Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f5pGaVPMubJCcLEohdDBKJ2LBZA.roa
File: f5pGaVPMubJCcLEohdDBKJ2LBZA.roa (raw, json)
Hash identifier: Xu6l8NWs6Pez3b4SCcy5jhC0/sTdoyjZWwNbNNph3I0=
Subject key identifier: 7F:9A:46:69:53:CC:B9:B2:42:70:B1:28:85:D0:C1:28:9D:8B:05:90
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824868ABC64280432C3E252D2DB9066
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f5pGaVPMubJCcLEohdDBKJ2LBZA.roa
Signing time: Thu 02 Jan 2025 17:51:09 +0000
ROA not before: Thu 02 Jan 2025 17:51:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49600
IP address blocks: 193.222.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 10:52:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:86:8a:bc:64:28:04:32:c3:e2:52:d2:db:90:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f9a466953ccb9b24270b12885d0c1289d8b0590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:72:e4:d5:9b:59:84:c5:57:30:ff:d2:28:b4:
9d:7e:d4:b4:e6:f2:c8:ab:b7:1c:98:73:b6:b1:bc:
a5:62:52:5a:e7:4e:ef:8c:d0:c7:e2:0c:1a:a3:37:
4d:92:ed:4b:3c:d0:7c:fa:56:35:bb:f5:f7:0d:a4:
68:a4:69:be:02:99:35:ab:2e:7b:85:13:da:86:20:
c7:dd:40:ec:36:4b:a3:f2:03:4c:5d:16:6d:72:f8:
a9:e7:f6:d7:9f:7a:77:f7:9a:9e:48:08:bc:2d:74:
d8:56:02:07:e1:d7:d2:3c:3f:6e:9e:44:22:ba:05:
99:e7:02:11:3a:92:dc:74:b4:9a:34:4b:c4:f6:71:
cf:5d:dc:13:a1:77:af:c0:80:ff:17:e1:aa:b0:c2:
14:97:0a:6c:20:1c:b7:79:32:77:8d:90:a4:15:e7:
5b:70:3a:db:45:1c:b2:2d:1c:5d:0f:4f:ad:76:a3:
a6:4e:f9:dc:54:4c:6b:da:e4:82:0c:83:cf:70:53:
ca:ce:28:b7:e0:ef:6f:40:0d:4f:9b:57:35:65:07:
ec:08:a9:b5:c9:4c:84:eb:9d:a2:1b:04:bc:6d:ec:
21:29:f7:f7:f3:43:25:04:ab:6e:b0:dc:36:df:3d:
bb:88:63:8e:ef:6e:3d:c9:8e:69:49:fa:7c:56:1d:
75:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9A:46:69:53:CC:B9:B2:42:70:B1:28:85:D0:C1:28:9D:8B:05:90
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f5pGaVPMubJCcLEohdDBKJ2LBZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.97.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:26:3b:da:a2:72:ed:ea:7b:c2:9c:72:55:00:e5:88:a3:54:
ac:a6:d9:d7:04:5e:c3:7a:4a:08:79:32:0c:e5:de:e8:18:4f:
f3:18:87:a3:4b:3e:a6:45:b3:39:ab:e6:3c:4f:b4:ea:30:bc:
53:be:7f:09:7f:09:ba:ba:98:08:f4:60:cb:a2:95:cf:d8:74:
ea:b9:f1:2f:3a:0e:90:85:b4:9c:f6:15:b4:c1:20:76:72:3f:
e2:0d:97:c8:1d:1e:d4:cd:b3:ab:45:17:d3:b8:10:34:b7:02:
fd:e5:2e:ce:60:b6:5e:2b:10:a0:92:ba:2b:1a:c8:20:e4:0d:
b8:0c:52:81:99:8d:6c:f3:2c:8e:68:cb:85:32:1c:18:98:d5:
f2:47:e0:16:e6:7c:ff:de:72:bd:c2:33:eb:54:b2:c9:f5:f2:
07:2e:cc:0a:1e:70:8e:8b:d1:13:ce:d6:15:78:42:c6:fd:d5:
ac:0b:ef:da:73:05:a3:f2:4a:75:bf:bf:1c:af:cc:ef:50:a3:
03:3b:b2:a4:ef:ff:52:77:14:c5:2f:fb:87:90:35:57:fa:68:
6a:90:1f:57:90:f2:9a:65:c7:ac:ee:bd:3f:00:85:dd:5c:ae:
6f:f8:9a:a9:58:e4:53:ba:52:38:19:c2:5f:7c:65:16:f4:25:
29:32:b9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:28:46 2025 by rpki-client