Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/PPfQ2Kqk_QKw_MsbIq3N8OdpPFQ.roa
File: PPfQ2Kqk_QKw_MsbIq3N8OdpPFQ.roa (raw, json)
Hash identifier: cK59AhsY6rBwqHAPP8Bw1M1joUKqGO+eFe0U15vykUU=
Subject key identifier: 3C:F7:D0:D8:AA:A4:FD:02:B0:FC:CB:1B:22:AD:CD:F0:E7:69:3C:54
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0194228DBD68AF1E891AAA07D0BD16DF1151
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/PPfQ2Kqk_QKw_MsbIq3N8OdpPFQ.roa
Signing time: Wed 01 Jan 2025 15:48:21 +0000
ROA not before: Wed 01 Jan 2025 15:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 194.31.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Feb 2025 11:47:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:bd:68:af:1e:89:1a:aa:07:d0:bd:16:df:11:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jan 1 15:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cf7d0d8aaa4fd02b0fccb1b22adcdf0e7693c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1d:20:53:2b:c0:c1:c0:f1:4e:4a:ce:01:5c:
0d:b9:de:14:d3:52:31:9f:4e:c0:dc:d5:d5:81:f2:
c1:b3:bc:02:8a:d5:73:cb:fe:1c:52:75:f0:c9:b2:
b8:9e:76:a2:c3:78:26:86:e0:b4:36:0a:aa:fa:5c:
ff:48:99:a0:4e:a9:4f:7f:32:f2:6a:f8:8e:ab:2d:
fc:f1:ec:ca:e4:70:f4:6d:b2:54:4d:9f:e9:17:3b:
c5:9f:9a:e1:7f:d2:44:4e:77:83:6b:fc:7b:af:c4:
e9:ba:80:10:4d:21:9f:4b:ff:f9:09:06:c7:5c:e7:
52:1a:61:7e:3c:fd:ec:47:dd:47:53:3d:3a:0f:eb:
e8:3a:0d:26:82:d9:a3:c1:90:40:26:b2:b5:3c:40:
f1:7f:20:4e:09:4a:58:aa:ac:71:11:51:b7:20:9c:
2f:aa:ee:c5:5c:01:d5:7c:83:21:a1:c6:f2:d1:8b:
27:e9:02:f4:d8:71:f5:c6:10:e6:7e:09:02:9b:c1:
17:44:00:66:8d:18:49:ad:bf:4e:c6:ab:6b:b7:0a:
4f:e1:69:0e:38:e0:2e:e9:b9:35:a4:a7:ec:8f:83:
3c:08:7a:3f:ca:8e:99:69:e7:6b:29:db:e1:87:0c:
18:82:e9:10:c6:bc:1b:8c:d0:9b:e6:34:01:57:75:
9f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F7:D0:D8:AA:A4:FD:02:B0:FC:CB:1B:22:AD:CD:F0:E7:69:3C:54
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/PPfQ2Kqk_QKw_MsbIq3N8OdpPFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.73.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:e2:8a:e7:72:18:6e:c6:ee:a3:08:ad:86:6e:75:b3:54:91:
25:e2:0d:d0:7e:af:02:54:92:02:d9:3f:73:9b:13:66:98:17:
fd:25:3c:d8:fa:51:8e:c4:90:9a:eb:9a:72:b6:ed:65:c6:b0:
d2:fe:52:31:ff:38:76:0c:61:28:f8:58:fe:a7:df:c3:cd:e1:
6f:bb:7e:1b:7c:2b:9f:15:d1:53:14:21:90:95:62:c3:51:27:
d3:27:80:a9:9f:4f:7e:87:74:50:19:c5:da:c4:73:ea:d2:e2:
45:32:5d:e7:c5:a0:86:45:e3:f7:ae:6c:7e:37:87:62:f4:c8:
2b:24:00:78:55:bc:aa:d9:8c:36:26:81:95:22:c9:a2:0c:79:
86:05:60:89:87:94:cc:db:a9:0e:a8:35:b3:a3:ef:ef:f2:d5:
be:f9:23:f5:bb:55:17:b7:28:ca:90:98:0e:64:bf:00:8d:c6:
da:d3:74:b3:26:43:78:8c:2a:e1:84:83:46:69:c2:d7:9e:bb:
f6:f2:3f:ba:35:e9:81:e5:3a:0b:21:0a:75:30:41:e7:25:d6:
14:f0:d0:8d:d8:5b:ba:f0:35:a2:88:85:d7:3d:5a:ea:f7:de:
57:e3:c1:67:64:c3:00:ab:2f:b4:75:a2:98:21:8a:40:f4:77:
a3:92:74:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:41:46 2025 by rpki-client