Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/fJbG7QR21YdDe54KMbchHHvZV_4.roa
File: fJbG7QR21YdDe54KMbchHHvZV_4.roa (raw, json)
Hash identifier: 6fco0OlUFjFH7GxjKa5+cYbPJzwO8G9Ki1Z24e3dcV8=
Subject key identifier: 7C:96:C6:ED:04:76:D5:87:43:7B:9E:0A:31:B7:21:1C:7B:D9:57:FE
Certificate issuer: /CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Certificate serial: 018CC26D07559D07C678F15B93ADEE89F11C
Authority key identifier: 01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/fJbG7QR21YdDe54KMbchHHvZV_4.roa
Signing time: Mon 01 Jan 2024 00:29:34 +0000
ROA not before: Mon 01 Jan 2024 00:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198612
IP address blocks: 195.49.160.0/22 maxlen: 22
194.116.156.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:07:55:9d:07:c6:78:f1:5b:93:ad:ee:89:f1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Validity
Not Before: Jan 1 00:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c96c6ed0476d587437b9e0a31b7211c7bd957fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:51:88:b6:e6:78:8d:6e:81:d4:50:d5:aa:39:
a7:b9:f6:15:26:8d:20:83:a2:27:25:36:d8:1b:ae:
93:78:c5:6c:e4:2e:93:0e:9b:e7:12:40:ff:e8:ea:
d8:9d:9f:e7:d2:75:a8:1b:93:cf:24:54:37:2e:b0:
2a:e7:40:cd:7d:1a:2c:2c:96:7e:40:16:d3:4d:97:
2c:86:7b:2f:35:23:51:9a:56:04:5b:be:ad:fe:5d:
bc:a5:ff:23:7e:a6:46:c9:b4:65:8e:d5:b3:5d:b5:
67:46:3c:9c:b1:8d:97:ef:b2:d3:e8:b5:36:e2:8b:
13:47:6a:c0:0b:43:d1:58:c6:5a:27:89:14:64:82:
7c:c8:48:a1:32:a8:b0:5d:bf:17:b1:3b:c0:24:eb:
fb:62:2b:91:04:15:f5:48:6e:66:65:c3:a1:5e:bf:
7a:80:a2:be:ca:87:48:be:4c:77:16:4d:f9:4b:ca:
ca:13:51:27:b5:0b:e2:d0:30:f4:90:75:89:53:b2:
e6:4c:c8:e1:65:bf:95:31:ee:59:5b:66:22:e5:f3:
37:ad:e1:2f:60:67:f8:63:fa:1b:d1:d0:dd:a0:6c:
d5:55:27:bb:fd:43:32:5c:53:b6:87:54:21:3a:b4:
e4:82:f3:01:11:3b:ba:6a:ff:ba:fb:b9:da:88:0c:
7b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:96:C6:ED:04:76:D5:87:43:7B:9E:0A:31:B7:21:1C:7B:D9:57:FE
X509v3 Authority Key Identifier:
keyid:01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/fJbG7QR21YdDe54KMbchHHvZV_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.156.0/23
195.49.160.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:25:e3:3e:e7:b3:56:f8:fe:2f:e1:49:54:77:a9:38:e8:9e:
03:79:a8:18:25:f7:53:2f:28:bf:a7:32:34:89:c4:ae:0e:2a:
92:08:6e:49:41:4c:61:16:b3:8c:ab:a3:a1:4d:63:e0:a2:97:
dc:b3:80:ef:63:6d:ee:f1:b0:06:ad:6a:f9:97:25:6f:87:f9:
8e:77:53:51:b9:26:15:31:c3:c6:a6:34:51:69:69:e2:89:34:
cd:92:bd:66:9a:9f:4b:1d:50:f6:ff:1c:38:a6:d2:29:d5:97:
14:a0:06:81:ad:15:ae:0e:b6:c0:33:3d:ef:62:46:be:0d:31:
52:76:d5:f3:e6:4e:7a:ff:22:d8:b0:c4:ff:63:ad:d9:fc:b2:
ab:f3:77:fb:b5:b7:eb:c6:df:65:88:2c:ec:7b:06:cf:90:3a:
3e:8a:cc:57:3b:69:6e:12:76:ff:a7:65:1e:57:37:12:18:51:
12:29:09:af:e5:fd:11:c8:e1:70:25:ed:81:28:b9:ee:07:cd:
da:dd:cd:77:57:43:9e:06:36:a2:6a:58:68:0f:32:09:73:91:
9c:dc:24:ed:2a:39:d5:3a:8b:17:6e:d3:1a:86:22:38:61:7a:
97:7f:b0:20:65:a6:84:21:ba:b2:82:89:f0:3f:4c:0f:e1:58:
bb:ac:55:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:49:32 2025 by rpki-client