Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/v_M8eor6xVA7n1oZTIZPcLfIsos.roa
File: v_M8eor6xVA7n1oZTIZPcLfIsos.roa (raw, json)
Hash identifier: sicKhx8uKWELJoP5WwbpebrhHOB7DLFxoS4hMHt/FCI=
Subject key identifier: BF:F3:3C:7A:8A:FA:C5:50:3B:9F:5A:19:4C:86:4F:70:B7:C8:B2:8B
Certificate issuer: /CN=d982791736cdddd1328d0dd0decae92c058d6f25
Certificate serial: 0194A3418077FF17D02057CB8A76F5FD99AA
Authority key identifier: D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/v_M8eor6xVA7n1oZTIZPcLfIsos.roa
Signing time: Sun 26 Jan 2025 15:36:06 +0000
ROA not before: Sun 26 Jan 2025 15:36:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206389
IP address blocks: 185.173.216.0/24 maxlen: 24
185.173.217.0/24 maxlen: 24
185.173.218.0/24 maxlen: 24
185.173.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jan 2025 17:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a3:41:80:77:ff:17:d0:20:57:cb:8a:76:f5:fd:99:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d982791736cdddd1328d0dd0decae92c058d6f25
Validity
Not Before: Jan 26 15:36:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bff33c7a8afac5503b9f5a194c864f70b7c8b28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9e:21:40:89:64:4b:6a:d7:25:02:21:f5:50:
d6:02:75:1c:ff:2d:ab:83:bd:a5:25:77:2f:94:e9:
0c:f3:ea:db:d4:3b:36:66:2b:ce:2c:ad:73:b3:31:
b6:45:e8:88:4b:b7:78:ee:d8:f0:d7:fd:1c:af:5b:
44:9a:a7:c5:9a:a1:81:95:aa:22:3b:d0:02:97:4b:
e2:e8:b6:56:f9:01:c1:ef:4b:27:66:ce:de:84:a0:
2e:f8:00:90:ca:bd:f5:ee:d9:87:09:37:4d:28:49:
81:19:d5:a6:62:2e:4b:77:e2:d6:0f:3d:5b:f7:a0:
34:3b:3e:b3:a5:38:77:9f:35:e7:3b:80:63:2f:29:
75:68:c4:3f:50:0d:f1:af:a8:b5:4a:23:fd:b4:61:
82:7f:18:27:8d:7c:ca:49:82:0b:7f:ba:8f:12:de:
32:b4:6e:26:17:c5:0d:6e:ba:90:d3:90:6a:a9:99:
25:cf:ea:21:c7:63:f6:d7:ed:0e:77:aa:0e:15:59:
02:f9:f1:a3:01:ec:6a:fe:86:c3:39:3a:dd:ed:22:
7a:1c:3c:e0:29:5d:57:8e:ff:69:4e:aa:72:83:1a:
03:13:94:ab:60:7a:58:96:00:64:2b:e4:4e:a1:96:
6e:a9:5d:3c:f6:f1:bb:75:51:b2:43:8e:38:a4:92:
35:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F3:3C:7A:8A:FA:C5:50:3B:9F:5A:19:4C:86:4F:70:B7:C8:B2:8B
X509v3 Authority Key Identifier:
keyid:D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/v_M8eor6xVA7n1oZTIZPcLfIsos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.216.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:f2:e4:6f:10:f7:d9:cc:c7:a7:b8:c5:41:54:3a:36:03:15:
ef:8a:b0:53:74:51:29:03:75:10:2e:d4:1e:f4:f3:e8:8a:17:
d9:65:45:bb:f8:1b:fe:20:23:f7:67:a4:46:67:06:a0:55:8d:
b3:df:0c:03:35:06:2c:c3:58:2f:14:07:c1:d6:b8:3c:da:59:
c8:92:ba:0a:9c:8d:cd:84:c1:09:ca:4c:ed:f9:8a:2e:3b:a6:
2f:c0:43:8a:a8:46:18:21:8f:5d:52:a3:fe:cc:d6:6b:6f:76:
28:fd:52:e2:03:57:77:f6:62:e7:79:20:f7:35:6d:89:8c:bc:
7d:d1:d2:b1:5f:db:6f:6a:f9:32:1f:78:b3:0a:59:c4:e6:40:
48:02:ec:1a:f9:d4:dd:e4:36:1e:f7:31:58:c9:30:77:51:2e:
ad:70:65:ed:00:db:57:ff:97:02:f8:c1:61:21:10:2e:b0:4b:
69:9f:29:b5:d4:f9:84:9d:f5:71:ee:3e:81:a7:10:35:52:51:
52:e4:5d:05:4d:6b:6d:ca:76:62:c8:26:42:fc:8c:16:d6:5c:
8f:f2:1f:46:1f:a7:16:be:75:36:27:5c:35:77:da:5a:2d:eb:
7d:ca:11:1c:ef:1a:0e:d0:f5:cb:23:2e:11:a2:49:18:9c:87:
4d:cd:4f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:47:42 2025 by rpki-client