Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/XZN3a0zBDmXOQxGeftv2DjsCaPM.roa
File: XZN3a0zBDmXOQxGeftv2DjsCaPM.roa (raw, json)
Hash identifier: g9hDVTDCKAENrkk+eqWnuPxqkb29X2w4zG+KBqicUbA=
Subject key identifier: 5D:93:77:6B:4C:C1:0E:65:CE:43:11:9E:7E:DB:F6:0E:3B:02:68:F3
Certificate issuer: /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Certificate serial: 0195061C72F07300CAE464BB020F21DF846B
Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/XZN3a0zBDmXOQxGeftv2DjsCaPM.roa
Signing time: Fri 14 Feb 2025 20:18:02 +0000
ROA not before: Fri 14 Feb 2025 20:18:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399970
IP address blocks: 194.104.129.0/24 maxlen: 24
194.104.129.0/26 maxlen: 26
194.104.129.64/26 maxlen: 26
194.104.129.128/26 maxlen: 26
194.104.129.192/26 maxlen: 26
Validation: Failed, certificate revoked on Fri 14 Feb 2025 20:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:06:1c:72:f0:73:00:ca:e4:64:bb:02:0f:21:df:84:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Validity
Not Before: Feb 14 20:18:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d93776b4cc10e65ce43119e7edbf60e3b0268f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:01:70:29:d1:6a:d1:e0:3a:62:43:3e:52:33:
f1:b0:27:a8:4b:dc:f3:ad:5f:33:be:54:6c:ea:f5:
ca:5a:a1:a9:a1:66:b2:d1:1f:9d:f5:d1:76:50:ae:
78:93:60:7a:28:70:d7:f5:3f:1e:24:bb:5a:8c:d3:
68:42:b0:13:58:ee:01:52:06:87:28:6c:2a:15:56:
6e:fb:27:85:45:ae:24:d8:6c:76:8c:f1:01:c2:83:
23:a6:ec:96:a5:11:3e:fb:48:9b:6f:86:f7:6a:1c:
9a:9c:ed:fb:fd:3a:33:28:d9:7b:7b:88:96:c7:70:
27:c9:1c:61:14:c2:51:17:07:5d:78:97:21:93:b3:
31:b4:5d:77:36:5b:4c:3e:7c:7a:f3:08:e8:55:df:
25:cc:39:54:a3:73:80:97:5b:34:5f:f2:bd:9c:a7:
13:63:41:82:d4:1e:43:f5:b9:6d:f6:8f:91:31:aa:
5e:26:6c:7e:fa:8f:86:75:70:94:62:29:a3:2a:95:
8f:3c:b7:7b:d1:25:64:25:05:4c:33:af:7c:39:89:
99:c2:db:ba:14:24:1b:7f:fa:f9:f0:e5:93:c3:23:
2d:21:33:a1:f3:35:43:4e:d1:2c:df:f5:a3:15:9e:
b7:26:ac:53:f4:31:1b:6a:82:53:2a:eb:ec:2e:db:
6a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:93:77:6B:4C:C1:0E:65:CE:43:11:9E:7E:DB:F6:0E:3B:02:68:F3
X509v3 Authority Key Identifier:
keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/XZN3a0zBDmXOQxGeftv2DjsCaPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:eb:fd:39:9c:e6:8d:ee:fb:44:d7:52:55:e6:92:14:b9:42:
11:05:6d:06:0e:23:47:fb:6a:45:58:c6:81:54:36:a4:ef:9a:
5c:a7:14:e7:69:2f:ec:78:e8:db:58:2b:a1:4d:9b:4a:d8:cb:
be:42:4d:55:45:30:cb:5d:5b:b5:1d:e9:20:5d:73:19:a5:ff:
3f:d4:1e:4e:84:29:f7:e4:74:5f:3e:37:49:7a:1d:31:84:39:
cc:67:df:58:eb:57:ee:17:64:cf:0c:ce:61:46:25:10:65:00:
88:c7:29:f3:17:44:5e:36:6e:ea:a7:f1:63:c5:46:be:bb:fe:
0a:2c:98:9e:aa:49:82:d7:3f:6a:06:96:00:33:41:97:97:ad:
53:fa:26:2b:02:1b:91:9a:5f:64:b2:4d:f8:06:e9:11:65:84:
08:3a:76:76:b9:bf:ae:1a:71:ce:55:ff:94:93:76:10:55:a6:
d9:17:34:4a:ad:d3:ce:e8:94:e9:21:d2:31:33:f2:71:4e:8d:
93:08:be:69:78:e1:0a:87:a0:00:6b:80:f7:9a:e3:e3:e0:04:
73:02:75:92:53:41:ca:3b:04:30:e8:d4:08:b6:8d:1b:9b:b0:
d7:35:78:a3:43:48:7a:a9:03:12:19:0f:28:52:31:0a:5b:35:
dc:8f:ad:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:17:38 2025 by rpki-client