Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/c0wrxOxwPtbzhoWKiuOkCVLBOio.roa
File: c0wrxOxwPtbzhoWKiuOkCVLBOio.roa (raw, json)
Hash identifier: grbQuzldo4REnbbnkxS4UaMFTYIXikQZylqxRVV4b18=
Subject key identifier: 73:4C:2B:C4:EC:70:3E:D6:F3:86:85:8A:8A:E3:A4:09:52:C1:3A:2A
Certificate issuer: /CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Certificate serial: 01963373A833342AFF109FFA74EAC7B8F9B8
Authority key identifier: 2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/c0wrxOxwPtbzhoWKiuOkCVLBOio.roa
Signing time: Mon 14 Apr 2025 08:38:59 +0000
ROA not before: Mon 14 Apr 2025 08:38:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202311
IP address blocks: 185.53.188.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 29 Apr 2025 14:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:33:73:a8:33:34:2a:ff:10:9f:fa:74:ea:c7:b8:f9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Validity
Not Before: Apr 14 08:38:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=734c2bc4ec703ed6f386858a8ae3a40952c13a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6c:10:ac:e6:1a:0d:80:d9:1e:66:66:e7:c2:
9c:b8:e7:18:c1:4c:2f:8d:b5:bb:b4:f8:d5:a7:8d:
fb:0a:72:cc:78:b7:2a:8f:35:96:35:bb:b0:0d:c0:
a0:6b:0d:29:56:9b:fe:2e:49:24:3d:91:92:da:e2:
53:c4:b2:ba:6f:eb:a7:eb:d8:f9:3b:69:ca:10:2f:
6b:67:87:36:1b:12:80:70:67:1e:2e:ee:3c:29:3e:
93:5f:fe:fe:71:41:16:47:ba:fa:af:99:fd:6d:dc:
6d:1a:7f:11:a0:4c:42:c7:ad:77:c9:01:f3:3a:01:
e6:10:e7:0c:60:65:08:f1:38:e8:d7:4a:71:c4:fc:
e1:9a:0f:83:e9:29:80:22:45:2a:bb:6a:04:b9:32:
ce:2b:bf:ab:37:ef:75:b7:1f:33:2c:ee:25:a1:f2:
9d:1f:ce:40:6e:9f:f9:70:b8:6d:8e:80:93:34:a8:
a8:8c:79:fc:53:01:22:d1:d7:09:33:64:74:2d:7d:
20:18:6c:ce:7c:ca:08:33:12:a5:01:54:69:51:6e:
d0:dc:3b:46:a8:af:4b:1b:8e:a7:71:1b:ad:f5:b4:
d3:e9:aa:c8:3f:94:08:b8:87:71:4f:06:2f:82:71:
f7:6d:63:e6:35:04:74:9d:ab:86:99:2a:da:2d:79:
65:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4C:2B:C4:EC:70:3E:D6:F3:86:85:8A:8A:E3:A4:09:52:C1:3A:2A
X509v3 Authority Key Identifier:
keyid:2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/c0wrxOxwPtbzhoWKiuOkCVLBOio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.188.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:7a:ea:9b:7b:48:ff:51:8a:73:93:5d:a0:89:69:12:73:8f:
7f:58:45:84:fb:62:a7:14:46:64:a1:6b:88:d2:57:1a:c7:9b:
42:58:2e:36:33:86:4b:97:5f:04:33:94:25:7d:73:8c:0a:fc:
6c:de:2e:dd:1f:d3:76:fd:13:c6:5a:7c:a5:b9:87:31:30:80:
e5:0b:cf:48:d8:2f:9b:82:77:6c:ae:53:b3:4d:ea:c3:6e:db:
e5:52:31:6c:e4:e5:15:77:bb:8d:db:4c:28:70:6d:c1:77:b1:
8d:18:fd:c7:4b:f0:39:e1:22:ec:9e:7f:4b:3c:81:33:ba:f6:
35:c9:39:6a:c4:e4:a2:7e:d8:fd:00:18:d6:d6:74:ac:28:38:
36:90:a2:4b:f2:cd:ad:de:b4:2b:8b:cb:5b:a7:c9:03:72:d5:
42:f9:ae:96:fb:96:09:98:02:1f:fe:ee:84:b0:c4:8f:b6:7b:
af:21:0f:63:12:2a:2a:9b:96:65:0e:5b:6f:a5:9d:cd:c1:9a:
a5:e6:ff:38:62:36:c9:7d:d7:5d:d3:39:d9:01:ee:9e:7c:c8:
da:48:0f:90:fb:1f:37:16:03:2c:55:8c:aa:67:9e:06:55:77:
13:15:ba:6d:cc:0e:bb:8c:20:6a:c6:91:4a:8f:2c:51:5c:e9:
23:11:92:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:33:48 2025 by rpki-client