Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fL5sPuRYvSilIOy1Q1Nx6GsjTAI.roa
File: fL5sPuRYvSilIOy1Q1Nx6GsjTAI.roa (raw, json)
Hash identifier: P7ZJx/w2VS3HkWOnTf4P9tWwUmomHOrk22DM+RVs06o=
Subject key identifier: 7C:BE:6C:3E:E4:58:BD:28:A5:20:EC:B5:43:53:71:E8:6B:23:4C:02
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194DE2A127C6726266A27112B507B1C21DB
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fL5sPuRYvSilIOy1Q1Nx6GsjTAI.roa
Signing time: Fri 07 Feb 2025 02:08:06 +0000
ROA not before: Fri 07 Feb 2025 02:08:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 94.103.166.0/24 maxlen: 24
185.47.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Mar 2025 05:17:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:de:2a:12:7c:67:26:26:6a:27:11:2b:50:7b:1c:21:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 7 02:08:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cbe6c3ee458bd28a520ecb5435371e86b234c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:54:0a:5c:85:e0:d7:cb:7c:40:51:c2:88:71:
86:71:48:7a:09:9f:28:bc:5d:19:74:1a:5c:11:6f:
27:58:86:0e:77:6d:68:95:e7:b4:9e:cd:d5:3b:c2:
e2:3a:2e:66:55:25:56:a0:8c:88:be:04:4c:ae:a2:
04:ff:7e:90:87:c4:a6:d6:63:91:ca:36:cb:62:cb:
26:df:3d:b9:2f:4e:59:be:34:c0:f5:6b:37:5d:37:
dd:11:ad:79:e4:e7:27:18:7a:a6:01:f8:ed:84:4a:
b7:c2:05:b2:5d:ec:41:19:06:b6:1a:d5:85:50:ca:
3e:48:3f:3d:08:20:0e:ac:90:a9:c2:aa:e2:31:7a:
0a:b4:37:6e:64:bb:d9:70:88:dc:b3:c2:93:e0:b1:
50:17:5e:13:36:c5:2f:33:62:d0:2b:32:77:1f:18:
ea:9f:68:d8:a1:3b:59:ab:b2:b4:d3:0d:31:e3:c3:
98:21:0a:3c:96:4a:5c:e1:86:1b:d4:2a:62:fd:b1:
2f:6f:42:ad:8e:e0:c2:39:88:46:f7:65:a4:0c:88:
68:81:e4:85:ca:6e:95:6d:af:d5:46:ce:32:66:1b:
5f:56:17:c6:75:f4:d0:65:de:ce:3f:b2:6d:99:32:
b9:a8:36:43:8b:1a:a6:48:fe:f5:b2:d5:61:3e:2d:
fd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BE:6C:3E:E4:58:BD:28:A5:20:EC:B5:43:53:71:E8:6B:23:4C:02
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fL5sPuRYvSilIOy1Q1Nx6GsjTAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.166.0/24
185.47.142.0/24
Signature Algorithm: sha256WithRSAEncryption
26:c9:d0:2c:74:eb:48:4e:c3:82:76:07:95:71:72:90:75:f6:
ef:4e:56:a9:9e:ee:17:4f:45:66:06:41:af:3f:cc:ec:b3:d1:
c1:3a:55:c7:97:d8:7e:8a:d6:2b:da:4a:d6:a2:a5:ab:b7:e1:
5f:87:9a:7c:43:e5:0c:ae:38:af:0e:53:59:25:0a:46:0d:fb:
76:f9:ad:27:1a:58:59:b9:80:bc:bf:4e:44:e4:b5:e3:01:9f:
85:41:db:f2:71:f7:2f:aa:36:46:c6:33:6c:e4:4e:48:1a:f4:
b4:6a:2c:9a:d8:67:75:36:b3:20:8f:b4:f6:27:01:96:d9:92:
0d:36:15:e3:16:0f:c6:99:7a:5d:d6:82:fb:ce:29:3d:46:63:
22:de:55:66:6c:a5:95:62:00:f4:48:63:af:18:e8:99:89:ef:
d3:37:00:22:69:0a:cd:7e:53:98:a2:f8:4d:18:b4:3f:17:ca:
8e:c9:ce:93:1e:b7:76:95:4d:68:07:a4:50:09:4b:fc:e5:ce:
0e:99:14:3e:29:46:85:a8:32:86:6f:c4:a5:8f:a9:71:32:39:
06:46:9a:f5:ce:a7:c8:18:ec:71:9d:80:e0:ec:ba:fe:e2:1e:
86:a9:94:76:c0:a3:1f:4e:e3:5a:01:fd:57:a7:68:23:19:34:
68:51:39:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:15:57 2025 by rpki-client