Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/phCCyMRo70lGFgDu3SHNJaBXdUA.roa
File: phCCyMRo70lGFgDu3SHNJaBXdUA.roa (raw, json)
Hash identifier: hZXzQAgZvn3ys12fSv0zqHvpKjY1ldCV6et+QqtU7uc=
Subject key identifier: A6:10:82:C8:C4:68:EF:49:46:16:00:EE:DD:21:CD:25:A0:57:75:40
Certificate issuer: /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial: 01942067C8367E5D6D431F3D4FEEB6438495
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/phCCyMRo70lGFgDu3SHNJaBXdUA.roa
Signing time: Wed 01 Jan 2025 05:47:39 +0000
ROA not before: Wed 01 Jan 2025 05:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 185.224.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 19:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c8:36:7e:5d:6d:43:1f:3d:4f:ee:b6:43:84:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Validity
Not Before: Jan 1 05:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a61082c8c468ef49461600eedd21cd25a0577540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f1:76:2b:9c:bd:74:30:5c:a4:1e:86:5c:3d:
80:3f:32:0f:33:52:f3:5e:cd:3c:92:3d:38:0a:54:
c4:21:e3:b2:41:ce:b3:20:14:0b:4c:65:6d:10:8a:
b9:fd:f6:59:1e:9c:e5:1a:3f:7f:95:45:16:4e:3a:
76:aa:a3:5e:25:48:a1:0a:8b:e9:03:d9:18:44:ab:
ae:73:1d:28:ce:f8:cb:3e:ed:0e:4d:ab:71:99:72:
8e:e3:04:b1:f4:fb:a2:71:bc:ff:20:5e:03:fa:78:
c3:96:12:15:70:14:f9:74:65:72:94:c6:e8:50:e7:
0e:5a:bf:1b:1f:fe:74:24:49:24:59:0b:32:6e:6f:
30:5d:b5:e3:47:4b:ce:e1:46:3f:71:cc:ea:88:64:
5f:e3:cd:ec:ef:b9:0a:c5:3e:fc:59:23:fa:dd:e6:
01:bc:a1:3b:37:4a:f6:01:bc:1b:c8:f6:01:d8:d7:
1e:ea:fb:75:c9:2b:c4:05:41:e6:5f:66:c2:69:25:
87:84:7e:c8:3d:65:f6:22:00:98:bd:50:f3:16:39:
e1:c8:91:b0:d5:41:d6:4d:45:c8:76:4f:78:6a:42:
ff:60:ea:01:56:70:1e:2e:f0:3c:25:b1:ae:de:e0:
85:9c:d9:ca:d8:92:ef:5e:09:1d:6b:a7:4c:df:3f:
3d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:10:82:C8:C4:68:EF:49:46:16:00:EE:DD:21:CD:25:A0:57:75:40
X509v3 Authority Key Identifier:
keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/phCCyMRo70lGFgDu3SHNJaBXdUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.0.0/24
Signature Algorithm: sha256WithRSAEncryption
83:e8:2b:52:74:32:cd:52:c8:c2:da:0d:5c:d2:1b:25:e8:e2:
c9:18:50:4d:47:67:9b:e6:b3:ae:2d:28:17:93:44:89:e7:fb:
6a:ef:1c:95:ce:ae:ed:40:89:1a:70:ec:05:6e:8a:f7:06:05:
b9:ad:06:96:0e:2c:ec:8e:01:08:27:10:5c:93:69:88:ba:e8:
a3:2a:e2:56:51:6a:83:66:e0:e5:2e:bb:74:6a:8c:bd:b8:40:
c5:bf:75:e8:0e:70:ad:c2:00:65:a3:90:93:d8:74:21:3e:a1:
75:89:16:9e:2b:ef:ad:01:11:3d:7d:b9:f3:3d:4f:a0:07:f0:
26:4d:a2:1b:f5:b3:e9:6c:bd:e9:5d:65:26:49:78:85:c4:2d:
bc:55:26:fa:44:62:40:38:b7:2f:69:de:2a:c7:68:53:56:ee:
23:0c:26:89:b9:0f:a9:d2:14:27:58:4c:2f:b0:b4:23:ff:74:
a4:29:62:4a:91:c0:1f:31:bf:f5:7e:ef:8e:fd:40:5c:5f:49:
ab:69:66:e0:7c:2c:cf:25:57:86:88:62:fa:bf:51:16:8b:35:
39:d3:50:6b:23:b4:0f:dc:63:87:f5:49:ae:59:63:cd:50:9a:
bf:e4:b0:ad:80:5e:d6:78:b8:b9:93:54:57:3d:16:aa:65:30:
99:f7:77:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:39:23 2025 by rpki-client