Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/K2BHMEg445xrJhgIN8IiAOTRXYA.roa
File: K2BHMEg445xrJhgIN8IiAOTRXYA.roa (raw, json)
Hash identifier: +7QDCugmPIvq9ykP4uWwJYkZz69n11+ABxi75bwpET0=
Subject key identifier: 2B:60:47:30:48:38:E3:9C:6B:26:18:08:37:C2:22:00:E4:D1:5D:80
Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0
Certificate serial: 0195619E4F2AFA69AA008A3E8436A600E61E
Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/K2BHMEg445xrJhgIN8IiAOTRXYA.roa
Signing time: Tue 04 Mar 2025 14:45:19 +0000
ROA not before: Tue 04 Mar 2025 14:45:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214051
IP address blocks: 195.151.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Mar 2025 08:28:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:61:9e:4f:2a:fa:69:aa:00:8a:3e:84:36:a6:00:e6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0
Validity
Not Before: Mar 4 14:45:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b6047304838e39c6b26180837c22200e4d15d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bc:63:c9:1e:49:0b:fd:a1:0a:33:8c:36:f4:
25:d9:be:a7:fd:78:0d:30:a9:72:2e:3e:b2:cc:15:
69:25:39:ed:dc:c2:f4:4a:16:32:20:31:1e:59:59:
4f:6c:54:91:11:cb:ff:12:94:bc:25:1b:24:3a:a4:
4f:f2:d4:10:1f:9b:ef:24:e0:ab:c7:b2:46:d8:a1:
1c:e0:6a:b1:65:01:09:4f:2a:d4:69:0c:a5:01:03:
eb:b8:fa:7c:8a:5f:9d:de:17:82:31:41:3b:fa:9e:
29:4b:ea:85:39:78:d4:96:b8:f1:fe:62:2e:4c:3a:
96:fd:7e:ae:75:c7:cc:9e:46:e0:03:fd:8a:d6:4e:
56:eb:0b:8e:8c:a3:71:ee:11:89:b4:5e:2e:03:ed:
ed:3d:47:29:d7:74:c5:3c:44:84:4b:9d:5c:a8:ed:
8e:44:33:8d:19:8e:29:fe:60:63:aa:d9:82:b0:35:
5a:b1:7e:e0:90:75:d8:60:34:06:90:4a:27:e7:50:
a2:37:ab:87:9e:86:48:51:b9:82:7c:e5:9a:4e:f8:
fc:3b:3b:a5:c9:57:dc:43:8e:d6:cb:d4:9c:90:ce:
e8:3b:8b:cf:e1:0c:b2:be:3a:fa:c7:41:00:42:21:
ca:15:4e:61:28:6c:a9:cf:3e:ea:51:fe:34:d7:2d:
67:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:60:47:30:48:38:E3:9C:6B:26:18:08:37:C2:22:00:E4:D1:5D:80
X509v3 Authority Key Identifier:
keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/K2BHMEg445xrJhgIN8IiAOTRXYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.151.14.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:39:ae:22:1f:6e:f2:49:06:d9:23:51:ba:25:a2:e3:f3:b0:
71:22:1b:79:61:0b:ab:16:41:e2:63:18:22:5d:8f:fb:9f:69:
f2:78:c0:0e:dc:58:88:e9:70:6f:ff:02:1f:29:78:e8:9f:28:
c9:6b:24:2b:1a:dd:de:a0:3d:48:fa:c4:07:71:fa:a2:49:61:
55:3b:e3:c7:78:be:60:76:22:0a:3b:d0:3a:eb:f6:2f:55:3d:
0d:0e:f3:0d:3b:1d:ef:01:a0:62:7e:a5:ca:59:c5:fd:ab:54:
fe:fa:0b:2d:46:af:8a:3c:6d:fd:06:ab:c9:e5:91:3f:5d:36:
6d:c2:cd:3d:16:15:ef:5f:cf:d5:16:47:2d:ea:88:42:d4:9b:
37:0b:4c:b2:91:b8:b8:02:af:e9:6f:5f:2b:75:8b:41:ad:dc:
c4:bc:9b:df:ff:98:49:27:6c:03:b3:51:81:39:49:03:41:96:
d6:4f:11:fd:77:bc:40:0a:f5:77:08:ef:bc:fe:dc:2d:e5:69:
22:77:88:e3:4c:78:6c:0a:86:28:50:20:cc:c1:6f:b1:30:7a:
a4:fe:62:2c:de:53:d8:d6:03:2c:7a:23:fb:d5:28:75:d4:5a:
22:f1:91:4d:03:34:58:f9:73:a8:57:ed:01:f4:0f:2e:07:d6:
fe:7d:c9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:45:58 2025 by rpki-client