Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fW_JaTHOTK5IdV32W-p912M8UWo.roa
File: fW_JaTHOTK5IdV32W-p912M8UWo.roa (raw, json)
Hash identifier: G/pnshO3rTlRDrC7c2VrfTIda0G0OzHxYoDYU0m5TEM=
Subject key identifier: 7D:6F:C9:69:31:CE:4C:AE:48:75:5D:F6:5B:EA:7D:D7:63:3C:51:6A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01955B19502DB192A68FA93DAB05D3494151
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fW_JaTHOTK5IdV32W-p912M8UWo.roa
Signing time: Mon 03 Mar 2025 08:22:20 +0000
ROA not before: Mon 03 Mar 2025 08:22:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215411
IP address blocks: 87.121.104.0/24 maxlen: 24
93.123.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Mar 2025 13:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:19:50:2d:b1:92:a6:8f:a9:3d:ab:05:d3:49:41:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 3 08:22:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d6fc96931ce4cae48755df65bea7dd7633c516a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2e:61:ea:40:c4:53:14:fe:41:5b:e2:94:53:
28:47:fb:75:3a:b0:ad:69:a2:50:da:f1:c2:a0:e6:
b0:40:5d:48:df:28:6a:e0:ae:c2:19:b1:2b:37:d2:
5c:fc:a5:c6:22:22:cd:e1:29:4c:ca:56:4b:2d:6a:
af:f7:db:e7:05:c7:34:f8:77:72:fd:10:30:4c:9a:
1c:86:b7:7d:db:aa:a4:ce:ab:28:93:d4:d5:02:dc:
e3:66:8f:24:bb:6f:d9:5c:b2:86:0a:77:36:aa:2b:
58:4a:38:5f:cb:56:05:45:71:5f:31:c3:99:d7:50:
30:e0:46:89:e8:a5:1b:07:fb:a3:1d:ef:ff:f6:da:
64:d8:ce:1c:2a:81:24:77:f6:13:ea:37:41:d2:12:
7a:4e:db:3d:a3:eb:cc:8e:2b:4a:59:6c:3c:b7:aa:
7f:0a:0b:92:fd:bb:e7:26:49:66:ba:9d:8c:0e:d9:
ea:2b:ed:b4:7d:6f:1f:6b:6f:fa:0c:bc:91:82:f3:
e0:51:e2:7a:57:51:a1:ba:46:04:93:ea:d0:2d:be:
1d:bb:92:98:48:fb:34:25:41:a7:67:4d:83:11:84:
ab:06:65:21:a7:56:c3:cd:6c:92:22:63:69:b4:09:
5e:93:86:63:88:6d:e5:12:18:d1:1f:66:f1:ea:ca:
d0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6F:C9:69:31:CE:4C:AE:48:75:5D:F6:5B:EA:7D:D7:63:3C:51:6A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fW_JaTHOTK5IdV32W-p912M8UWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.104.0/24
93.123.24.0/24
Signature Algorithm: sha256WithRSAEncryption
53:f5:ce:d4:1c:47:43:0a:28:02:e8:88:9c:0d:a6:8d:d7:e1:
3b:67:b2:22:38:09:70:19:ae:e2:e7:e2:10:c2:2b:51:8a:49:
eb:d5:cf:7d:41:38:32:68:13:8f:21:8f:dc:23:83:2e:5d:17:
dc:3b:5e:f5:04:19:50:ae:f6:17:cc:b2:e4:34:ac:fd:25:ba:
48:15:39:3c:66:f3:93:08:60:8d:c1:68:2f:fc:48:87:8f:1d:
a0:d6:90:20:c4:58:2f:b4:5f:1d:b1:0a:1c:34:9f:3f:a4:60:
d7:b0:f1:7c:5c:20:88:91:df:be:81:f0:24:49:41:3b:6a:04:
e4:15:be:80:b0:49:dc:24:44:15:5b:6a:e4:f8:40:cd:e1:8a:
dc:32:5b:5e:c8:f8:8e:2b:7c:dc:8c:06:76:55:01:35:e2:67:
db:52:d4:db:91:18:25:c1:6f:7d:ce:ab:00:ad:55:93:f8:9f:
95:94:e5:68:a7:37:77:af:e3:35:07:50:d7:df:45:3c:bb:f3:
98:b3:b5:8e:d9:e9:79:fe:9f:94:90:e2:0f:0e:2c:c7:5d:f8:
a4:f5:d9:6c:27:f4:b8:32:23:15:14:50:bb:ed:c7:e2:81:62:
b2:c5:ed:0b:97:4f:ef:52:d7:47:9d:bc:dd:fa:60:79:8b:c4:
d6:b0:b0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:37:25 2025 by rpki-client