Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/4V_BOFERf94yymLUKRtSbAn6ejs.roa
File: 4V_BOFERf94yymLUKRtSbAn6ejs.roa (raw, json)
Hash identifier: 2MLzRAtxs/r7t8rOQIN7rvz59NP/Mw5PbmZRfp4M3jk=
Subject key identifier: E1:5F:C1:38:51:11:7F:DE:32:CA:62:D4:29:1B:52:6C:09:FA:7A:3B
Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial: 019683DF48451AF03234F5513CC832128CE2
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/4V_BOFERf94yymLUKRtSbAn6ejs.roa
Signing time: Tue 29 Apr 2025 23:26:10 +0000
ROA not before: Tue 29 Apr 2025 23:26:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 195.64.120.0/24 maxlen: 24
195.64.121.0/24 maxlen: 24
195.64.122.0/24 maxlen: 24
195.64.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Apr 2025 17:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:df:48:45:1a:f0:32:34:f5:51:3c:c8:32:12:8c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
Validity
Not Before: Apr 29 23:26:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e15fc13851117fde32ca62d4291b526c09fa7a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e9:31:c9:c0:ec:76:57:f4:5f:0d:db:6a:40:
f9:33:56:ca:93:15:20:66:6f:ec:05:f0:2e:bc:4a:
0e:77:87:62:a1:f0:ed:da:dd:37:d7:a9:c1:ce:c8:
cb:70:8c:5e:61:3d:64:47:01:93:3e:2b:2d:ba:f4:
c1:8e:f3:66:79:bc:dd:f7:3a:5c:a9:90:98:28:3b:
fb:f9:40:5b:c9:98:8d:2d:74:64:c8:37:e4:5a:f2:
f3:60:af:08:9a:27:2d:05:54:73:68:49:42:8b:d3:
38:53:9d:85:ea:bf:30:f0:50:3e:31:5b:e0:13:85:
ec:79:2f:f4:fa:b4:ce:99:d8:61:80:04:e6:b0:a6:
43:f7:88:c7:bd:ac:d5:f1:b2:81:1b:d0:52:d9:2c:
fd:dc:79:65:bb:3d:50:0a:02:46:f7:17:30:92:d3:
59:b4:18:7c:12:cf:bc:b4:3b:1d:2f:46:30:fa:7c:
6e:13:ba:16:fc:fd:9f:97:bf:03:a6:2f:c5:16:e5:
eb:56:6c:e6:ae:8c:bf:64:6f:a8:13:c2:74:ce:06:
26:49:27:ee:01:d6:3f:5b:da:9f:79:cb:7d:c4:67:
33:a2:ea:67:d6:90:bf:a9:c5:16:ae:58:02:2a:ea:
9e:8c:0e:01:9c:fb:e5:64:b0:68:89:29:f0:15:5d:
d8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5F:C1:38:51:11:7F:DE:32:CA:62:D4:29:1B:52:6C:09:FA:7A:3B
X509v3 Authority Key Identifier:
keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/4V_BOFERf94yymLUKRtSbAn6ejs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.120.0/22
Signature Algorithm: sha256WithRSAEncryption
14:58:e8:4a:d5:fd:b7:99:b3:32:bc:ac:7c:98:78:81:86:f8:
84:dd:c4:e8:08:2d:20:7f:7a:8c:fa:db:08:a4:c8:42:ec:b2:
c0:c5:fe:b9:ac:11:5c:96:f6:01:6f:3e:54:e3:f6:70:0a:2b:
87:d4:79:92:5a:89:74:39:3a:46:2d:8f:26:32:5a:e3:e4:cb:
b6:46:e6:da:fe:26:76:48:94:5a:84:04:b8:6c:b1:ff:31:b3:
1a:84:53:59:6d:f8:63:2a:35:7d:b8:a2:a4:85:a1:3b:8c:9c:
65:f0:1f:8c:03:a5:3c:b9:cd:7f:d4:b4:49:ab:92:eb:a7:8c:
d2:6b:78:b5:84:17:c3:58:cd:da:44:eb:b9:aa:3d:1e:d6:b0:
ac:9f:e9:27:52:7c:0d:f2:9d:9c:b2:57:11:d8:87:b2:41:6f:
24:12:82:3d:d7:79:81:a0:52:ec:c8:bd:e4:ec:b0:1d:d2:36:
8f:1a:68:e9:8a:f6:89:2a:0b:58:d9:eb:bf:ff:bc:0b:7a:fa:
07:d7:f3:31:d3:b9:0c:29:81:5f:96:bb:ab:96:1f:40:d8:f1:
40:5b:42:ad:9d:f3:f3:0f:27:77:48:13:d2:a5:e5:77:8a:e9:
5b:00:ec:23:e8:49:0d:7f:2b:d0:b2:3e:6e:6c:2b:00:f0:52:
88:15:70:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:37:33 2025 by rpki-client