Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/7VA3w9t3r4XYJ3vszy8fVzLgQJg.roa
File: 7VA3w9t3r4XYJ3vszy8fVzLgQJg.roa (raw, json)
Hash identifier: 8h8DYfEL2as1MrIGs9XYN1K/dh+ORGt6u8CJNIKrvWc=
Subject key identifier: ED:50:37:C3:DB:77:AF:85:D8:27:7B:EC:CF:2F:1F:57:32:E0:40:98
Certificate issuer: /CN=b0809dc07bc0775198f2f31554152f356a83f770
Certificate serial: 019422FBAF4187207956C00C7344B4DE7B6C
Authority key identifier: B0:80:9D:C0:7B:C0:77:51:98:F2:F3:15:54:15:2F:35:6A:83:F7:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/7VA3w9t3r4XYJ3vszy8fVzLgQJg.roa
Signing time: Wed 01 Jan 2025 17:48:27 +0000
ROA not before: Wed 01 Jan 2025 17:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1103
IP address blocks: 194.104.124.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 17 Jan 2025 10:09:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:af:41:87:20:79:56:c0:0c:73:44:b4:de:7b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0809dc07bc0775198f2f31554152f356a83f770
Validity
Not Before: Jan 1 17:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed5037c3db77af85d8277beccf2f1f5732e04098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:7d:3d:f0:f7:a7:23:9f:64:c6:4f:d1:76:
bb:a3:12:3f:ca:8f:f3:4d:e2:a6:69:76:23:c5:e2:
72:5a:c1:d4:6b:30:98:83:95:cd:b0:d5:4f:bd:c3:
0c:df:33:b0:4e:7b:81:a2:1d:ea:36:d9:fe:b3:0a:
1d:2d:13:11:6f:f7:92:a4:9a:2f:04:e0:3e:d3:6e:
72:87:ce:69:fd:8a:4a:bb:74:8f:f0:bc:13:d2:8f:
49:a9:5a:39:62:6e:4c:5b:a0:82:dd:4c:54:e7:37:
ee:61:f5:f7:cd:2d:53:18:98:04:0a:03:cc:28:f9:
3d:ef:54:77:06:c5:eb:01:70:b6:12:1d:0c:0c:73:
6c:04:4f:e8:fc:1f:51:e1:de:72:84:bb:b1:d1:e9:
96:4b:08:f6:10:96:69:90:0c:57:16:80:7c:f5:e5:
f0:7f:bc:aa:6d:35:cc:e5:34:5b:e5:e9:ee:86:af:
bc:e2:30:b9:6c:2a:09:ec:43:cb:b0:89:8c:01:83:
5c:d3:0c:77:ce:8e:5f:91:76:50:cc:ac:5d:6b:45:
6d:9a:ec:e8:80:81:9c:ff:c0:07:9a:06:31:0c:2d:
87:ca:74:23:de:d6:81:ce:db:a2:9b:7f:13:e2:43:
3a:69:10:ab:b1:7a:d6:9a:2a:5b:0a:67:b0:d8:4f:
a5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:50:37:C3:DB:77:AF:85:D8:27:7B:EC:CF:2F:1F:57:32:E0:40:98
X509v3 Authority Key Identifier:
keyid:B0:80:9D:C0:7B:C0:77:51:98:F2:F3:15:54:15:2F:35:6A:83:F7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/7VA3w9t3r4XYJ3vszy8fVzLgQJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.124.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:ae:c3:28:5c:b7:e0:bf:ad:61:f3:59:c1:99:ab:cd:7b:2f:
94:a9:db:1e:ce:cf:f0:a2:77:4b:69:08:8b:72:5f:e2:58:b6:
af:f0:8b:21:9d:47:37:10:bf:dd:c1:fe:bb:ad:ca:00:b9:f0:
8b:0b:bd:82:d5:a3:3f:66:30:e1:f6:9c:d7:84:0d:e1:ba:da:
89:58:45:eb:b4:6e:4a:f6:5f:d9:87:bf:8e:6c:0c:fc:6e:4a:
ea:46:2c:5e:9a:bc:d8:7e:a1:4a:e4:f9:c7:29:39:93:ae:67:
e6:d6:46:56:67:7b:f8:47:21:a8:99:6e:08:6f:e7:e4:ee:a7:
02:ee:36:a0:d8:1f:39:b4:dc:bd:cf:3e:2c:be:7e:10:92:ff:
30:9f:22:4c:bc:d7:63:f1:ad:96:e4:a7:7d:1c:f9:0a:e5:f1:
76:69:45:61:16:91:e8:53:51:33:45:b9:7f:a8:b6:b1:50:9d:
b8:35:36:03:e8:0b:0a:37:46:59:cb:dc:74:7a:dd:4f:97:f6:
86:b2:9d:29:b5:67:a2:f6:d8:3a:7e:0a:b4:fd:08:ef:c2:9a:
f8:b0:67:e0:64:a8:10:4a:0a:ea:7b:d8:85:56:1c:51:44:d0:
ce:93:2a:ad:4b:e4:6b:30:23:c4:3f:49:cf:d1:b5:e6:5d:16:
86:05:0d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:00:02 2025 by rpki-client