Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/4vop7LyRhxNreOFlIjoEVbHCKVM.roa
File: 4vop7LyRhxNreOFlIjoEVbHCKVM.roa (raw, json)
Hash identifier: HYEQ4MME32CUUw9RsHwM2yCEoniD6Q71CFQGJTezkoY=
Subject key identifier: E2:FA:29:EC:BC:91:87:13:6B:78:E1:65:22:3A:04:55:B1:C2:29:53
Certificate issuer: /CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Certificate serial: 0196CA3747F511AE600777C07AA5F0C288A4
Authority key identifier: AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/4vop7LyRhxNreOFlIjoEVbHCKVM.roa
Signing time: Tue 13 May 2025 15:15:42 +0000
ROA not before: Tue 13 May 2025 15:15:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214584
IP address blocks: 185.182.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 May 2025 08:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:37:47:f5:11:ae:60:07:77:c0:7a:a5:f0:c2:88:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Validity
Not Before: May 13 15:15:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2fa29ecbc9187136b78e165223a0455b1c22953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1c:90:d3:80:da:b2:3c:63:d9:fb:1e:8f:a9:
89:fa:11:fb:61:43:30:72:df:5d:d3:ea:a5:ba:c0:
91:92:43:de:26:2c:a7:fc:a4:c8:7f:88:d4:7f:73:
23:ac:ca:0c:6b:52:57:01:e4:4f:38:84:48:22:37:
14:ea:bb:11:59:6c:54:61:a5:00:9a:ad:2e:06:5a:
c1:d3:94:ad:eb:ab:81:38:b1:d7:2c:17:bb:83:9b:
20:4a:77:cd:b4:41:9b:b6:63:46:b7:d9:1a:70:2e:
ec:ae:68:91:7d:a0:03:b2:9f:8b:f2:92:08:52:43:
cc:5a:bc:a1:36:c8:f3:34:db:2c:dd:3e:6d:8b:9a:
46:66:a7:51:ca:c0:04:e1:16:28:6a:e3:0e:33:b1:
64:3b:cf:01:db:6b:e5:d7:32:45:34:6d:3e:64:49:
52:41:07:49:2b:75:d4:52:bd:83:1d:c6:38:22:65:
8b:72:3d:a7:a8:72:0c:3f:68:c6:cc:4f:6b:c1:fc:
37:df:98:b5:7f:ff:3a:eb:cc:87:22:37:0d:b8:76:
0f:45:91:ac:a5:e3:7f:8e:f0:e5:d7:dc:ee:e0:f3:
37:86:af:0f:2a:e0:83:b1:76:c8:17:76:a6:6b:c3:
5f:c9:0a:06:cd:17:7d:b1:f6:45:d0:4a:7e:88:a9:
5b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FA:29:EC:BC:91:87:13:6B:78:E1:65:22:3A:04:55:B1:C2:29:53
X509v3 Authority Key Identifier:
keyid:AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/4vop7LyRhxNreOFlIjoEVbHCKVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.188.0/24
Signature Algorithm: sha256WithRSAEncryption
80:e7:cd:e9:a8:0b:62:f0:9d:64:b6:21:82:c5:e2:c1:7e:6e:
d4:b6:97:3d:6b:85:f9:b8:85:be:db:b5:24:68:3d:18:a7:b2:
8d:b4:5b:7c:5a:8c:56:d9:0a:48:ec:85:b8:82:5c:6d:c0:8d:
2c:53:9c:c3:1d:5d:9e:42:84:5d:2b:91:47:4f:ef:c5:87:bf:
ee:3b:0d:bd:71:9d:33:65:c5:3c:d9:d2:98:96:7e:74:21:7f:
27:96:a3:3f:f7:1c:be:b2:07:df:44:61:56:f7:dc:8f:c4:8d:
5a:ae:8e:14:55:79:04:cb:11:d2:4b:dd:9c:79:e7:0a:91:f4:
b3:58:f7:47:ba:9f:b8:2c:db:ca:be:36:c2:10:de:d2:96:90:
1e:b7:85:b0:c6:4a:2d:40:27:a9:44:5c:cc:35:07:4d:9d:ee:
52:20:63:88:4d:a5:87:98:f5:b3:1b:3f:71:cd:7a:a4:24:cf:
91:56:f4:7e:06:07:ed:7c:16:3e:ec:e6:0e:cf:00:6b:fb:49:
b5:4a:51:df:fb:86:de:72:e8:5a:59:f8:30:75:a9:e0:89:a4:
ed:c2:1c:a0:6b:8f:bd:5a:1e:2c:1f:a8:6d:d0:f2:ff:89:43:
41:40:61:e3:fb:c3:81:3a:27:12:54:6f:c8:48:d7:36:7b:27:
e0:00:32:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:25:47 2025 by rpki-client