Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/m8WKn7yYd3m-sy94CvzsatR7wHM.roa
File: m8WKn7yYd3m-sy94CvzsatR7wHM.roa (raw, json)
Hash identifier: EKBCoRCikJavwzN0Oq7/u15Du8hp6lBR8vEtnJ1GfY0=
Subject key identifier: 9B:C5:8A:9F:BC:98:77:79:BE:B3:2F:78:0A:FC:EC:6A:D4:7B:C0:73
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01952D63B06A19DC5F0A6615313E01B81BEE
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/m8WKn7yYd3m-sy94CvzsatR7wHM.roa
Signing time: Sat 22 Feb 2025 11:21:02 +0000
ROA not before: Sat 22 Feb 2025 11:21:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 94.103.187.0/24 maxlen: 24
146.19.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Feb 2025 17:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:2d:63:b0:6a:19:dc:5f:0a:66:15:31:3e:01:b8:1b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Feb 22 11:21:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bc58a9fbc987779beb32f780afcec6ad47bc073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:32:55:2e:9f:22:01:d5:77:ca:e9:fd:99:be:
ae:53:e8:64:e2:cf:c6:a6:c2:d9:80:74:ae:42:da:
15:4a:92:bb:b0:ff:0a:33:cb:ae:af:af:45:b9:bd:
1b:2e:d0:50:c2:1c:3a:9b:e9:7c:0d:4d:55:12:48:
3b:1f:87:c5:63:b2:c1:67:29:70:4c:09:d5:31:44:
8f:5e:34:08:bd:de:21:0a:16:2e:4f:44:8d:89:cf:
56:4a:e6:7e:e0:41:40:68:a3:cc:2b:74:19:ea:4f:
99:a7:29:92:5e:d2:d8:f5:34:ec:46:9a:2d:37:99:
3c:8c:06:2a:c3:7f:ee:fb:61:0f:be:b9:b9:c2:31:
e4:30:9f:23:d9:6f:2c:c8:81:b2:31:87:ae:ef:30:
0a:6f:25:19:99:ae:1e:85:94:09:77:df:05:0f:fd:
ff:c3:11:eb:44:4d:6c:8c:ee:d9:5d:20:28:5d:62:
e6:50:61:64:36:ce:a3:b1:90:42:15:08:45:36:6b:
94:98:61:4a:81:ea:9c:8c:76:ee:f3:c2:b7:ee:8e:
f2:76:0c:be:b8:d3:70:3f:fb:87:7a:c4:11:4c:49:
5a:a1:f7:37:22:38:e2:50:9f:aa:fa:59:83:45:84:
7c:85:e2:1b:6a:5a:d6:b9:58:ad:7f:2a:db:9c:6b:
8f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C5:8A:9F:BC:98:77:79:BE:B3:2F:78:0A:FC:EC:6A:D4:7B:C0:73
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/m8WKn7yYd3m-sy94CvzsatR7wHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.187.0/24
146.19.21.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:dc:6a:93:38:86:c7:7b:cd:f5:d4:32:4e:98:5e:5a:3c:bd:
78:73:63:22:de:b2:a0:62:b4:6f:f9:1a:c0:2c:26:1c:68:b5:
7b:d6:99:52:73:6c:7d:08:55:62:68:19:35:65:ea:8e:63:12:
2e:1c:23:ca:0f:90:44:47:02:5e:6d:6b:1d:d0:55:b5:dc:40:
b5:bf:f3:ba:f8:f0:62:71:d9:9b:a0:4e:d8:ac:1f:8f:33:8e:
7f:07:a9:e0:9f:f2:13:a4:bb:5e:99:e0:8b:3c:e6:6e:a7:43:
e0:54:d2:ac:14:37:e2:09:7c:91:09:92:b7:4d:c1:0f:43:0e:
c1:d1:2f:03:db:19:e4:ff:77:20:d0:77:74:62:4d:92:2d:6c:
ef:8b:07:d6:10:a7:2e:92:98:27:59:d8:a9:47:2d:e5:0d:d3:
40:8a:ab:18:12:eb:b9:dd:42:36:05:cc:1f:04:eb:7d:3d:04:
15:18:9a:fc:0b:5b:95:13:40:e6:69:45:77:0e:25:5e:81:b4:
73:c0:0e:9c:11:1a:da:6f:3c:8c:83:0f:a3:f3:69:a3:bf:76:
30:59:b9:3e:8d:ca:39:a7:7c:b9:dd:56:1b:cf:82:2c:6e:ac:
87:e7:fb:32:92:87:53:1b:fd:4b:76:e4:dd:6b:ca:45:be:c5:
a0:8b:16:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:51:36 2025 by rpki-client