Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/h7b8Ur76pXrJ5HjE1rPds8Mf8M8.roa
File: h7b8Ur76pXrJ5HjE1rPds8Mf8M8.roa (raw, json)
Hash identifier: CyhrblYy/8oZbWQUVmD3jSyESFRc7AXTCDX5qNGw140=
Subject key identifier: 87:B6:FC:52:BE:FA:A5:7A:C9:E4:78:C4:D6:B3:DD:B3:C3:1F:F0:CF
Certificate issuer: /CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Certificate serial: 0196A0D2797ADC5AE00A2064E268496B7D5C
Authority key identifier: 68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/h7b8Ur76pXrJ5HjE1rPds8Mf8M8.roa
Signing time: Mon 05 May 2025 14:21:10 +0000
ROA not before: Mon 05 May 2025 14:21:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211274
IP address blocks: 193.56.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 15:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:d2:79:7a:dc:5a:e0:0a:20:64:e2:68:49:6b:7d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Validity
Not Before: May 5 14:21:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87b6fc52befaa57ac9e478c4d6b3ddb3c31ff0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4f:b8:9d:10:74:f7:bd:31:8f:8b:e0:ce:3b:
40:af:85:2e:25:4e:f5:8e:b3:2a:c8:1a:1a:6c:40:
62:7c:57:47:c9:37:fd:f4:8c:09:e6:b5:19:12:67:
ad:1a:6d:12:ad:05:e0:cc:12:62:53:f7:5b:c7:65:
28:5f:7b:c7:76:86:1e:6c:54:d8:4c:7b:c2:11:e1:
98:fa:16:7a:3d:cc:35:40:38:1c:01:95:1f:85:7d:
29:ec:21:c1:3c:b6:18:e7:83:06:e1:f3:53:db:37:
dd:86:d9:29:ac:ea:c8:48:6f:8a:df:52:d9:00:48:
cf:35:b5:48:07:a6:ab:6d:3a:1f:b1:42:a8:a0:60:
fc:28:cd:d4:e5:3e:40:41:c6:36:48:a7:7b:c7:22:
55:70:0e:a3:e8:d9:f3:8c:64:dd:4f:ce:52:8d:3e:
3f:9a:b7:0a:d1:18:44:d9:7c:7a:d0:70:d9:c7:a6:
c6:02:5b:09:c0:d3:0c:2f:1f:fb:11:6f:d9:74:9b:
3c:f7:b5:37:c2:74:27:c6:d4:cf:ab:ab:bd:88:20:
dd:e1:68:4d:5a:28:2c:8f:12:d7:d8:16:0b:38:7c:
54:3f:04:77:8f:79:54:4a:45:1a:50:fa:32:1a:a9:
8d:1a:e9:7a:a2:02:a4:1c:80:f1:1e:14:d1:51:a3:
b5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B6:FC:52:BE:FA:A5:7A:C9:E4:78:C4:D6:B3:DD:B3:C3:1F:F0:CF
X509v3 Authority Key Identifier:
keyid:68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/h7b8Ur76pXrJ5HjE1rPds8Mf8M8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.11.0/24
Signature Algorithm: sha256WithRSAEncryption
32:57:3b:9a:6c:fe:77:43:93:65:6b:6c:3b:d1:26:89:69:c1:
c1:14:2e:b3:75:07:bb:9a:c7:9a:f1:bb:6c:de:a0:75:e4:77:
b9:78:b1:41:b4:2e:f0:a6:fd:6b:dc:49:4c:37:d2:44:6b:85:
0f:f1:d7:dd:59:4e:38:32:f2:19:d2:cf:9d:89:bb:8b:37:93:
dd:78:4a:4f:a4:2c:42:b9:17:c0:37:4e:df:c6:0d:01:42:c5:
e2:9e:14:3f:e2:98:1c:71:82:f9:6e:92:32:3f:f0:3a:5d:f1:
71:4b:ec:d1:35:a4:60:05:4f:89:40:6d:1e:5f:0f:5a:44:35:
2a:70:f4:56:df:e2:ee:c6:09:41:58:a8:38:04:f9:a5:59:71:
b1:cc:2c:6b:7a:ae:9d:da:71:06:3d:1e:de:f8:e0:da:cd:40:
e9:af:39:e0:f8:e8:83:5f:cc:23:f8:18:06:25:28:b3:fd:8d:
44:78:70:76:d3:92:8b:43:df:05:ca:1f:24:2f:24:dd:62:b7:
ca:b3:ea:85:4c:66:d1:fb:07:a9:fa:2b:75:81:51:cb:4b:ec:
35:8e:1e:98:67:75:6e:f2:24:15:e4:d5:d2:57:53:f6:11:e2:
56:0c:9a:ab:bc:bd:c8:32:bc:a9:21:4b:83:97:27:58:2a:c0:
b6:75:e2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:50:14 2025 by rpki-client