Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/itXEep34hcmryu3aaTgTLJY_-sg.roa
File: itXEep34hcmryu3aaTgTLJY_-sg.roa (raw, json)
Hash identifier: KwMa3gADNU9xS6IlcJ8dw96R7X33vTN4x0Q8APbHMxs=
Subject key identifier: 8A:D5:C4:7A:9D:F8:85:C9:AB:CA:ED:DA:69:38:13:2C:96:3F:FA:C8
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 01967C404B2EDA44EA98BF1AE0A099E2B3F1
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/itXEep34hcmryu3aaTgTLJY_-sg.roa
Signing time: Mon 28 Apr 2025 11:55:10 +0000
ROA not before: Mon 28 Apr 2025 11:55:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 62.164.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 May 2025 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:40:4b:2e:da:44:ea:98:bf:1a:e0:a0:99:e2:b3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Apr 28 11:55:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ad5c47a9df885c9abcaedda6938132c963ffac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fc:4e:72:b4:96:b5:14:ad:ff:3f:23:04:00:
98:30:b4:4a:90:d5:42:14:4b:41:f8:50:f0:a0:35:
12:70:ad:9b:f4:8a:9f:ed:c5:16:0e:d6:bb:9a:e0:
60:e5:ac:2c:03:5e:0f:61:29:fe:2b:55:24:52:4d:
33:47:a8:7b:29:90:df:e3:fc:5d:17:83:56:d3:fc:
1c:49:1a:49:00:c2:ea:a2:ed:3b:c8:ca:db:09:a2:
43:d4:71:8f:28:9a:d3:22:ac:3b:16:17:97:e5:22:
9e:e1:ec:f3:6b:50:a8:0c:d9:40:c4:f5:6c:af:1b:
4d:f3:2d:35:40:ce:c2:ac:a2:8f:12:26:f9:fd:3b:
22:65:14:87:a9:ae:2a:d7:fc:4a:a5:37:97:2c:57:
e2:57:64:6b:c9:8c:73:b8:b1:0e:d4:5e:e1:f8:5e:
20:3f:4d:ec:18:fd:f6:b5:5b:3a:6d:e3:ff:51:61:
da:e4:5f:f3:9a:61:77:8e:56:92:0d:29:dd:74:13:
11:99:c6:5a:fc:4f:e8:db:6d:33:7c:70:53:17:2c:
56:8d:d1:12:76:93:53:e5:2f:97:16:ce:84:f1:a0:
73:10:83:bb:e3:b1:f7:e2:3f:8c:e7:4a:5a:89:87:
a3:c2:13:b5:91:42:46:28:76:fc:2f:44:4f:10:aa:
6d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D5:C4:7A:9D:F8:85:C9:AB:CA:ED:DA:69:38:13:2C:96:3F:FA:C8
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/itXEep34hcmryu3aaTgTLJY_-sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.193.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:1e:de:fa:7a:04:aa:25:50:f4:70:73:af:44:ec:d5:0e:69:
51:42:27:bd:ca:98:07:d6:ea:44:96:10:0d:45:d8:27:8a:51:
02:c9:38:7e:79:57:6b:cf:55:e3:23:8e:43:df:41:3e:98:24:
b1:c0:53:f3:73:51:9d:49:f4:b1:d9:6c:86:5b:07:d2:96:1f:
b9:8d:e0:02:67:ab:7b:18:3b:ca:3b:84:26:52:c1:50:48:66:
dc:72:55:22:06:e3:93:85:1a:f5:8d:8e:73:d7:9a:0c:5c:28:
43:9a:28:bb:21:6f:0a:64:62:c1:9a:89:a9:c6:02:c5:92:4b:
d8:30:03:97:84:b3:f8:ef:80:1d:1b:2d:cb:74:04:f5:56:bf:
23:97:d7:5a:fe:ef:3a:39:de:8d:81:e8:e0:22:d3:4e:d4:7e:
a7:c9:72:d2:ac:d9:af:4c:d3:65:b4:f4:77:ee:08:90:e9:5f:
58:f6:83:a4:c2:6d:e1:ad:31:64:08:c9:d1:6c:70:9e:15:81:
d6:d9:ba:9a:35:9e:92:f5:90:26:11:aa:45:68:12:61:07:48:
b2:1e:11:fd:4a:d1:f3:20:30:f8:96:84:1b:8d:d4:fd:da:c6:
a7:98:af:a5:19:06:68:d3:c3:69:ee:0c:a8:3d:5f:fa:c0:0a:
20:19:df:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:55:38 2025 by rpki-client