Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/pTYjs6-aYUCc7_WPSszg7zKQhGA.roa
File: pTYjs6-aYUCc7_WPSszg7zKQhGA.roa (raw, json)
Hash identifier: r2JgqFRtAi4ArOYYsrSpvEnFzf1uDgmrFxI/jVmaolk=
Subject key identifier: A5:36:23:B3:AF:9A:61:40:9C:EF:F5:8F:4A:CC:E0:EF:32:90:84:60
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 0195DBAF8C2CFC6D165AEBDA2B02D291023B
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/pTYjs6-aYUCc7_WPSszg7zKQhGA.roa
Signing time: Fri 28 Mar 2025 07:37:49 +0000
ROA not before: Fri 28 Mar 2025 07:37:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 719
IP address blocks: 192.58.49.0/24 maxlen: 24
192.103.87.0/24 maxlen: 24
192.103.90.0/24 maxlen: 24
194.137.11.0/24 maxlen: 24
194.137.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Apr 2025 06:34:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:db:af:8c:2c:fc:6d:16:5a:eb:da:2b:02:d2:91:02:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Mar 28 07:37:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a53623b3af9a61409ceff58f4acce0ef32908460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8c:5a:8f:d8:02:bc:93:be:40:d0:38:85:14:
be:85:bf:6f:83:f1:14:35:56:90:4d:7e:49:99:8a:
1e:01:ca:d3:be:a2:62:2e:b9:dc:a3:e7:46:a6:a1:
9d:df:b1:11:bb:ad:fb:c7:67:08:0b:88:ae:50:8f:
44:b5:8c:8a:0f:7d:ab:37:44:a8:0e:83:ea:3b:04:
84:61:ec:98:74:6b:c2:ca:23:3a:91:2a:88:f1:6e:
dd:34:54:19:25:e3:22:df:ed:41:37:0e:b9:c1:52:
77:c7:23:d1:33:da:41:dc:7e:da:9c:29:7b:8e:59:
68:32:6a:db:73:e0:ad:5d:ba:7d:4c:50:65:92:4c:
d7:97:68:ad:61:ce:7f:40:c6:8c:ca:30:82:56:34:
e6:ad:03:1a:9f:b8:16:e4:36:5b:58:6c:ae:a8:38:
b8:a5:36:2f:98:7f:68:48:f5:3f:ac:06:2f:aa:99:
60:c9:1a:fc:36:fc:19:c9:c4:9b:87:f6:48:1a:94:
35:6c:27:e3:72:82:a7:7e:51:bd:09:68:45:7a:f2:
7f:61:63:d7:80:8e:92:b7:4f:da:2c:7f:9e:9c:6f:
74:af:c4:db:f5:96:5a:94:1d:b4:dc:b1:2d:90:2f:
2c:f1:44:5f:ec:af:74:af:fa:a6:e2:9f:07:65:97:
f9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:36:23:B3:AF:9A:61:40:9C:EF:F5:8F:4A:CC:E0:EF:32:90:84:60
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/pTYjs6-aYUCc7_WPSszg7zKQhGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.58.49.0/24
192.103.87.0/24
192.103.90.0/24
194.137.11.0/24
194.137.159.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:d5:2c:48:dd:5b:64:63:6b:f3:de:97:04:61:c3:e8:a5:ff:
e0:b5:0b:09:27:94:2c:bb:e3:d1:ef:51:be:e4:af:ef:7e:ee:
59:32:6c:71:eb:5c:0a:d2:d6:47:9d:82:40:f6:58:c0:3f:4b:
26:2a:d7:fb:29:d4:4f:58:02:76:c2:d3:6b:f3:f2:ab:41:9d:
14:4e:34:78:bc:ac:78:5e:32:7e:e9:91:8f:df:15:00:62:f1:
50:01:58:fd:58:f3:36:5e:f2:7c:d0:c2:f6:9d:13:c8:fb:16:
de:b7:cf:93:65:78:91:5e:59:cd:06:e7:aa:b9:f3:63:57:78:
2e:c9:88:88:43:f7:0b:fc:f1:80:48:42:65:6f:85:7e:2e:ab:
7d:aa:61:6e:eb:dd:6a:b5:dd:d4:be:20:60:35:b3:81:9a:b1:
e1:72:e4:f5:88:3b:e1:ea:c6:9a:38:0f:40:81:30:1e:9f:18:
4a:c3:1d:2d:7c:e2:37:68:61:67:d9:af:75:03:78:fb:f7:88:
bb:72:70:30:15:2b:42:ab:c8:f6:c8:45:25:8f:c0:c7:4c:de:
45:37:a5:45:a2:29:a1:d9:51:f6:06:33:ae:ae:bd:de:d3:bb:
e0:be:66:d4:ce:10:2a:44:d9:06:6e:ac:b1:db:98:bc:4f:19:
a1:4f:53:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:41:48 2025 by rpki-client