Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9-TD0Pi7T5lEpC4IhzymV0j-Hf0.roa
File: 9-TD0Pi7T5lEpC4IhzymV0j-Hf0.roa (raw, json)
Hash identifier: kfjQMu4h5L7+xkUAMN7zUnNjrYkpzNbkLSAHzqRrIdo=
Subject key identifier: F7:E4:C3:D0:F8:BB:4F:99:44:A4:2E:08:87:3C:A6:57:48:FE:1D:FD
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01963A269C6AFFF3DC0D46263E7CC6F30EEB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9-TD0Pi7T5lEpC4IhzymV0j-Hf0.roa
Signing time: Tue 15 Apr 2025 15:52:11 +0000
ROA not before: Tue 15 Apr 2025 15:52:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216024
IP address blocks: 193.124.203.0/24 maxlen: 24
194.87.189.0/24 maxlen: 24
195.133.2.0/24 maxlen: 24
195.133.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Apr 2025 14:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3a:26:9c:6a:ff:f3:dc:0d:46:26:3e:7c:c6:f3:0e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 15 15:52:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7e4c3d0f8bb4f9944a42e08873ca65748fe1dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:b3:f3:f4:db:81:33:3f:a8:bd:91:fb:cb:
50:d8:db:26:dd:a9:83:87:e9:e2:f0:eb:3e:22:4b:
53:ed:fe:2d:55:8b:01:a8:25:1f:8a:51:c2:b0:5c:
13:d2:13:2b:e7:ef:e2:65:18:68:2e:f1:f8:eb:e5:
1f:d2:cf:f3:5f:a0:b3:83:86:ed:a7:43:19:3b:eb:
bc:87:99:3a:b2:41:87:c8:2a:1e:07:a9:d9:16:f8:
d7:3b:fd:e2:4e:cc:4f:19:fc:e4:09:a6:b9:76:44:
91:0f:c3:d9:67:41:62:e8:57:95:e3:45:72:fa:ff:
9a:c6:23:4c:e6:59:49:0c:2f:37:42:a4:1d:e3:95:
8c:8b:26:81:7b:36:57:e9:c3:ce:e2:61:cc:79:e7:
d6:24:9a:35:bb:49:51:b4:af:76:9c:1b:77:07:dd:
0e:79:79:0f:f3:41:75:6d:bd:01:6a:93:5f:6c:bd:
5d:7d:5d:ac:4f:b8:36:23:cc:ea:17:a7:0b:ff:2f:
e6:8f:62:a6:40:1c:17:92:c7:6e:f7:0e:e8:b1:06:
74:5d:37:e3:7d:c8:24:c3:16:60:9d:fa:87:3e:00:
1c:eb:d8:96:7c:17:0d:39:84:83:14:ff:36:c8:b3:
a7:6d:11:b6:b8:87:71:d7:83:27:45:f3:64:a4:8f:
a4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E4:C3:D0:F8:BB:4F:99:44:A4:2E:08:87:3C:A6:57:48:FE:1D:FD
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9-TD0Pi7T5lEpC4IhzymV0j-Hf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.203.0/24
194.87.189.0/24
195.133.2.0/24
195.133.28.0/24
Signature Algorithm: sha256WithRSAEncryption
92:d8:bc:e6:cc:bd:a9:c6:60:ea:ae:ab:ac:52:12:b4:f8:b6:
29:12:47:1c:e0:93:9d:83:27:7d:9e:0c:5b:16:e7:54:c6:06:
02:e2:28:87:84:c9:a2:c2:3a:2a:e2:1e:a0:de:f9:37:93:9c:
a6:82:31:f0:25:51:34:71:a4:0f:f3:77:cb:c5:5f:27:13:00:
60:e9:fc:6e:53:71:15:22:22:7c:e4:8e:73:82:dd:9b:37:78:
7b:b3:06:90:fc:8a:f5:b5:a6:17:15:4a:3d:80:78:8e:1e:2e:
83:71:f8:c2:06:fa:2c:94:2b:0e:b5:d8:a5:59:0d:f8:a6:a2:
82:b0:01:78:c6:a8:67:a8:29:2a:ba:48:4c:9b:f9:51:15:ae:
d7:7d:ef:62:49:55:e2:d0:f0:cd:1a:07:0a:4a:b6:1e:1b:3f:
e9:b3:12:55:70:3f:2f:f2:bd:b6:88:0b:e1:b2:2d:98:c5:60:
9d:ce:14:12:44:2d:05:21:07:01:18:ec:e9:26:b5:08:37:24:
fe:a3:0a:20:18:8d:09:3a:8f:b2:23:98:61:b8:51:ba:f4:d9:
47:30:a7:c5:34:8c:f2:ed:08:0b:c5:b0:ba:c9:1d:1c:23:3b:
cd:49:af:f5:0e:29:b0:1b:dc:46:1f:d9:2a:31:74:70:72:12:
e1:41:18:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:19:36 2025 by rpki-client