Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/z43xjrgeQnDb8MK9pD41_AcgnbU.roa
File: z43xjrgeQnDb8MK9pD41_AcgnbU.roa (raw, json)
Hash identifier: ilcVSlmQCuFfEJWMdleL3J8HLXUSuWjm+vqhU56OtJo=
Subject key identifier: CF:8D:F1:8E:B8:1E:42:70:DB:F0:C2:BD:A4:3E:35:FC:07:20:9D:B5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01963497B850E38F319FBFD2AE51357BB2C1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/z43xjrgeQnDb8MK9pD41_AcgnbU.roa
Signing time: Mon 14 Apr 2025 13:58:00 +0000
ROA not before: Mon 14 Apr 2025 13:58:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214998
IP address blocks: 194.50.94.0/24 maxlen: 24
2a0e:97c1::/40 maxlen: 48
2a10:2f00:167::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 15 Apr 2025 08:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:34:97:b8:50:e3:8f:31:9f:bf:d2:ae:51:35:7b:b2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 14 13:58:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf8df18eb81e4270dbf0c2bda43e35fc07209db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:93:fb:b9:9b:97:1f:f9:7b:23:7e:5a:01:96:
fb:07:75:c2:43:19:1b:93:ee:51:09:df:db:3e:22:
94:66:2e:97:6e:5c:2f:97:3e:b4:a2:6f:7a:26:19:
11:39:d9:5d:05:5d:8a:cc:a8:24:ea:98:55:02:a2:
05:89:55:09:f4:dc:f2:ce:9d:d6:98:e6:96:fb:0e:
1e:08:83:96:3b:13:ef:58:07:30:a2:b6:c9:1c:1a:
e2:cc:01:6d:71:69:c4:c0:80:95:a0:90:36:84:66:
e0:d1:52:d0:1c:71:fc:14:e5:4d:51:5b:68:d9:5b:
27:78:7b:6d:33:50:18:90:29:bb:66:7b:ae:fc:13:
c0:2a:8e:28:a2:f7:2e:4e:36:50:25:96:7e:ee:be:
55:70:b2:cf:fc:16:1a:e4:53:e4:dc:df:59:e4:9a:
7e:3e:99:e3:ba:88:3c:4d:36:ef:7a:f6:f8:ed:e9:
5a:6a:71:89:2e:f7:9f:37:65:8f:fd:f8:84:7a:ff:
80:cb:97:fa:46:3a:b5:3e:c8:cc:61:93:1a:79:c9:
a9:e8:cf:7c:d5:1d:63:4c:c3:b8:7c:d2:62:9b:8e:
4b:fe:78:4d:1d:a1:0b:f4:e1:f4:38:60:39:84:67:
58:2c:da:90:84:4f:2c:1f:20:75:e0:74:2f:a2:49:
4a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8D:F1:8E:B8:1E:42:70:DB:F0:C2:BD:A4:3E:35:FC:07:20:9D:B5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/z43xjrgeQnDb8MK9pD41_AcgnbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.94.0/24
IPv6:
2a0e:97c1::/40
2a10:2f00:167::/48
Signature Algorithm: sha256WithRSAEncryption
cb:92:a5:42:9e:ef:8e:fb:e3:88:6d:63:5a:1d:4e:59:30:2a:
50:5a:27:ce:ce:19:a3:92:0a:55:50:46:f4:33:e9:d8:32:38:
71:03:2c:5b:13:4a:7c:a2:f2:ed:3a:38:2a:14:13:c0:40:50:
ef:b6:06:8f:8a:d1:59:cc:37:8b:da:55:3d:8d:bb:f5:77:8a:
f8:f9:0a:74:b5:b9:55:06:39:d4:93:da:a7:da:88:0f:14:c0:
bb:5b:0d:c5:f8:74:e6:f3:0e:f4:82:9b:04:ea:5f:4c:6a:88:
2e:cd:d5:99:a0:95:dc:35:c7:f0:62:1b:1a:07:20:9f:7c:e6:
d9:69:20:f9:a3:c2:70:db:39:ef:a6:95:a8:dd:d0:31:c6:7a:
16:fe:e1:ca:83:89:e6:66:0b:42:df:8c:2e:84:2f:11:d8:57:
0f:6d:4b:01:16:ba:78:ce:aa:3d:90:01:7d:ff:7f:84:97:f7:
44:7a:f3:87:05:67:a5:ff:e1:7d:04:4c:0f:f7:98:5f:e5:e0:
d8:74:58:ed:b7:b5:36:80:03:76:3c:13:e7:6c:d8:9f:2b:ad:
00:fb:8d:45:66:dc:86:5e:f8:4f:3d:88:86:af:6d:5f:4b:26:
b2:d5:0a:4b:31:87:6a:bb:04:26:6a:c8:01:a7:18:0f:f0:02:
32:41:ae:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 05:37:31 2025 by rpki-client