing time: Wed 18 Dec 2024 07:16:22 +0000
ROA not before: Wed 18 Dec 2024 07:16:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 185.84.119.0/24 maxlen: 24
185.132.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d8:9f:f7:47:46:61:02:5d:53:4c:d8:e7:99:a9:5e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc55e0533efaa5624f538b92ed1a973feff89751
Validity
Not Before: Dec 18 07:16:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55bf13b6c318920ecf948f0299ed5541ef140352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dd:3e:36:e8:0b:e7:19:29:8a:4a:55:98:6a:
71:01:34:86:b1:c4:00:84:aa:b9:00:a1:f6:18:0a:
6e:48:07:c5:1e:33:12:b2:5e:94:5a:b1:0e:ba:77:
13:6a:b8:1c:6f:cf:23:85:93:5b:6a:c1:f0:ab:eb:
45:ef:13:c0:a9:50:2b:d2:21:82:a7:81:8a:c0:85:
8f:54:d2:c2:75:5c:9b:b7:f8:2b:fe:c9:fc:72:c7:
e0:06:7f:66:81:e7:8d:64:ed:1b:b1:2c:4a:af:da:
4b:61:e9:40:46:35:08:be:b8:da:68:55:9b:0b:3a:
34:c7:9d:f5:55:0e:0c:f8:d1:3a:3d:01:f3:17:84:
70:c0:6c:a6:1f:e5:38:85:fb:b3:6c:c5:fa:38:de:
93:c9:33:b8:71:43:da:ca:82:c4:26:18:c1:5e:ff:
73:ca:3f:24:8a:cc:1b:d4:6d:13:ec:88:c4:80:20:
58:0a:90:57:1f:0b:2a:02:6c:ce:0a:13:ea:e7:23:
90:60:8f:c7:c7:68:29:d7:6e:5e:45:9f:09:7d:b6:
9a:7e:12:16:ac:74:f7:5a:c4:9b:38:8f:83:35:5a:
fb:da:5e:87:35:3e:cb:0e:b9:cc:12:79:75:15:fe:
40:b0:17:01:fb:11:65:53:2f:25:ea:27:0a:f6:f1:
79:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BF:13:B6:C3:18:92:0E:CF:94:8F:02:99:ED:55:41:EF:14:03:52
X509v3 Authority Key Identifier:
keyid:FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/Vb8TtsMYkg7PlI8Cme1VQe8UA1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.119.0/24
185.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:58:c2:8b:14:9e:33:69:68:2e:eb:90:d5:a9:1b:e4:97:fa:
b8:0b:b4:77:64:bd:dd:36:f8:98:ab:c2:55:04:5f:90:ca:e5:
32:fe:b5:ca:d8:9b:05:ee:fb:ae:f0:f8:28:68:51:ca:b5:34:
12:b9:ea:e0:f2:99:6d:02:76:e4:fd:4b:ab:ef:e4:48:26:ee:
2b:66:af:59:72:6b:80:15:dd:f7:25:3f:66:d2:76:9d:66:67:
f1:5e:0f:e7:e2:aa:e6:33:60:48:21:6a:64:74:08:ab:7e:c1:
6f:cc:db:87:bf:d1:0a:f9:b8:48:78:ba:cb:14:90:46:5b:cc:
0c:48:b2:57:51:d9:f0:0d:d3:f8:ab:ef:f8:ed:e0:3e:b1:a8:
29:52:ea:fd:aa:7f:08:23:e2:77:6b:02:5b:1c:6c:b7:99:48:
85:44:ef:2d:4f:a5:13:27:a6:84:dc:4b:7b:34:80:52:d9:65:
6f:bf:65:a6:04:0e:ae:71:78:b0:5f:02:13:70:8c:d8:cb:74:
ae:37:fa:bc:86:c6:f2:06:44:2c:29:37:a1:6a:53:e2:2c:a6:
26:ad:92:4c:3a:40:33:06:77:c0:77:9e:10:bb:7a:cf:44:9a:
03:08:93:cb:b1:70:a8:7e:7b:af:c1:bb:ba:ed:dc:a7:37:c9:
97:91:83:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:31:46 2025 by rpki-client