Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/etRzjA_2rVUi5EqPlWVtqQvlF1E.roa
File: etRzjA_2rVUi5EqPlWVtqQvlF1E.roa (raw, json)
Hash identifier: MPLwCZ5Ib0z9yePg8LD6Pr5u8MXvL9s0UaO46iO9YWE=
Subject key identifier: 7A:D4:73:8C:0F:F6:AD:55:22:E4:4A:8F:95:65:6D:A9:0B:E5:17:51
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019421B23D080AF4CA28915B19710E0CEB15
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/etRzjA_2rVUi5EqPlWVtqQvlF1E.roa
Signing time: Wed 01 Jan 2025 11:48:36 +0000
ROA not before: Wed 01 Jan 2025 11:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202654
IP address blocks: 194.8.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Jan 2025 15:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3d:08:0a:f4:ca:28:91:5b:19:71:0e:0c:eb:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ad4738c0ff6ad5522e44a8f95656da90be51751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:21:37:cb:f5:d2:56:d0:71:e4:37:d1:92:82:
a8:64:c0:47:b4:be:e6:2c:60:83:62:35:7e:b6:59:
57:bd:d9:4c:ae:7c:34:20:ee:5c:63:46:48:33:bd:
7a:bc:73:bc:3b:33:37:e0:ac:cd:5c:61:dd:68:23:
45:c7:e1:c3:03:66:15:b0:9e:86:fb:ae:97:31:4c:
10:5b:ad:1d:2c:2b:9d:bd:c8:a2:35:82:31:eb:85:
88:7a:40:f0:f7:05:60:5d:19:da:63:e1:b4:ca:cf:
5b:d2:39:c2:62:98:93:4c:9a:0d:1b:bb:b1:ce:9b:
2a:fc:f2:3a:68:3f:4f:e7:6b:51:d2:93:6c:dc:6f:
de:2f:e2:f5:eb:b8:c0:34:4f:ff:d7:ab:5b:1b:92:
de:c9:b9:cb:51:f6:9c:93:01:d8:5b:9b:f0:35:3c:
d8:9d:1f:df:20:89:08:ff:97:65:08:f1:88:66:ec:
11:d2:41:08:12:c0:73:36:16:dd:13:24:20:e1:67:
39:0f:81:df:b6:02:9d:dd:09:50:47:d9:07:58:45:
e3:f5:e3:49:f8:9c:12:f7:96:89:64:d5:fc:ff:41:
0b:5e:3d:64:af:5a:58:77:4c:51:d0:5c:ab:6e:c5:
33:d2:85:bb:43:15:b9:2f:cd:8e:99:26:cc:71:47:
9f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D4:73:8C:0F:F6:AD:55:22:E4:4A:8F:95:65:6D:A9:0B:E5:17:51
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/etRzjA_2rVUi5EqPlWVtqQvlF1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.239.0/24
Signature Algorithm: sha256WithRSAEncryption
95:42:6c:22:b5:4a:41:61:c5:f4:4e:fe:0a:2f:6f:6a:b6:a6:
cb:32:7f:c4:01:d3:b5:2a:6b:b7:f3:d5:a4:4c:46:75:ee:ea:
d9:43:b9:d3:f9:f1:f5:c4:e7:a6:f7:aa:a2:cf:38:8f:e5:c1:
f8:ca:0e:55:05:b4:13:4e:86:0c:cf:38:e4:99:39:49:07:50:
08:33:bc:df:d8:92:9a:0b:e9:02:8c:8e:5a:cf:4a:93:8a:10:
2d:76:29:b7:76:e0:9e:e1:e5:b3:87:50:cf:26:c8:16:21:18:
71:83:9b:c2:16:91:30:8e:e8:d5:5f:39:9e:6b:aa:54:29:a3:
91:75:5c:9a:b2:d0:22:cb:30:c1:13:59:5e:f8:6e:c5:d8:90:
68:ee:1f:ff:54:ea:49:47:ac:a7:e7:cf:84:c3:85:15:20:1b:
21:d2:7d:58:9e:a4:ea:9b:53:7d:d1:22:04:60:7b:99:aa:4a:
50:3f:63:84:c5:58:d1:6f:6f:ad:a3:c9:b0:0b:e5:ae:2d:12:
87:ef:d3:1f:1c:65:17:8f:dc:54:5c:6a:93:07:54:e2:5a:aa:
75:51:ef:36:74:e9:9b:e5:64:9a:8c:88:25:38:60:a6:a7:48:
0d:33:de:57:d8:00:2a:55:5f:7c:80:93:28:f4:ef:c8:64:9d:
c3:5d:b0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:24:42 2025 by rpki-client