Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/p4yg-djV-GbX22CNt_-ZPErjZVc.roa
File: p4yg-djV-GbX22CNt_-ZPErjZVc.roa (raw, json)
Hash identifier: nD4ga6RgVsHflm2s9Ph7xJ/TNmzWHBSKZHTDjGUiRAc=
Subject key identifier: A7:8C:A0:F9:D8:D5:F8:66:D7:DB:60:8D:B7:FF:99:3C:4A:E3:65:57
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194F423E49F5E6BFCF784422A9AD5E16B38
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/p4yg-djV-GbX22CNt_-ZPErjZVc.roa
Signing time: Tue 11 Feb 2025 08:33:00 +0000
ROA not before: Tue 11 Feb 2025 08:33:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43350
IP address blocks: 185.136.204.0/24 maxlen: 24
185.214.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 08:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f4:23:e4:9f:5e:6b:fc:f7:84:42:2a:9a:d5:e1:6b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 11 08:33:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a78ca0f9d8d5f866d7db608db7ff993c4ae36557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d0:cb:07:89:78:62:92:53:33:11:6f:60:88:
6c:83:e9:83:be:ae:d0:cb:b3:08:fe:be:ff:9c:08:
9e:57:01:21:96:de:77:c8:15:e8:45:61:35:57:25:
5b:2c:30:6a:35:72:d0:87:29:f6:d7:fd:62:40:97:
37:83:d9:8e:0f:81:fc:fa:76:81:5f:da:34:9e:b6:
49:c1:80:83:e0:a8:09:17:7c:c7:a9:be:2c:4d:3e:
25:04:6b:1a:1d:3c:25:bb:89:b0:42:f3:63:fb:3d:
77:06:22:0e:9d:d7:7b:ce:90:93:4d:dc:58:8a:4d:
07:7c:b2:08:49:a4:89:80:90:86:24:80:62:91:ce:
f1:65:57:93:93:24:61:41:31:f3:5e:7b:14:38:ca:
a9:e1:83:14:1b:ab:01:21:b9:a2:80:1e:e6:53:71:
cf:fb:31:e1:88:f4:e9:8e:a6:5d:43:07:49:cb:eb:
25:e4:e1:ee:9d:e6:ed:72:33:ca:8b:c7:85:1c:17:
4a:4c:c4:f1:da:4c:1a:ed:37:c9:53:7a:2e:d6:05:
7a:8a:44:0d:77:bc:d7:97:f3:c6:ec:19:c2:f6:ee:
c8:20:ab:c6:a6:0f:68:57:2e:19:ac:01:c0:b0:6e:
24:67:3c:33:70:c1:0e:14:00:15:81:d6:c8:89:42:
6e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8C:A0:F9:D8:D5:F8:66:D7:DB:60:8D:B7:FF:99:3C:4A:E3:65:57
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/p4yg-djV-GbX22CNt_-ZPErjZVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.204.0/24
185.214.74.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ac:d1:ed:cc:6e:76:f0:62:eb:32:45:9f:75:3e:4b:55:e1:
59:e0:ae:37:15:4b:b1:ba:16:3b:4e:32:6e:70:33:7c:fe:cd:
b6:77:7f:3b:bc:a7:34:6f:ee:6d:2e:98:71:c1:a5:8e:e2:85:
ee:9d:5e:5b:9e:3d:58:51:09:41:31:54:73:2b:07:6f:b7:c0:
f2:d3:21:48:42:11:fe:7b:97:03:a4:d2:36:9b:40:31:2b:f7:
5b:0f:1a:5d:8d:15:14:d1:db:9c:c1:86:75:be:ad:68:ba:54:
c2:3d:2d:d1:b5:d2:c0:34:d7:e2:97:55:b8:15:53:0e:35:db:
45:3d:b2:88:9e:a3:c1:0c:2e:9d:ae:ba:7f:ad:57:a1:be:f1:
cf:58:82:4b:2f:3c:9c:be:b3:3a:bd:c0:1c:af:72:5d:7e:22:
15:3e:e5:24:28:90:75:69:ee:83:af:11:12:0c:bf:49:eb:65:
2d:e9:10:3e:1e:d4:e0:6e:75:32:87:44:6c:fe:ec:e1:e6:60:
64:f1:21:4c:2b:12:a6:4f:76:7a:f1:aa:95:b9:75:2f:71:d8:
46:c8:83:01:a9:73:6a:d2:6e:88:d5:2e:f6:a4:bb:83:47:01:
61:cc:33:32:b2:36:8f:27:c6:42:2a:b0:8e:97:a2:87:af:91:
f7:52:b3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:33:36 2025 by rpki-client