Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/r9Fk2p78tzdaSvAuYw8G4F3mwHc.roa
File: r9Fk2p78tzdaSvAuYw8G4F3mwHc.roa (raw, json)
Hash identifier: VfoYGB4/HkWM0fEsl7zodxtU6/tpbyj7iXOl6MSohDI=
Subject key identifier: AF:D1:64:DA:9E:FC:B7:37:5A:4A:F0:2E:63:0F:06:E0:5D:E6:C0:77
Certificate issuer: /CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Certificate serial: 018CC94D7C8CB8FB8E3ED98C577967D5E087
Authority key identifier: B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/r9Fk2p78tzdaSvAuYw8G4F3mwHc.roa
Signing time: Tue 02 Jan 2024 08:32:27 +0000
ROA not before: Tue 02 Jan 2024 08:32:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25444
IP address blocks: 195.20.126.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:48:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:7c:8c:b8:fb:8e:3e:d9:8c:57:79:67:d5:e0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Validity
Not Before: Jan 2 08:32:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afd164da9efcb7375a4af02e630f06e05de6c077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:37:33:f8:32:3c:19:35:69:91:dc:f9:58:13:
c6:65:5f:9b:ae:e2:52:c4:16:89:c0:38:2d:84:a5:
fe:81:38:06:f4:59:48:b7:25:d9:38:e4:05:c1:29:
4c:bc:d6:dc:57:65:7b:5e:cc:a0:32:80:db:38:39:
80:fd:fb:aa:3e:1d:46:62:18:02:ca:7e:cc:fe:26:
23:22:31:25:4d:9e:f7:0f:eb:ac:51:34:97:e4:7f:
6c:26:66:3e:86:2c:6b:2b:e6:93:94:9e:f4:44:8f:
a9:3e:84:1d:71:40:8e:ea:a8:de:aa:68:dd:14:9b:
74:b9:65:15:14:29:5b:32:e6:08:aa:d3:3c:ca:d1:
9b:49:cd:fa:d3:02:6f:1f:d6:8c:80:e4:84:a9:a3:
41:81:12:d4:2f:12:c7:f1:34:89:9e:d9:a0:ab:6a:
30:35:be:67:39:ad:e6:b1:99:37:a0:d8:67:03:26:
f3:12:4d:43:02:e4:82:0f:7c:3a:c7:07:33:02:5f:
8f:58:00:50:cd:d4:24:23:d6:e4:8d:dc:12:c9:76:
c3:99:ac:fd:e0:ce:56:6a:e3:e5:5b:7d:8e:8c:51:
fa:4a:73:43:52:ee:b5:04:ac:34:64:03:2f:65:5f:
45:bb:98:e8:d0:af:d6:44:b0:4b:cd:f7:48:7a:71:
fe:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D1:64:DA:9E:FC:B7:37:5A:4A:F0:2E:63:0F:06:E0:5D:E6:C0:77
X509v3 Authority Key Identifier:
keyid:B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/r9Fk2p78tzdaSvAuYw8G4F3mwHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.126.0/23
Signature Algorithm: sha256WithRSAEncryption
23:69:c5:96:3e:00:52:6f:c4:e1:d4:17:b9:1f:5c:e9:d4:3b:
fd:76:3b:82:96:a0:01:af:0c:44:18:2f:37:fa:2e:68:ad:ac:
27:49:7b:77:49:32:23:c9:e0:a6:a0:0a:ad:32:85:01:7a:ec:
e1:9b:37:5c:d4:50:86:2b:87:96:a6:31:a7:d6:02:55:c4:be:
a9:eb:61:ef:55:df:f0:41:f1:81:a9:b1:94:1b:98:61:cd:08:
fe:b2:28:e4:e0:27:70:01:cb:4e:df:12:6a:fb:49:15:7f:13:
59:e9:ff:7e:ca:e7:60:be:de:e8:fd:ab:5c:82:00:4e:8c:ef:
72:09:10:9b:1e:dc:e6:48:6d:d7:76:ce:54:ff:93:9d:8a:f7:
6e:c5:95:d7:56:7a:92:e0:b9:fc:c0:20:9d:d8:2e:f7:c9:34:
31:ac:8c:2f:d3:7d:cd:5b:ff:88:52:02:2b:dc:f9:54:5b:7b:
d5:59:19:7c:4e:19:62:c1:10:a1:68:51:1e:cf:49:fa:3b:84:
80:37:e4:5c:fd:c6:53:f6:be:4d:dd:05:24:b8:34:a7:ac:ad:
b6:7b:f0:3c:c8:f9:f7:b5:f2:20:2c:55:f7:92:ed:fe:1c:4c:
3d:e3:c6:81:73:66:82:57:26:3f:3f:60:a5:d5:52:e1:43:06:
42:2a:cf:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 14:59:29 2025 by rpki-client