Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/fARTEe3NPTp-pQO8O2AN3vtTqkI.roa
File: fARTEe3NPTp-pQO8O2AN3vtTqkI.roa (raw, json)
Hash identifier: 1ZtDeUlZXKuj5xKAwo0+PiDHtUnPSV8XvHvFiEu4k9k=
Subject key identifier: 7C:04:53:11:ED:CD:3D:3A:7E:A5:03:BC:3B:60:0D:DE:FB:53:AA:42
Certificate issuer: /CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Certificate serial: 019447EB216556EFE7C7D783DB1F0EB0B78D
Authority key identifier: D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/fARTEe3NPTp-pQO8O2AN3vtTqkI.roa
Signing time: Wed 08 Jan 2025 21:56:19 +0000
ROA not before: Wed 08 Jan 2025 21:56:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 193.200.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Jan 2025 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:47:eb:21:65:56:ef:e7:c7:d7:83:db:1f:0e:b0:b7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Validity
Not Before: Jan 8 21:56:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c045311edcd3d3a7ea503bc3b600ddefb53aa42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:8d:23:5b:f9:99:75:ce:66:e3:fd:34:f7:
57:2d:f5:fb:e9:71:3c:25:44:64:05:b8:7e:d8:42:
0b:e2:df:b1:57:89:f7:92:80:fd:81:a0:3c:98:3e:
3c:e6:e4:43:2b:57:fc:be:f8:50:ad:31:ee:ee:45:
e8:b3:7a:bc:e2:ad:33:67:d0:54:95:dc:5c:2d:f6:
c1:25:d4:3a:25:46:6e:a7:da:13:a7:e7:87:d4:b7:
cc:26:71:f0:14:b0:bd:c5:75:4a:d6:91:78:02:fa:
18:2d:16:af:69:31:24:dd:70:2a:8a:94:16:d0:e8:
70:0b:56:e5:09:7a:73:49:c5:a4:0e:56:b4:d4:dd:
38:5c:2c:4b:e1:1e:e6:20:8f:43:1c:37:7a:0c:62:
0c:7b:94:b0:24:61:2d:fe:e3:df:96:ee:c8:6d:8f:
81:64:23:06:db:eb:ec:92:b9:aa:7e:c7:c8:3a:56:
d3:93:4c:bf:d6:f2:5b:08:4e:d6:99:fe:89:d8:56:
f6:c3:b4:e9:6e:e7:89:4a:c4:e6:ee:3d:ff:f5:6f:
7d:ff:cf:f1:68:94:6c:15:2f:43:37:69:9d:de:bd:
60:a0:d9:75:9b:37:e9:48:ec:ae:dd:72:16:e7:ed:
0e:37:35:97:82:8c:e8:b7:5c:e5:4a:15:b9:68:c9:
49:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:04:53:11:ED:CD:3D:3A:7E:A5:03:BC:3B:60:0D:DE:FB:53:AA:42
X509v3 Authority Key Identifier:
keyid:D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/fARTEe3NPTp-pQO8O2AN3vtTqkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.78.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:ce:53:75:36:68:80:00:d4:a8:c1:bb:14:e3:77:4c:f2:7b:
c3:a0:f3:9b:b8:f2:7d:02:29:33:e9:9c:d5:b0:6a:34:10:51:
99:b8:fb:21:fc:3d:35:b9:05:be:8f:a3:fe:34:bd:8a:d8:64:
f2:ff:b6:d9:dc:cf:bf:a9:be:37:0e:e8:d7:d8:34:2b:41:2d:
cc:c2:ed:25:19:51:c2:1d:87:c9:81:0d:5c:1d:af:a4:be:95:
e2:00:ff:82:79:f5:a6:50:9f:4a:3c:5f:24:ff:5c:89:07:22:
07:83:f1:e1:06:61:2e:5e:00:b4:8c:97:b3:a2:5d:84:9a:d5:
23:9e:49:d6:aa:2c:e3:2b:91:09:31:0e:d3:2e:03:0f:3c:06:
ee:79:47:4e:b7:90:a0:1d:7b:19:c5:5e:24:87:57:af:26:9d:
1c:4c:01:cb:21:6f:08:63:50:11:8a:7a:9e:31:34:ce:bd:da:
28:63:96:23:a0:55:84:85:6d:b8:30:08:30:3e:47:29:f8:1c:
52:25:4c:1e:10:39:52:65:80:5f:93:cb:98:e5:1f:67:08:a6:
4e:78:97:bb:a1:8b:0c:b7:ec:2b:97:32:4e:a2:38:51:82:28:
d7:db:07:66:06:d4:50:d1:2e:df:8f:25:32:66:48:f8:8c:5e:
3b:8a:09:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:12 2025 by rpki-client