Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/CviHp6Qb20hAnEdB3HvzXyXpTs8.roa
File: CviHp6Qb20hAnEdB3HvzXyXpTs8.roa (raw, json)
Hash identifier: glpdUXDrIh9bWSzvCfN/D3H6xfngj2ZH/FqlD7Tw+6w=
Subject key identifier: 0A:F8:87:A7:A4:1B:DB:48:40:9C:47:41:DC:7B:F3:5F:25:E9:4E:CF
Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial: 0196858D4A88742D8DA015BB0F3D8D243A95
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/CviHp6Qb20hAnEdB3HvzXyXpTs8.roa
Signing time: Wed 30 Apr 2025 07:15:51 +0000
ROA not before: Wed 30 Apr 2025 07:15:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211602
IP address blocks: 93.190.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Apr 2025 08:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:8d:4a:88:74:2d:8d:a0:15:bb:0f:3d:8d:24:3a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Validity
Not Before: Apr 30 07:15:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0af887a7a41bdb48409c4741dc7bf35f25e94ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:80:1d:89:af:13:68:eb:fd:c0:5f:92:12:51:
07:ef:e5:9b:00:23:7c:93:a4:d5:cf:bf:ff:46:42:
a6:c1:d0:2e:6a:f3:fd:62:76:61:85:0e:2e:c2:cd:
cb:b1:78:17:e2:ea:b8:fe:47:fb:a8:f4:99:45:c7:
2f:67:d7:aa:8d:dd:41:18:58:08:52:7e:5b:16:0e:
ac:40:bd:29:a9:65:ca:da:5a:fe:10:68:40:1c:6b:
bd:08:7b:ed:62:71:fb:87:2a:ea:e3:a8:74:68:b1:
64:70:1f:ac:de:15:fe:80:ea:94:49:f6:59:24:5f:
65:0d:01:cd:3e:9a:9b:29:d2:64:0b:4c:76:21:e2:
21:00:42:4f:21:50:71:1a:9e:c8:67:d7:b6:30:b9:
5b:63:4f:ca:a8:30:ff:cb:8c:db:d3:d9:47:cc:fc:
cf:45:7b:a6:3d:19:cd:90:12:e4:d9:89:c1:30:ab:
36:e0:64:0a:f4:c1:c0:bb:e1:28:3c:4a:a8:0b:28:
7b:60:bb:53:39:a5:b3:ee:a3:e6:a6:5f:2b:6a:70:
f0:d0:d9:cb:ad:7a:a0:47:25:3a:11:be:92:32:01:
b0:1d:46:b9:44:e0:f8:73:82:65:e1:2a:f4:7d:65:
fe:36:3e:d6:7b:60:98:02:11:a4:d9:91:2f:f3:49:
cd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F8:87:A7:A4:1B:DB:48:40:9C:47:41:DC:7B:F3:5F:25:E9:4E:CF
X509v3 Authority Key Identifier:
keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/CviHp6Qb20hAnEdB3HvzXyXpTs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.122.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:5c:0a:69:e9:63:36:ef:48:a6:9d:a6:04:c7:1b:36:70:e7:
d3:51:ea:40:da:62:4e:5f:43:85:24:11:98:81:4d:9f:02:e7:
07:a4:7c:8e:8a:e5:4a:32:4a:68:df:1d:48:f3:e3:8a:38:33:
0d:cc:59:f6:c6:d3:0f:0d:43:46:d2:7a:aa:36:e3:4d:e5:9e:
13:99:bf:98:66:15:7a:be:cf:6f:6c:e3:e9:1f:c6:fe:61:23:
8a:79:e7:0b:ec:35:4a:35:93:95:a4:2a:fb:1e:a9:be:ff:16:
96:9e:32:01:6e:d4:39:dd:fd:b7:48:19:03:13:46:32:50:8f:
c3:39:86:12:74:4a:59:68:be:c3:56:a8:91:08:be:de:84:ff:
1a:8a:ca:81:2f:a4:2e:5f:4c:69:5b:22:18:4a:a9:1a:af:35:
aa:76:fb:88:b8:95:78:99:6f:3d:f1:c0:d5:c3:74:69:8f:1f:
08:1b:45:f9:fa:2a:fe:dd:72:e5:08:e1:3c:26:c0:05:f7:51:
23:b6:67:cf:bf:9e:a6:8d:13:17:25:1e:81:97:7e:b8:c1:f3:
ad:f1:81:27:a6:a7:4c:c1:e6:5e:e6:02:19:ec:5d:e5:38:69:
43:0b:8a:c4:79:eb:82:94:fe:5e:97:88:ba:ef:13:1c:85:ac:
40:ed:f6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:41:43 2025 by rpki-client