Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/j6lCtF9dOz4wLrjnAX9ZgtvlI6Y.roa
File: j6lCtF9dOz4wLrjnAX9ZgtvlI6Y.roa (raw, json)
Hash identifier: 0nr/3RPDAWXrSjwEmC0T4sQi4IwzBcDKyYBlyIQs1dk=
Subject key identifier: 8F:A9:42:B4:5F:5D:3B:3E:30:2E:B8:E7:01:7F:59:82:DB:E5:23:A6
Certificate issuer: /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Certificate serial: 019505E66F70E945474A13F8E7E934007AFF
Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/j6lCtF9dOz4wLrjnAX9ZgtvlI6Y.roa
Signing time: Fri 14 Feb 2025 19:19:02 +0000
ROA not before: Fri 14 Feb 2025 19:19:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399970
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 20:18:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:05:e6:6f:70:e9:45:47:4a:13:f8:e7:e9:34:00:7a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Validity
Not Before: Feb 14 19:19:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fa942b45f5d3b3e302eb8e7017f5982dbe523a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:c4:52:eb:bb:92:6b:8a:87:e2:32:14:64:
be:bf:17:02:86:f5:78:ad:03:bc:c2:38:b0:ca:f6:
e3:97:89:e6:64:a2:8d:6e:8f:75:48:24:82:b5:6c:
3a:e2:90:3c:d2:1f:0c:79:2d:1b:e6:78:49:d8:77:
86:a4:e6:4d:ad:1b:7c:26:56:51:56:54:a6:22:c6:
d7:7e:c6:2a:01:36:99:6f:fc:96:ce:f7:73:20:fa:
2e:cd:26:71:04:64:ef:40:55:02:f4:a3:d8:c2:96:
1a:07:da:11:bf:75:24:6a:59:84:04:8f:0a:a3:54:
15:f1:93:e7:b8:42:5d:6b:8a:9d:08:3b:b4:85:77:
12:21:2b:80:06:37:79:50:75:0f:76:a1:fb:55:1e:
90:7f:fd:50:85:92:7e:a5:48:d3:98:c4:34:dd:26:
32:1c:88:64:49:fa:9e:75:23:63:5a:a6:09:d7:0d:
b8:79:dc:94:1e:2c:3d:5a:8e:79:cc:56:73:d5:90:
fd:10:1e:14:6c:82:d5:97:1e:b7:0b:53:97:33:87:
d0:0d:43:1b:6f:6f:76:d2:ba:50:0e:61:95:93:f4:
1c:b6:7b:bf:49:3f:c3:ab:95:48:cd:be:e0:ba:cb:
bc:f4:93:14:e8:8b:e1:2b:9e:26:19:5d:44:3a:be:
71:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A9:42:B4:5F:5D:3B:3E:30:2E:B8:E7:01:7F:59:82:DB:E5:23:A6
X509v3 Authority Key Identifier:
keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/j6lCtF9dOz4wLrjnAX9ZgtvlI6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:5c:74:d1:e0:72:c9:e8:9f:9f:ff:d1:18:5c:f8:22:ee:2f:
d5:3b:7b:bc:54:28:72:fb:54:8d:10:29:9b:88:99:6e:37:1e:
3f:2b:77:f9:f1:4d:51:1b:98:e2:e2:c6:37:87:a6:8f:89:dd:
08:b0:2f:4d:bc:60:a2:4a:c0:f0:98:7e:02:6f:19:83:bc:f3:
ab:3b:9c:1e:0c:84:07:94:e0:42:6c:b3:99:db:c4:1d:9b:cd:
be:78:93:2a:39:b9:13:9d:d4:23:f5:4a:d9:a1:59:1c:f4:f1:
2f:f9:ca:74:ec:49:36:c7:24:d2:f7:49:49:ff:c4:ec:7d:aa:
5c:ec:e4:2e:c4:9a:66:06:7a:1a:f4:1f:71:49:f8:0a:e0:4d:
d7:fb:fc:40:27:c6:0f:63:38:ad:b2:ba:a9:0c:20:19:06:ce:
dc:e1:6b:62:95:23:19:02:21:16:1c:4b:ce:25:ff:81:75:a5:
e1:e1:11:cf:3c:60:14:47:50:c9:54:cf:54:06:92:06:97:20:
c4:7d:92:dd:0f:f4:fc:6a:8a:74:13:fe:3c:22:8a:1a:38:31:
19:3f:c6:0c:dd:5a:f5:55:d8:49:26:f9:f1:e7:57:02:1a:3b:
a5:2c:f2:ba:5c:8f:69:c5:fd:85:d8:a4:a9:f7:54:8f:db:83:
70:72:be:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:07:33 2025 by rpki-client