Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/a8gl3qh1idepIOrdsECxz9BuTaA.roa
File: a8gl3qh1idepIOrdsECxz9BuTaA.roa (raw, json)
Hash identifier: g8Mh6CujAXFZSfn43sJq00gbzt/o/xhhQAz05kQJpJw=
Subject key identifier: 6B:C8:25:DE:A8:75:89:D7:A9:20:EA:DD:B0:40:B1:CF:D0:6E:4D:A0
Certificate issuer: /CN=a7a538aac33778460e19701aab5952c7aa25f05c
Certificate serial: 01941F8C3E11AD4B5BB0B3AF5FFB20DF4F13
Authority key identifier: A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/a8gl3qh1idepIOrdsECxz9BuTaA.roa
Signing time: Wed 01 Jan 2025 01:47:51 +0000
ROA not before: Wed 01 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41745
IP address blocks: 194.147.33.0/24 maxlen: 24
194.147.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jan 2025 14:04:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3e:11:ad:4b:5b:b0:b3:af:5f:fb:20:df:4f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a538aac33778460e19701aab5952c7aa25f05c
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bc825dea87589d7a920eaddb040b1cfd06e4da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:88:f1:c6:49:74:9c:19:5e:ed:6e:26:53:
80:17:1f:bd:4c:79:71:a0:c4:99:95:82:27:33:54:
7e:66:3d:9f:4b:6c:85:f7:f2:0f:e0:83:31:fc:33:
62:8a:9e:38:74:11:bf:12:45:6b:ce:9a:07:ed:f5:
6b:fe:b9:5c:73:ac:d7:f4:df:4a:5b:f5:94:03:06:
bd:e3:cf:70:cb:63:3d:15:14:0f:fe:2f:f7:c2:6f:
57:83:eb:57:2f:4d:26:54:8a:19:9c:03:f8:25:eb:
98:9c:c6:59:b6:c2:a7:89:2a:fd:63:c2:50:a5:ae:
76:18:bd:bf:46:dc:b7:0a:10:5f:67:59:47:80:53:
d7:1e:41:d0:7c:4a:5e:ae:97:08:14:65:1f:7c:01:
83:09:9e:c3:98:a4:70:b2:dd:e0:a8:23:3b:19:8d:
e5:54:8f:6f:14:ba:cd:bd:71:b5:f3:be:50:de:da:
ed:77:3e:70:83:26:49:41:f6:8a:b8:04:e3:99:bc:
b6:3a:89:bc:a8:e0:76:5e:84:42:f0:9d:ca:ad:6e:
23:68:13:2d:1c:64:e7:21:8a:ac:f4:06:8f:f9:ba:
82:f4:60:b7:bf:0e:78:f2:d1:3e:0d:de:58:db:13:
fa:14:d5:5c:eb:fb:c1:d7:dc:86:c1:46:d2:24:8b:
a3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C8:25:DE:A8:75:89:D7:A9:20:EA:DD:B0:40:B1:CF:D0:6E:4D:A0
X509v3 Authority Key Identifier:
keyid:A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/a8gl3qh1idepIOrdsECxz9BuTaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.33.0/24
194.147.35.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:30:bf:e4:50:9b:38:a2:d6:61:38:a6:5f:21:25:41:11:28:
92:64:4b:9d:94:38:38:f4:c2:fd:a4:aa:9c:c0:09:53:ae:72:
fa:26:89:66:a8:f8:ba:91:39:13:6f:3c:ce:01:58:e5:43:c8:
fe:96:8a:53:42:3d:15:06:c0:57:a5:e2:9b:12:eb:d9:6f:f7:
a7:b0:ca:06:21:90:0c:50:db:3d:ff:4a:ba:fc:75:be:e3:5d:
88:87:f3:e3:2e:a3:3d:1e:cb:e1:78:73:6b:f4:5b:1e:b4:e9:
bc:bd:98:3f:fa:5f:a9:36:a5:a6:28:f6:26:d1:72:e2:2d:a8:
af:87:b8:c4:23:43:96:20:1d:fc:bd:08:83:9c:18:97:fd:15:
6a:b4:cc:6a:71:5e:cd:c4:8c:4a:98:ae:f1:98:51:4e:34:6e:
2f:ec:7d:f1:26:39:e8:4a:07:75:3d:28:07:9f:f2:23:a0:d5:
7d:7a:1f:fa:e1:1c:47:99:d2:0b:10:8b:5c:8e:10:84:7d:c1:
eb:57:f3:5d:7c:b0:e2:b4:38:0d:99:5f:4d:5a:12:d1:ec:30:
a9:27:37:d0:ab:4e:42:77:4f:66:db:25:b2:bf:ce:9d:92:b9:
a2:64:c2:1b:a7:ec:1a:7e:93:3f:90:53:91:92:c4:9f:29:53:
22:a9:af:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:08:58 2025 by rpki-client