Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/HuF5fFuarU9bbZwOG9vd8LRHpcg.roa
File: HuF5fFuarU9bbZwOG9vd8LRHpcg.roa (raw, json)
Hash identifier: yy/07g73kaU+1fVXhUvBFpN1sBzQE4Bmy5FbD+P+TJ0=
Subject key identifier: 1E:E1:79:7C:5B:9A:AD:4F:5B:6D:9C:0E:1B:DB:DD:F0:B4:47:A5:C8
Certificate issuer: /CN=f76fd568674856415eb1e21342aaf323b37b7a2e
Certificate serial: 01956B530D76E419EB8BCA969CEF8D64A516
Authority key identifier: F7:6F:D5:68:67:48:56:41:5E:B1:E2:13:42:AA:F3:23:B3:7B:7A:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92_VaGdIVkFeseITQqrzI7N7ei4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/HuF5fFuarU9bbZwOG9vd8LRHpcg.roa
Signing time: Thu 06 Mar 2025 11:59:19 +0000
ROA not before: Thu 06 Mar 2025 11:59:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 185.77.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Mar 2025 09:14:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6b:53:0d:76:e4:19:eb:8b:ca:96:9c:ef:8d:64:a5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f76fd568674856415eb1e21342aaf323b37b7a2e
Validity
Not Before: Mar 6 11:59:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ee1797c5b9aad4f5b6d9c0e1bdbddf0b447a5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:64:a9:41:a5:e2:4a:87:6b:43:ca:d6:5c:
01:12:1a:26:20:d8:54:d7:b9:8a:2f:aa:42:20:76:
a2:67:48:24:8f:5d:71:3b:2d:cf:7c:1c:18:e1:5a:
90:1a:a1:51:0f:7d:33:2b:8c:8d:8b:6c:3d:4a:83:
5d:60:ce:bb:a0:a0:b9:6b:f9:e1:f3:7a:ab:ce:d7:
f7:88:0a:32:68:fc:8e:2e:e0:74:88:91:e7:e7:ec:
6f:f2:b9:6b:ac:13:b2:fd:58:0b:f2:56:d5:cd:ad:
10:af:99:6f:47:60:dd:bc:0e:82:31:3f:4a:11:ec:
3e:0d:30:1e:41:2c:39:c3:7a:86:eb:74:25:0e:ee:
90:af:9a:ca:f4:16:a2:8d:5b:b1:c1:75:41:b1:3d:
ab:5d:8c:df:69:cd:99:00:72:3d:12:89:eb:9a:90:
6c:79:25:a5:d9:e7:36:9e:bc:cf:70:7f:a0:d2:2f:
20:c4:0b:23:2d:1e:bf:12:5f:1f:e1:8d:a2:07:97:
54:5f:92:f9:6d:9f:a9:38:94:f8:80:a7:33:2c:66:
e2:38:9d:8b:bd:d8:52:fc:bc:e0:2c:2b:d1:1f:4d:
83:35:aa:35:36:1c:70:84:9a:21:ab:dd:ba:36:d4:
2d:f0:01:c3:fb:a4:2d:f7:d4:7b:3b:b8:47:1c:f9:
23:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E1:79:7C:5B:9A:AD:4F:5B:6D:9C:0E:1B:DB:DD:F0:B4:47:A5:C8
X509v3 Authority Key Identifier:
keyid:F7:6F:D5:68:67:48:56:41:5E:B1:E2:13:42:AA:F3:23:B3:7B:7A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92_VaGdIVkFeseITQqrzI7N7ei4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/HuF5fFuarU9bbZwOG9vd8LRHpcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.98.0/24
Signature Algorithm: sha256WithRSAEncryption
71:5a:3a:f3:51:de:03:71:38:c8:6c:1e:4b:16:8a:7c:2a:b4:
47:c6:bc:f2:38:c5:31:80:e2:39:f8:0c:34:a7:47:58:a6:cb:
9c:9c:0b:ee:cd:a2:f9:1d:c4:e3:e9:ad:e7:04:44:3c:98:f7:
dc:56:c8:55:e1:0e:5f:c1:6d:29:2e:49:23:7b:3f:c7:f7:10:
79:ee:29:49:43:95:82:48:45:73:cb:dd:ca:94:f4:4a:c2:23:
f6:83:50:d3:6b:34:40:5b:76:50:c2:66:62:e1:ce:62:a1:48:
5d:86:ba:e4:ac:20:e4:ab:b6:8a:36:01:4d:ce:49:9a:6b:36:
de:e7:52:ee:2b:d5:5b:83:05:34:fa:4c:8a:38:9c:44:04:8f:
40:48:35:cf:2d:2c:6a:65:31:1a:d4:cf:fe:8f:c5:32:30:80:
9c:12:d2:4b:35:45:3b:e7:7b:9d:0e:58:79:01:79:e3:49:48:
2c:f0:37:6b:bb:09:a0:9b:e0:29:94:56:fa:a4:e6:97:c6:b0:
c4:77:5e:7b:8c:0e:99:14:33:70:19:1e:60:a9:e0:2f:b0:74:
5b:96:af:34:9e:3f:7c:91:eb:b8:e9:4a:52:a9:2a:ca:9e:47:
29:17:7c:fc:8e:a6:db:ce:dc:9c:f3:48:b4:10:c6:55:54:61:
6c:c6:f0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:35:52 2025 by rpki-client