Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/qLZdrtpNCl6H8EAeoujsYYYi1KU.roa
File: qLZdrtpNCl6H8EAeoujsYYYi1KU.roa (raw, json)
Hash identifier: Oi2PiNysEALEXDC8eO4jRuAgULhRQD8tlX90SUAnfjo=
Subject key identifier: A8:B6:5D:AE:DA:4D:0A:5E:87:F0:40:1E:A2:E8:EC:61:86:22:D4:A5
Certificate issuer: /CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881
Certificate serial: 01954E74EA2B7CDD6117A6BA8C5DB516DFC9
Authority key identifier: EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/qLZdrtpNCl6H8EAeoujsYYYi1KU.roa
Signing time: Fri 28 Feb 2025 21:27:19 +0000
ROA not before: Fri 28 Feb 2025 21:27:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212150
IP address blocks: 193.9.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Mar 2025 15:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4e:74:ea:2b:7c:dd:61:17:a6:ba:8c:5d:b5:16:df:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881
Validity
Not Before: Feb 28 21:27:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8b65daeda4d0a5e87f0401ea2e8ec618622d4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a3:d0:63:66:d8:c7:ef:00:d1:4f:37:07:5c:
2c:15:82:ac:fb:cf:ae:9e:dd:74:65:d2:4c:19:be:
ba:2d:03:14:d8:6c:5f:91:a2:24:cd:39:f6:a6:6b:
07:63:96:65:64:a8:9d:10:10:2e:c1:77:16:92:37:
63:4b:f1:f0:d5:2f:14:4f:97:f5:27:4d:3e:53:79:
53:65:5b:a5:7c:6c:6e:dd:07:0d:cf:0e:03:c0:29:
82:9a:13:82:05:a2:d8:1a:a8:60:9e:02:fa:e8:a1:
98:28:57:f8:3f:14:43:2f:d7:e4:1d:40:08:eb:92:
99:a8:47:2e:32:04:a4:23:62:b7:f1:ee:ef:1f:0f:
4b:b2:b1:ae:01:30:96:70:8b:ff:61:69:da:71:3c:
d6:e8:14:5c:09:73:92:62:bb:09:ce:24:3b:bb:d2:
01:eb:8e:f0:4f:8b:2d:74:4b:36:41:73:53:45:0b:
21:8e:26:2d:3e:4a:33:49:da:83:d4:4b:ba:7a:16:
af:92:a3:49:a2:53:9d:a8:fc:26:e1:f3:4f:82:a8:
c9:08:89:a1:24:a8:4b:a0:d8:92:57:9d:08:79:d5:
c1:9c:e6:cb:82:ce:bc:5c:7d:a7:f9:5d:a7:89:54:
3e:59:2e:07:4a:10:da:00:1a:3f:6c:09:95:a7:65:
9f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B6:5D:AE:DA:4D:0A:5E:87:F0:40:1E:A2:E8:EC:61:86:22:D4:A5
X509v3 Authority Key Identifier:
keyid:EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/qLZdrtpNCl6H8EAeoujsYYYi1KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.16.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:be:5a:d8:f5:47:66:9b:9b:5b:b5:bf:97:e3:94:65:6b:fd:
53:7b:1b:a0:da:32:47:01:b5:f0:77:ad:1f:2c:45:4a:06:92:
15:ab:36:ba:53:ef:00:ce:61:25:f0:db:0e:f8:55:97:0c:55:
a9:6a:27:50:8f:9f:eb:e0:63:ca:86:39:bb:b0:09:19:5d:b7:
01:cb:42:78:33:2c:f0:ea:42:d8:cb:27:15:db:96:19:02:be:
d7:41:9c:09:2d:ad:a5:b0:9c:f2:bf:f6:da:6c:e2:79:a7:e5:
1f:76:32:a9:44:bb:d3:d8:66:00:ae:bc:f2:f2:74:50:03:67:
84:a0:85:6d:95:db:0d:73:2f:dd:06:00:ec:e7:76:11:5c:e5:
8c:b3:f8:e3:11:71:07:95:8e:b7:71:3d:04:ec:2f:8a:3d:1d:
3a:10:4d:02:e9:00:67:b0:bc:b0:fa:94:0f:f5:16:c2:37:38:
3e:b6:b4:98:c1:d7:c4:52:de:c7:b6:b6:c9:c4:b9:70:7c:6a:
03:d7:41:5c:53:ea:93:64:4f:e6:0a:10:63:c0:4d:fd:3a:a4:
0f:5d:5f:cb:79:ae:61:09:0d:f6:83:97:23:c5:9c:90:71:41:
f5:6e:cb:3c:a6:c6:02:54:2e:2e:87:8b:5a:e2:fb:5c:45:9f:
26:64:f6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:57:58 2025 by rpki-client