Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/T94Y_cCpplna7cwxeCPblcxtsxU.roa
File: T94Y_cCpplna7cwxeCPblcxtsxU.roa (raw, json)
Hash identifier: nEOQcuIJ6IVZQtwobVkBMKn3Uf2pUUyorQb1eVHqMQM=
Subject key identifier: 4F:DE:18:FD:C0:A9:A6:59:DA:ED:CC:31:78:23:DB:95:CC:6D:B3:15
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 0196A9F4BB890D630C4FA6F04F58D243FE8F
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/T94Y_cCpplna7cwxeCPblcxtsxU.roa
Signing time: Wed 07 May 2025 08:55:10 +0000
ROA not before: Wed 07 May 2025 08:55:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 188.209.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 May 2025 12:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:f4:bb:89:0d:63:0c:4f:a6:f0:4f:58:d2:43:fe:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: May 7 08:55:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fde18fdc0a9a659daedcc317823db95cc6db315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a7:9c:5d:30:2f:65:21:41:01:14:90:83:10:
bf:2d:44:ec:41:54:f6:de:41:9c:cd:8b:5d:17:1f:
d6:90:f4:2c:53:d5:70:e1:1f:0d:a1:e0:83:6c:06:
d9:91:52:a9:f3:ae:1f:d5:02:22:00:89:cd:26:e2:
2b:91:ab:9f:bc:14:52:84:4d:54:ff:de:73:59:f4:
8c:f4:c0:b7:a6:95:6a:7a:80:bd:70:9a:b9:1a:b9:
e0:0e:39:0a:1f:7f:41:40:81:1b:d8:80:4d:c9:5d:
37:70:29:21:11:bd:d4:7f:a6:f1:9f:82:19:22:da:
80:06:b4:6b:a6:19:fd:86:e1:02:d5:a4:03:3c:02:
35:58:82:20:eb:08:c1:88:06:94:64:6d:27:18:d2:
f9:7d:fc:3a:e9:71:f1:da:d8:54:03:e8:da:b4:39:
ab:b8:89:f2:d9:e0:b4:c1:40:99:f2:29:c4:5e:c6:
c7:7d:50:5c:55:1b:89:6e:0e:03:25:4e:ac:09:a9:
79:1f:f3:06:1f:eb:40:55:1b:bd:c2:5e:76:5b:03:
d1:67:da:24:7b:68:54:36:fb:18:60:43:6a:d5:f2:
e6:03:f1:33:c0:43:c0:e8:3d:bd:ee:be:9d:ce:b2:
9e:d4:77:3c:94:55:b2:d0:8b:bf:5d:1a:27:6b:1c:
bd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DE:18:FD:C0:A9:A6:59:DA:ED:CC:31:78:23:DB:95:CC:6D:B3:15
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/T94Y_cCpplna7cwxeCPblcxtsxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:62:ed:ce:4a:8c:2d:2e:d5:63:5a:34:d7:fb:ef:fa:f9:3c:
48:2e:ca:75:39:d2:d0:b1:f5:29:5f:f7:50:87:04:f5:16:90:
74:f9:73:12:2a:99:ec:a5:92:99:cd:92:73:6e:04:e1:74:e1:
3c:8d:bb:47:80:01:59:4f:90:0e:c9:17:d0:8b:41:43:c5:53:
5e:9c:9d:f0:54:f8:bb:c0:4a:fa:67:5a:f2:5e:ed:56:cc:d5:
46:3e:7d:0e:20:7e:12:76:64:c0:35:9f:eb:fa:29:3e:67:9e:
11:3c:42:97:aa:68:76:90:a6:26:49:a1:c6:90:9a:6c:bf:d3:
42:5a:47:ff:e9:de:fe:be:b9:eb:54:68:3a:e6:a5:a5:f0:45:
21:2d:9b:aa:c7:ce:0e:64:39:d7:a5:3b:c2:4c:80:9e:ce:3c:
5a:84:73:3b:43:d1:03:41:da:2e:53:98:11:21:fb:b9:1b:30:
4d:35:6c:a8:4d:26:bd:ae:6b:d2:eb:3f:dc:cf:df:2b:86:f0:
f8:0e:7d:1a:80:44:92:05:e1:4a:ce:c0:ef:8e:74:41:23:8e:
3f:61:7d:2d:e3:e0:11:0e:5f:9e:ac:dc:0c:25:1e:cc:df:eb:
de:05:65:39:51:67:f8:40:d9:94:30:71:3a:34:16:19:ca:94:
a8:3b:61:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:17:35 2025 by rpki-client