Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/1-d3iYFDYHEKXSE8yYi-ySkRxFb8.roa
File: 1-d3iYFDYHEKXSE8yYi-ySkRxFb8.roa (raw, json)
Hash identifier: 84H+gXjdU+2m9D6vV2JpmPqpZ5XMxXWz/7VZMrrcDBQ=
Subject key identifier: F9:DD:E2:60:50:D8:1C:42:97:48:4F:32:62:2F:B2:4A:44:71:15:BF
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 01952BE06CEEF3EEF700654C748C103E1619
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/1-d3iYFDYHEKXSE8yYi-ySkRxFb8.roa
Signing time: Sat 22 Feb 2025 04:18:02 +0000
ROA not before: Sat 22 Feb 2025 04:18:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12510
IP address blocks: 194.55.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Feb 2025 07:41:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:2b:e0:6c:ee:f3:ee:f7:00:65:4c:74:8c:10:3e:16:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Feb 22 04:18:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9dde26050d81c4297484f32622fb24a447115bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:01:6f:81:f3:a6:56:57:1f:ed:38:c4:4b:97:
16:c4:78:58:01:6e:0e:ff:89:86:dd:69:27:3d:b0:
6f:42:ff:8a:9f:20:fe:58:50:39:4d:b5:93:64:97:
94:bd:23:8e:77:ba:c5:59:c0:49:53:b4:fa:3e:ba:
41:d0:fe:3a:36:c2:97:b3:d6:b2:e7:c0:08:ba:8f:
59:2d:4e:fa:db:03:32:29:b4:16:42:7c:94:2f:3f:
72:fa:00:58:99:3e:24:9b:cc:3a:b3:47:b3:ed:91:
c1:3c:fa:77:9f:f9:00:70:16:bc:36:77:4d:f7:ad:
6e:39:b8:24:58:10:22:bf:60:79:95:c3:fb:ae:5c:
3a:5c:77:e8:9e:8a:a2:53:ca:fd:7e:a4:a8:3b:aa:
33:83:bc:a3:d0:25:a4:5e:e9:a4:e4:23:57:a3:34:
84:9b:3c:51:8f:a6:43:41:e0:0d:ed:9b:56:92:09:
ed:ac:03:4c:15:5d:05:7a:73:dd:31:f5:d5:d7:79:
b2:7f:e0:4e:c9:3e:30:35:1a:d5:e6:5b:5d:b3:4f:
cf:79:20:07:4c:8f:7e:65:9a:2b:08:53:e6:0a:f6:
ca:74:ec:1d:de:dd:3a:0d:6c:7f:df:62:75:48:e3:
5b:c9:2a:ed:c8:85:9d:be:4f:26:86:3f:8a:06:f0:
ab:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DD:E2:60:50:D8:1C:42:97:48:4F:32:62:2F:B2:4A:44:71:15:BF
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/1-d3iYFDYHEKXSE8yYi-ySkRxFb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.90.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:09:8e:c4:ff:17:c9:67:c9:cf:74:02:28:3d:b8:f4:06:1b:
56:55:0a:95:37:ae:5c:16:92:f2:3f:86:8e:0e:a6:e9:16:f3:
e0:e0:9b:26:3d:50:6f:b5:b5:33:12:3f:23:54:05:b9:61:94:
70:4f:9a:55:4a:b4:bd:f7:29:2e:5f:df:75:c1:2c:03:27:18:
e3:80:20:16:6e:05:35:51:47:87:1b:fe:48:13:18:d8:b8:23:
e2:8e:c0:84:74:a4:64:b8:f8:fe:32:f9:72:81:82:31:f3:57:
52:cb:d7:19:84:d1:38:a9:fe:46:03:97:50:2f:9b:47:e5:55:
ef:b9:84:8a:bb:46:cc:a8:b6:5a:bc:02:b2:8c:ac:63:53:ac:
a6:35:3c:f9:db:02:48:40:c6:86:70:77:81:27:6e:39:f2:e0:
66:90:21:01:d6:8e:64:b0:70:c5:08:3e:c5:f1:54:1f:9e:92:
f4:c0:91:a5:77:bc:98:3a:6b:22:1f:66:39:89:5b:5c:2f:6f:
98:bb:ac:f7:e8:09:21:aa:21:40:4a:b6:9c:57:6e:c9:3e:e8:
31:07:a2:9e:cd:05:aa:85:5c:8f:03:39:96:59:e1:89:57:f1:
cf:68:c9:35:e6:b6:0f:60:d4:3b:92:e8:bb:78:d8:0e:be:79:
d7:4b:3c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:35:29 2025 by rpki-client