Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/reRByaj589R3C-FPd47zqHPLL74.roa
File: reRByaj589R3C-FPd47zqHPLL74.roa (raw, json)
Hash identifier: TMwZCPLusPWRH4nzT7ghK4BxSJvRn9/+XksPNnPLS8I=
Subject key identifier: AD:E4:41:C9:A8:F9:F3:D4:77:0B:E1:4F:77:8E:F3:A8:73:CB:2F:BE
Certificate issuer: /CN=b945674f01fec565971c950f3512165c43ffdfb6
Certificate serial: 018CC3B737B111936B2BF09DC24817F32907
Authority key identifier: B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/reRByaj589R3C-FPd47zqHPLL74.roa
Signing time: Mon 01 Jan 2024 06:30:13 +0000
ROA not before: Mon 01 Jan 2024 06:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201902
IP address blocks: 185.59.92.0/22 maxlen: 24
5.182.8.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Mar 2024 15:27:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:37:b1:11:93:6b:2b:f0:9d:c2:48:17:f3:29:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945674f01fec565971c950f3512165c43ffdfb6
Validity
Not Before: Jan 1 06:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ade441c9a8f9f3d4770be14f778ef3a873cb2fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d4:be:97:01:4a:15:fd:2a:48:1a:8a:e9:16:
15:37:22:d4:f6:7b:7b:7c:ca:88:3e:e9:0f:e3:70:
3a:74:a7:c2:8d:95:ac:82:fa:e7:80:83:d2:5b:19:
a7:04:23:ee:de:dc:26:86:52:38:db:9b:4a:20:c0:
9c:60:94:e3:a6:23:84:32:09:7c:4d:8d:77:fd:89:
af:3f:7d:14:0b:fc:bd:09:a4:cb:c5:e4:4a:00:32:
c1:83:01:5b:56:46:b3:71:6c:c2:eb:03:9f:69:ce:
7e:cf:cf:eb:e5:f2:ae:80:23:ea:29:09:aa:21:1d:
0c:d4:dd:87:45:c7:a9:7f:3a:f2:04:06:8f:d5:c4:
70:5c:ea:15:4d:9a:1c:e9:8c:c6:2a:df:30:ec:e8:
01:9c:49:8b:7e:f0:21:84:d3:56:14:96:88:ab:ac:
04:73:6b:82:38:06:be:cd:27:ab:b3:2a:f5:60:56:
f0:94:93:16:ba:0b:f0:5d:fa:e4:81:5b:4b:b7:73:
6c:c1:13:42:1b:ce:d3:aa:eb:7d:69:b7:91:b5:5e:
df:72:b4:0f:1e:6e:b6:01:6e:27:29:b4:b8:eb:78:
97:a3:81:88:68:aa:d9:2f:fa:60:5e:15:76:1f:ff:
28:42:74:0a:ea:7f:7e:45:ed:5b:51:26:c9:b6:f4:
1e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E4:41:C9:A8:F9:F3:D4:77:0B:E1:4F:77:8E:F3:A8:73:CB:2F:BE
X509v3 Authority Key Identifier:
keyid:B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/reRByaj589R3C-FPd47zqHPLL74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.8.0/22
185.59.92.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:6e:a5:c6:45:2d:6d:6b:9c:88:0d:12:29:b3:5c:ca:a5:ca:
9e:23:f8:af:93:70:e0:8a:67:f4:1e:4d:d8:cb:a8:a0:13:60:
2b:02:64:9c:85:fc:11:8e:83:39:8b:96:ea:09:dd:8c:86:4c:
a9:37:3e:e1:8f:3a:3e:13:28:38:57:68:26:53:01:ce:14:ac:
99:90:a9:ee:b7:f5:4a:dc:7d:23:8d:d7:ce:00:b0:ab:05:77:
9e:33:10:e1:9c:30:cc:c9:01:de:bd:ed:68:31:0a:44:e5:d9:
98:d7:c7:92:8c:29:de:b6:7d:45:72:68:d3:b6:73:49:e0:9b:
12:a4:28:41:0b:c7:bc:6e:be:62:8a:ed:6f:cd:05:5b:4e:d3:
e3:0e:fb:7c:90:96:3b:2c:e2:7f:86:b2:48:b9:52:49:fc:95:
b3:87:42:64:9a:2d:98:ee:82:06:3f:2f:c8:89:81:dd:26:a9:
ec:99:3f:44:b3:b6:55:0f:94:87:e1:53:62:ca:73:a2:5f:3a:
a6:99:86:58:09:e7:ab:f0:95:0c:ae:67:46:14:4c:77:4b:ce:
22:97:5f:a4:48:57:31:7b:7d:5c:b9:e7:ec:29:33:90:6d:0e:
ce:44:22:5e:af:24:66:47:de:2a:32:50:9f:61:0e:de:a0:49:
c9:5b:f8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:36:28 2025 by rpki-client