Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/AsY1o1Q34ydgU2XQFj4fkz3vPSY.roa
File: AsY1o1Q34ydgU2XQFj4fkz3vPSY.roa (raw, json)
Hash identifier: 7kGXMBi0vNYrcZ7PTYOdBj3S7QE4gx1wnwlC5Uv7a9o=
Subject key identifier: 02:C6:35:A3:54:37:E3:27:60:53:65:D0:16:3E:1F:93:3D:EF:3D:26
Certificate issuer: /CN=8831d621d192f92db093d933092c1e236b4d497b
Certificate serial: 01953C461D795ED9B4666EF3AE462AC73F33
Authority key identifier: 88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/AsY1o1Q34ydgU2XQFj4fkz3vPSY.roa
Signing time: Tue 25 Feb 2025 08:43:02 +0000
ROA not before: Tue 25 Feb 2025 08:43:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63023
IP address blocks: 194.180.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Feb 2025 09:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:46:1d:79:5e:d9:b4:66:6e:f3:ae:46:2a:c7:3f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8831d621d192f92db093d933092c1e236b4d497b
Validity
Not Before: Feb 25 08:43:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02c635a35437e327605365d0163e1f933def3d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ee:29:49:12:b4:8a:bc:02:1e:02:b5:ac:ad:
7a:d5:8c:d3:49:af:ee:59:4a:13:ff:ef:5b:d9:8f:
bb:09:16:9a:c3:a0:14:50:c1:a5:c5:91:f0:00:96:
2c:c9:df:8f:85:c2:9f:c9:15:47:11:e0:dd:10:bf:
07:d2:01:88:bc:67:4c:c2:f3:df:41:e1:e8:c7:22:
2d:88:d2:d8:4f:37:b2:f9:a2:66:64:7b:3b:84:04:
49:07:b3:63:28:33:05:dd:ce:dd:3e:14:ca:31:69:
58:3e:47:ea:b2:ce:8a:cf:ae:b4:b0:1b:62:5f:1e:
1a:a1:59:41:d3:87:e4:92:3f:79:0a:8c:9a:29:51:
a2:1b:59:ec:ab:e3:a9:e4:3d:86:5d:54:5d:08:45:
cb:79:02:7b:ac:f0:dc:79:52:8f:75:bc:58:76:11:
ea:db:a5:9b:ea:b6:cb:95:53:36:5b:e1:52:bb:dc:
e5:ba:af:05:34:c1:77:9b:15:27:47:b3:e7:c7:64:
64:a8:df:be:c3:35:46:bc:2c:a5:69:54:07:65:0d:
87:40:a3:46:4c:5c:19:53:9d:33:9d:57:e8:1d:b0:
26:37:cd:ae:c7:e1:a4:10:e5:26:86:b6:03:ed:e1:
fe:5c:56:9b:c7:af:b6:cd:e1:10:d5:ef:ab:3c:4f:
f2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C6:35:A3:54:37:E3:27:60:53:65:D0:16:3E:1F:93:3D:EF:3D:26
X509v3 Authority Key Identifier:
keyid:88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/AsY1o1Q34ydgU2XQFj4fkz3vPSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.158.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:5a:0c:21:8e:ca:9c:bc:b2:5d:5d:2a:ed:34:e4:98:5a:8e:
6b:28:0f:ce:fd:64:a5:d5:52:08:63:2f:e7:ef:8a:85:5c:6f:
34:88:7d:7e:30:41:7d:4d:79:61:ec:9d:67:77:59:a3:db:c5:
9e:1b:1a:54:97:84:18:ae:5c:a8:f5:2f:18:54:5a:5e:17:da:
be:4b:cb:c9:f4:47:98:79:41:42:72:36:5d:36:44:26:83:54:
b4:51:5d:1d:e4:09:90:ca:e9:13:a7:6f:ec:75:cb:c2:d5:8f:
b5:a5:c3:d3:18:4a:fa:85:65:01:d8:9f:08:eb:a9:6f:26:da:
9b:7e:d7:1f:6c:48:85:22:46:cc:f8:c3:fb:ac:eb:7e:dc:1e:
82:30:be:40:ad:6c:15:63:fe:b0:3b:c5:8e:d8:c9:48:fe:93:
9d:46:2b:0e:e8:e2:d5:c4:df:50:8e:09:10:65:fa:53:91:43:
cb:ca:de:12:92:31:2a:a2:77:03:78:75:8d:ed:5f:86:08:2b:
de:b5:b3:ae:2a:a6:2d:91:88:87:19:27:ca:78:ab:ff:92:6f:
a4:79:5b:7e:43:26:6a:42:62:46:b1:7d:9c:99:34:38:6b:0d:
b5:10:71:a5:94:c1:14:14:fb:cd:ae:2d:dd:af:7b:28:15:f5:
b6:e0:86:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:37:45 2025 by rpki-client