Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pZLuHRv-VTSZsodbWps7Ny00eSg.roa
File: pZLuHRv-VTSZsodbWps7Ny00eSg.roa (raw, json)
Hash identifier: piuRBjm28LaJR5bYyCw61ea8v90rLtn0M9tWiG09cYA=
Subject key identifier: A5:92:EE:1D:1B:FE:55:34:99:B2:87:5B:5A:9B:3B:37:2D:34:79:28
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193E0183BBB365F8E58053EABF93058A564
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pZLuHRv-VTSZsodbWps7Ny00eSg.roa
Signing time: Thu 19 Dec 2024 18:05:04 +0000
ROA not before: Thu 19 Dec 2024 18:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35197
IP address blocks: 185.226.173.0/24 maxlen: 24
185.226.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e0:18:3b:bb:36:5f:8e:58:05:3e:ab:f9:30:58:a5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 19 18:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a592ee1d1bfe553499b2875b5a9b3b372d347928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:63:72:25:9b:89:39:11:b5:d0:ab:af:93:07:
71:69:51:da:ed:3e:de:46:34:72:8b:a6:72:39:32:
c0:ec:a2:c5:9f:59:92:86:16:9c:b3:94:24:c8:82:
af:5a:fc:80:24:aa:69:13:1d:72:40:21:3e:8b:43:
c1:ee:57:8e:a9:e9:08:af:76:f0:68:8f:c9:34:dd:
d7:a9:0b:3d:fd:50:1e:e8:7a:d8:10:c1:31:38:66:
40:f4:a1:29:27:16:04:39:b6:df:ae:56:21:6a:b4:
20:66:1d:fd:16:d4:22:e4:a0:58:a6:47:d3:d2:8b:
39:28:e4:de:17:c4:e0:db:98:07:a0:2a:21:e3:f6:
a8:ea:80:a8:56:a2:1a:2c:e9:b9:f9:2a:49:74:55:
e5:85:66:da:b2:21:88:a8:e4:e9:d0:b7:a5:b7:0b:
42:d0:2b:9d:2e:ce:72:4f:32:1c:4f:88:a1:f6:32:
94:89:d9:46:d7:d0:f8:45:d3:d5:45:9f:a5:32:68:
c1:7d:9a:b8:9c:20:1a:86:a3:6b:06:5d:5f:0e:fa:
f1:3b:eb:97:04:03:b5:db:3e:08:1a:57:a5:b1:d8:
d5:08:4f:7d:bd:27:e3:39:63:da:bd:ed:56:ab:97:
e0:d3:09:4d:17:f2:2c:9d:47:82:30:ae:97:82:cc:
31:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:92:EE:1D:1B:FE:55:34:99:B2:87:5B:5A:9B:3B:37:2D:34:79:28
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pZLuHRv-VTSZsodbWps7Ny00eSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.173.0/24
185.226.175.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:67:50:cb:1c:62:25:0b:52:91:4c:37:1f:6a:d6:72:85:e0:
28:06:90:ae:dc:86:03:2a:e1:8f:42:52:f4:5e:80:17:e7:f9:
58:77:13:5d:ff:08:16:d4:3f:d1:3b:33:07:13:3f:46:83:5c:
92:4f:4c:e5:e7:a1:72:21:be:38:e4:0c:11:18:2f:6c:8d:21:
c4:f0:0e:6c:62:08:b1:1b:53:39:70:9b:1c:42:3a:82:99:83:
35:e1:3e:a3:be:7d:8c:da:6d:57:68:fd:6b:da:6d:ed:b9:66:
2b:39:0b:09:e6:e6:6a:2e:a8:52:85:c6:63:84:24:3d:b8:56:
36:0c:ab:fa:fe:3e:e8:e8:f9:d6:8f:01:eb:cb:4d:2e:83:9c:
74:ef:99:80:65:db:3a:f3:6f:86:b4:71:84:82:a9:96:8d:5f:
1a:2e:f7:8e:6e:65:95:9d:19:ef:a4:6e:c2:df:08:29:17:78:
73:07:c4:d5:3a:ad:00:ca:ec:2b:73:c6:6a:01:9d:d0:2e:0a:
bc:a7:7a:98:49:2d:60:df:22:68:ea:78:74:87:cf:8e:73:a6:
56:df:c8:7d:58:4f:f3:b1:bf:8d:13:bc:70:16:a7:e6:93:0e:
1b:67:38:1a:2a:fb:b3:0f:bb:c8:4d:b1:b9:ca:5e:cc:70:29:
f7:41:00:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:48:13 2025 by rpki-client