Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/AKkFEChIJeXbIIIoP5X7907tpDQ.roa
File: AKkFEChIJeXbIIIoP5X7907tpDQ.roa (raw, json)
Hash identifier: L7S3uaQWMqF1QXDGlRwTcvCVjU1CRZhUFRwfzUM8f0c=
Subject key identifier: 00:A9:05:10:28:48:25:E5:DB:20:82:28:3F:95:FB:F7:4E:ED:A4:34
Certificate issuer: /CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Certificate serial: 01965D45153CAAFE56505229948B0CF9874C
Authority key identifier: CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/AKkFEChIJeXbIIIoP5X7907tpDQ.roa
Signing time: Tue 22 Apr 2025 11:32:10 +0000
ROA not before: Tue 22 Apr 2025 11:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 176.124.200.0/24 maxlen: 24
176.124.208.0/24 maxlen: 24
176.124.209.0/24 maxlen: 24
176.124.210.0/24 maxlen: 24
176.124.211.0/24 maxlen: 24
176.124.212.0/24 maxlen: 24
176.124.213.0/24 maxlen: 24
176.124.214.0/24 maxlen: 24
176.124.215.0/24 maxlen: 24
176.124.216.0/24 maxlen: 24
176.124.217.0/24 maxlen: 24
176.124.218.0/24 maxlen: 24
176.124.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Apr 2025 13:15:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:45:15:3c:aa:fe:56:50:52:29:94:8b:0c:f9:87:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Validity
Not Before: Apr 22 11:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00a90510284825e5db2082283f95fbf74eeda434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5a:09:04:b7:65:62:15:80:fb:7e:34:48:d8:
4f:3a:01:97:c9:84:97:b8:ad:a9:e0:49:7e:46:c7:
32:0d:d0:62:79:3f:c1:12:01:ff:89:e2:fa:e8:7a:
30:85:5b:45:86:cf:47:b0:72:f0:0d:98:39:98:6b:
f6:96:49:df:b2:aa:18:49:44:91:67:95:6e:79:f0:
41:f2:6b:15:3e:87:56:45:f1:d9:ea:0a:de:fa:78:
7b:eb:9a:9c:45:34:05:ca:6b:02:e9:75:c7:76:94:
dc:61:38:03:bf:13:68:26:5b:92:1f:a1:0c:8b:c1:
3e:e4:3e:45:8a:c0:9f:ac:b5:a6:b3:6a:2e:03:50:
e6:fc:ae:27:cd:75:e0:a4:de:33:91:41:08:2f:78:
d4:4e:d0:04:54:09:c0:74:e3:79:cf:d9:cc:1c:7e:
ec:98:e1:d3:f0:4b:d2:4d:26:c2:a5:54:22:45:fe:
cf:ca:21:18:ad:1e:32:6c:51:3b:55:a3:56:10:7e:
e6:20:d1:f1:10:88:89:98:a6:7d:ac:e9:14:52:94:
d1:ad:7a:7c:90:c5:57:2e:b3:f6:96:e5:8d:ac:44:
2e:50:57:08:8b:a6:f4:97:f3:ca:41:e4:ed:ef:3b:
2c:a6:67:ba:88:5f:85:52:60:9e:9e:86:c2:6a:f0:
e4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A9:05:10:28:48:25:E5:DB:20:82:28:3F:95:FB:F7:4E:ED:A4:34
X509v3 Authority Key Identifier:
keyid:CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/AKkFEChIJeXbIIIoP5X7907tpDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.200.0/24
176.124.208.0-176.124.219.255
Signature Algorithm: sha256WithRSAEncryption
2e:ee:a6:c8:7e:e1:1d:70:a3:3d:b4:e0:4e:b3:e6:b8:82:51:
f3:59:62:54:01:91:57:8d:42:32:59:f7:63:50:61:f5:ea:3e:
83:5e:cc:52:15:78:88:ab:79:08:9a:f6:5c:77:82:5b:b7:62:
72:a7:fa:f0:06:5c:5a:d0:96:bf:7d:6d:9a:de:43:33:4f:69:
be:27:13:fe:3a:63:9a:01:66:3e:19:9b:2e:38:b1:e5:0c:56:
db:47:75:72:a7:cf:d5:78:0f:60:39:0c:18:77:8e:10:bd:53:
12:b3:e0:91:ed:d2:b8:78:18:30:d2:72:36:b3:26:22:0d:cf:
95:0e:8f:bb:45:b4:f0:df:e0:ab:83:48:c9:41:ef:fb:ef:f6:
ca:a7:2c:64:f8:c7:b9:9c:44:a5:fc:07:16:00:1b:79:db:81:
97:02:13:c5:6e:9f:42:ac:88:61:b1:87:8a:d6:54:ca:ac:7b:
35:18:96:22:c3:08:06:18:65:69:55:1a:21:1e:35:aa:89:b3:
c7:50:4a:cc:4d:65:66:33:77:46:79:dc:25:e7:0a:62:a0:f1:
40:b9:2d:8a:b8:a8:8e:ad:54:03:55:3f:8a:66:15:dc:8d:90:
be:ec:5b:94:9a:c6:43:a1:b7:66:ca:d3:7c:c9:2b:b7:3e:dc:
2d:27:ad:7a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri May 9 08:08:32 2025 by rpki-client