Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/ME7cOe-APfXGCJsrL5UzgG9_sSs.roa
File: ME7cOe-APfXGCJsrL5UzgG9_sSs.roa (raw, json)
Hash identifier: O7cmBiTEIxp4+mayd4ACpXRU4QxiO4b5NveO0zD4Y+w=
Subject key identifier: 30:4E:DC:39:EF:80:3D:F5:C6:08:9B:2B:2F:95:33:80:6F:7F:B1:2B
Certificate issuer: /CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
Certificate serial: 01963E91468BD0572A780EE8B2EC6FD46A86
Authority key identifier: CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/ME7cOe-APfXGCJsrL5UzgG9_sSs.roa
Signing time: Wed 16 Apr 2025 12:27:10 +0000
ROA not before: Wed 16 Apr 2025 12:27:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3252
IP address blocks: 195.177.68.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Apr 2025 08:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:91:46:8b:d0:57:2a:78:0e:e8:b2:ec:6f:d4:6a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
Validity
Not Before: Apr 16 12:27:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=304edc39ef803df5c6089b2b2f9533806f7fb12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:19:e5:17:17:97:53:38:d6:03:8b:ba:0f:8e:
ae:b4:b2:da:62:ae:6a:b3:cf:d7:b5:ea:97:c0:f4:
5b:cc:3f:01:e9:b8:a7:e6:36:46:6f:4c:f1:02:0e:
d3:ef:96:f0:fd:70:3a:20:ed:b1:19:2b:57:6c:37:
16:08:8d:52:2d:c4:47:a0:d7:93:45:39:09:22:c5:
ba:22:6a:0a:5f:60:ee:e5:85:8c:82:27:5b:15:c5:
65:e7:4a:0e:49:ce:0a:c4:03:f1:12:71:aa:2f:5b:
13:b2:e6:3c:fc:8c:0c:c7:72:17:1b:c3:12:7b:c8:
8d:fd:92:ea:07:de:3b:6c:ca:ac:57:98:c4:60:8c:
b0:a3:41:69:2f:d7:e8:1b:cc:9e:bc:26:dd:c9:03:
f0:5b:34:3e:fb:a2:70:86:83:dc:af:b2:2a:5a:69:
92:d7:79:a7:b9:1c:91:25:6f:44:3c:98:eb:4f:60:
1d:81:ec:15:8e:e6:14:92:4e:41:d5:89:43:98:76:
e7:73:29:d1:bf:2e:cc:82:6e:b9:b5:1d:bb:61:78:
a8:d0:d7:fa:a3:4a:1e:e1:94:90:13:1c:fd:4d:48:
44:00:d8:5a:47:97:44:96:3c:56:28:49:b2:52:5f:
a0:de:da:c3:4c:0b:5b:ab:91:8c:3a:f8:c8:f5:4b:
bd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4E:DC:39:EF:80:3D:F5:C6:08:9B:2B:2F:95:33:80:6F:7F:B1:2B
X509v3 Authority Key Identifier:
keyid:CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/ME7cOe-APfXGCJsrL5UzgG9_sSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.68.0/22
Signature Algorithm: sha256WithRSAEncryption
09:91:7d:9a:a5:3e:0f:1c:64:60:82:e2:dd:5e:64:0d:05:89:
a5:ce:48:4c:09:75:1c:69:a1:bb:58:1a:a7:ae:12:86:97:eb:
27:b7:e7:59:2d:4f:0d:d2:01:13:a6:02:e5:22:a5:51:5b:e3:
b0:78:e9:3a:ac:2c:d0:50:58:57:94:dd:e1:be:c0:f2:2d:4f:
88:bc:c5:86:b4:02:99:02:8e:d3:3e:bf:62:0a:94:a7:6c:f5:
f7:84:4a:24:7b:eb:2b:af:bb:a1:f0:75:c3:a8:d0:10:98:f3:
a5:58:e4:d0:71:98:a7:4d:85:88:32:4c:6e:73:80:58:3e:48:
f4:eb:eb:d3:48:3a:6f:66:cd:e6:0a:9f:9e:98:34:fb:52:a7:
29:a3:86:63:df:12:db:dc:15:20:8b:8f:91:90:2b:f9:64:52:
dd:23:33:11:1b:48:ee:80:47:9f:5e:ef:b9:10:4a:77:af:81:
d8:da:f6:c1:9f:97:00:85:44:35:cd:87:a3:64:3e:8a:b9:b2:
fc:07:3d:06:4c:00:5a:33:59:f1:42:5f:02:6e:07:d1:54:4d:
88:84:19:9c:9f:6c:c1:e6:1c:6d:1c:53:c2:5e:ff:ea:84:0d:
0c:62:27:ea:41:db:db:85:bd:2e:f8:b3:6b:9c:af:07:80:05:
20:7f:3c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:23:11 2025 by rpki-client