Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/92d5b2-f793-489d-84c9-6bbca4d757a3/1/iDyv3au4DdQKkJMDIyVrLA6mIYQ.roa
File: iDyv3au4DdQKkJMDIyVrLA6mIYQ.roa (raw, json)
Hash identifier: QOvMNN/VziOla6RUMUlCz2cG4keyNvThL/SIdL0OtCU=
Subject key identifier: 88:3C:AF:DD:AB:B8:0D:D4:0A:90:93:03:23:25:6B:2C:0E:A6:21:84
Certificate issuer: /CN=556e82265afb6ba60ee0b0c503c48ca8a09edb34
Certificate serial: 019514549674038B098A3927F41F44DC5118
Authority key identifier: 55:6E:82:26:5A:FB:6B:A6:0E:E0:B0:C5:03:C4:8C:A8:A0:9E:DB:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/92d5b2-f793-489d-84c9-6bbca4d757a3/1/iDyv3au4DdQKkJMDIyVrLA6mIYQ.roa
Signing time: Mon 17 Feb 2025 14:34:02 +0000
ROA not before: Mon 17 Feb 2025 14:34:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42876
IP address blocks: 86.54.12.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 20 Feb 2025 14:08:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:54:96:74:03:8b:09:8a:39:27:f4:1f:44:dc:51:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556e82265afb6ba60ee0b0c503c48ca8a09edb34
Validity
Not Before: Feb 17 14:34:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=883cafddabb80dd40a90930323256b2c0ea62184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9b:11:e0:20:62:da:ff:af:d0:cd:da:84:56:
2f:d6:7c:af:29:c3:bb:63:fc:1b:c9:37:cb:62:00:
49:8e:a3:5f:c2:ca:38:f0:a3:00:14:61:13:fd:77:
cd:ac:a7:0e:86:5b:30:e8:68:4d:ec:f8:f0:d4:aa:
97:da:d5:40:3f:23:97:e0:43:96:13:73:d0:50:d5:
06:fd:31:1f:fb:af:71:c9:96:5e:58:1b:38:5f:73:
67:89:7f:18:1e:75:35:2c:75:46:f3:f4:4d:d4:a2:
2f:95:f7:d6:65:d6:11:9e:81:a6:50:a1:55:da:b0:
ca:6b:5f:ae:0e:28:43:ee:bb:43:a9:f3:15:52:12:
a0:d6:3d:2f:f0:e3:43:d6:83:78:f2:c2:7b:df:46:
32:32:47:77:3c:ae:bd:88:70:35:84:17:e3:a7:41:
25:13:b3:64:85:8a:55:52:8e:20:8b:b7:2d:2a:e1:
05:1f:b5:af:e7:6c:b3:68:5f:1f:0d:c1:b2:33:48:
f0:b8:ec:45:81:66:99:07:5d:72:b8:84:11:9e:e3:
98:ff:dd:d3:16:7f:1d:b3:72:2c:7d:92:6a:d5:83:
83:e2:5b:33:89:ac:77:fa:ff:3e:e4:5e:46:1e:ef:
05:93:5d:fe:24:12:50:32:30:07:48:d6:3c:2a:54:
ef:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3C:AF:DD:AB:B8:0D:D4:0A:90:93:03:23:25:6B:2C:0E:A6:21:84
X509v3 Authority Key Identifier:
keyid:55:6E:82:26:5A:FB:6B:A6:0E:E0:B0:C5:03:C4:8C:A8:A0:9E:DB:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/92d5b2-f793-489d-84c9-6bbca4d757a3/1/iDyv3au4DdQKkJMDIyVrLA6mIYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/92d5b2-f793-489d-84c9-6bbca4d757a3/1/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.54.12.0/22
Signature Algorithm: sha256WithRSAEncryption
50:b1:b9:72:fd:0a:15:9c:64:1f:bb:8c:7f:06:9c:1a:fb:5c:
ad:3b:13:47:66:29:76:c3:dc:ce:3d:07:38:41:bd:3a:0a:8a:
22:37:76:5c:0b:18:2b:b1:7e:da:d8:6f:e4:c5:27:83:6e:e7:
0f:2d:1b:db:12:f3:46:7a:d0:87:9d:93:4b:80:09:76:e0:e2:
9a:94:98:2a:ba:96:f4:e9:93:c4:12:09:92:31:45:37:58:cc:
3d:aa:ff:cc:03:3e:42:91:99:f4:b9:e3:01:e6:d5:7c:03:b8:
7e:91:e5:ec:ef:0f:4e:f6:74:94:19:fd:8f:a9:a0:ba:0f:12:
17:23:5a:63:98:f7:59:60:10:b3:6b:5f:7d:63:96:01:db:69:
21:c7:93:59:71:15:eb:af:2e:88:50:08:63:be:7c:29:7d:5a:
3d:f0:c8:64:7d:3e:ef:62:58:3e:6d:cc:05:03:2f:c5:4a:37:
e5:b6:0a:c4:89:97:4a:08:44:91:f1:2c:9a:55:74:f2:79:b0:
1e:3e:5f:f6:6a:e3:1f:8e:6e:bf:2b:e9:9a:5a:38:0e:4b:56:
eb:7d:89:6f:ab:ae:99:cf:74:f0:2a:c2:22:0b:21:c7:9a:82:
13:4f:6c:1c:13:0a:12:be:9a:37:69:7d:b1:63:52:15:df:dc:
cf:cc:83:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 14:12:01 2025 by rpki-client