Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/_j4ASsntU8EoTuQfYWcsXW2Cf9s.roa
File: _j4ASsntU8EoTuQfYWcsXW2Cf9s.roa (raw, json)
Hash identifier: O5d+R3fnji3DjhWQ5uet1GCGkSwYsjzfc/mHzHfyQ3c=
Subject key identifier: FE:3E:00:4A:C9:ED:53:C1:28:4E:E4:1F:61:67:2C:5D:6D:82:7F:DB
Certificate issuer: /CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011
Certificate serial: 0196B061EF04F5D8762843AAEC6A76B5B310
Authority key identifier: 4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/_j4ASsntU8EoTuQfYWcsXW2Cf9s.roa
Signing time: Thu 08 May 2025 14:52:10 +0000
ROA not before: Thu 08 May 2025 14:52:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8772
IP address blocks: 185.230.44.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 08 May 2025 14:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:61:ef:04:f5:d8:76:28:43:aa:ec:6a:76:b5:b3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011
Validity
Not Before: May 8 14:52:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe3e004ac9ed53c1284ee41f61672c5d6d827fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dc:30:80:c6:5d:bf:d4:5a:66:6b:bd:9e:e0:
3a:1e:f8:70:d0:cb:a1:2a:d3:8c:f9:f5:b0:b4:d4:
07:37:49:3f:6e:72:b6:b4:a1:7c:f8:48:75:80:82:
2f:90:94:0a:bb:43:e6:28:02:ba:99:7b:54:df:81:
b6:cd:1d:e3:98:98:a8:bd:1c:11:4e:8a:54:64:49:
36:4f:8c:24:08:46:c9:cc:a8:d5:50:51:f4:37:56:
e7:02:58:61:0f:2a:20:d6:60:92:17:d9:72:5a:43:
dd:c7:89:e0:69:5f:a9:26:7a:47:56:43:e5:a7:63:
c2:9e:ee:c6:e8:2e:02:f3:5c:b8:16:e5:0c:a9:d1:
f2:ec:6d:f9:b5:b2:5c:fa:0e:26:27:57:a6:fc:86:
43:a4:92:69:fc:0c:5b:31:ed:d7:af:b3:2f:4f:ff:
90:1c:55:79:dc:c6:90:f2:0c:46:a4:86:a3:b3:3e:
ce:bd:73:0d:92:d2:7c:9f:e9:a2:c7:9d:0b:77:f0:
65:f5:e9:4a:5d:77:43:5b:da:e3:b1:a9:a0:d0:84:
7e:7b:8a:17:12:66:ce:c5:8e:0c:b4:ee:16:d4:48:
07:58:39:9f:80:91:bb:dc:fd:01:bd:52:1e:73:99:
44:08:f9:2a:0c:48:89:34:87:21:8b:6b:78:8a:e7:
3f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3E:00:4A:C9:ED:53:C1:28:4E:E4:1F:61:67:2C:5D:6D:82:7F:DB
X509v3 Authority Key Identifier:
keyid:4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/_j4ASsntU8EoTuQfYWcsXW2Cf9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.44.0/22
Signature Algorithm: sha256WithRSAEncryption
35:fe:c1:65:50:8d:04:fc:2c:77:94:ab:bf:ed:b7:b2:c2:a0:
6c:fa:ba:82:80:d2:3a:c8:92:3a:d3:d0:91:b9:b7:ff:71:21:
3e:d4:b5:8b:82:df:fb:5e:44:5e:d0:8b:9a:97:3a:19:34:d6:
ff:b5:e7:c8:cd:0d:c5:d6:7e:f4:37:0f:04:a6:44:f0:bf:8e:
24:d7:7b:f8:a9:74:29:5f:bf:cb:b8:80:21:e1:63:5e:8f:bc:
d9:36:3a:5f:ce:44:fc:3d:b1:2e:0a:12:e9:5c:91:e5:d5:b4:
a0:8d:d0:f4:2f:9c:a7:8b:77:70:30:12:ac:39:c2:12:29:d1:
a1:f4:5d:66:b6:e2:e6:a1:b6:b4:be:dc:8f:3e:3f:9d:1b:bb:
32:07:4c:3f:30:f2:ef:d5:f4:e4:b6:25:c2:49:d0:41:0e:04:
3f:ee:da:9f:71:ff:38:85:50:21:6a:05:5f:8a:8f:e4:06:87:
dc:07:ff:eb:9a:9d:0d:29:e0:bc:50:47:21:1d:ef:94:d7:9f:
b7:4f:db:ce:6f:8c:af:5d:62:a5:43:c8:03:d0:dd:ba:9b:85:
7b:2f:5b:f9:5c:8e:b5:7c:27:fa:9e:2f:76:5d:6a:7d:e0:48:
24:da:ad:d4:d5:08:65:36:89:80:08:c5:0f:04:2d:c2:de:c7:
8f:d6:67:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:17:51 2025 by rpki-client