Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/4VvPJt366fG5JQc06TWSe3nApPg.roa
File: 4VvPJt366fG5JQc06TWSe3nApPg.roa (raw, json)
Hash identifier: f717KF6ocmkeWlCKl4SnnukJlWqdotD18iLk1/wpVuk=
Subject key identifier: E1:5B:CF:26:DD:FA:E9:F1:B9:25:07:34:E9:35:92:7B:79:C0:A4:F8
Certificate issuer: /CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Certificate serial: 019503952D85A90613C3DA3C88AA160FB07D
Authority key identifier: 51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/4VvPJt366fG5JQc06TWSe3nApPg.roa
Signing time: Fri 14 Feb 2025 08:31:02 +0000
ROA not before: Fri 14 Feb 2025 08:31:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13287
IP address blocks: 185.247.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 11:47:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:03:95:2d:85:a9:06:13:c3:da:3c:88:aa:16:0f:b0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Validity
Not Before: Feb 14 08:31:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e15bcf26ddfae9f1b9250734e935927b79c0a4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:80:88:27:87:01:72:d0:16:03:af:11:4b:f2:
23:38:42:46:0c:71:96:e1:cd:cc:48:51:87:47:a3:
93:cd:b6:98:da:41:da:72:91:c9:9f:95:36:a7:e7:
ac:6e:43:e1:5d:c6:9b:85:de:85:7e:36:fe:7c:c4:
08:ca:3c:01:0a:dd:b6:d5:95:de:ea:65:cb:9a:5e:
7d:99:b0:01:d2:76:3d:bf:64:37:2c:cb:86:02:e6:
6d:62:f9:e1:e5:2a:d9:12:6c:6b:39:05:88:9f:6f:
cd:47:1d:5d:33:3f:38:62:ea:ff:b4:bd:8f:19:ce:
35:e6:d2:b1:6c:b8:cd:51:e1:6c:b9:44:ee:2b:31:
a9:38:50:a9:04:00:26:c0:4b:e2:6a:4e:a0:14:16:
a1:e5:d9:71:7e:a4:4f:9a:28:f3:19:29:e6:9f:a4:
60:ae:37:3e:e6:a9:55:cd:d1:20:04:4a:6a:16:48:
34:2d:27:8c:41:b1:fa:d0:25:67:bd:71:a6:9c:50:
0d:7e:5c:e7:7a:ac:2c:41:eb:87:16:3a:80:83:b3:
f4:90:d2:25:35:5d:d5:75:91:eb:9b:fc:21:7a:ee:
1a:80:f4:a5:5f:06:d7:ba:2e:4f:e2:ed:1e:55:fb:
1b:b7:04:a7:93:6d:cb:b6:41:6b:6e:04:78:b3:91:
6d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5B:CF:26:DD:FA:E9:F1:B9:25:07:34:E9:35:92:7B:79:C0:A4:F8
X509v3 Authority Key Identifier:
keyid:51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/4VvPJt366fG5JQc06TWSe3nApPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.127.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:c0:81:c2:d0:fa:d8:99:60:e6:52:27:db:ca:17:46:ba:f7:
34:27:cf:a0:fc:c1:5c:ed:d8:28:48:2a:84:e3:1f:a2:3c:74:
c5:56:cf:a0:17:53:01:a2:83:1d:24:e5:68:e8:30:81:7d:8b:
bf:80:b8:03:5c:a2:eb:08:f9:41:c2:bc:07:17:3e:d2:0a:c8:
60:8b:94:2a:8f:54:32:69:ed:cc:30:3a:9d:90:ce:02:20:d4:
49:21:34:25:dd:ba:de:ee:6f:92:02:aa:6c:df:5c:aa:82:e4:
78:5b:4d:61:5b:68:bf:d0:d0:26:1f:f9:6f:7a:b2:d2:7e:04:
c4:ac:36:e4:31:40:54:a5:08:1c:56:e9:a0:61:03:3a:d0:eb:
f2:6d:a7:3e:91:af:92:72:ea:c0:b2:28:dd:a8:61:9f:31:43:
14:25:40:0c:0b:e1:28:79:22:f0:3c:80:59:88:6f:0e:fd:72:
24:02:b7:a1:44:43:81:7a:34:de:db:37:34:58:26:e5:8e:cf:
9e:d8:eb:6b:38:e4:af:d3:44:a2:99:1b:3a:89:60:a3:3d:74:
ce:61:3c:8d:0e:5e:04:53:ce:db:cf:d5:6f:03:b5:3b:ba:17:
68:e0:3d:b6:47:f1:0d:cc:54:62:dc:af:2b:13:73:61:2f:ae:
15:18:6f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:17:32 2025 by rpki-client