Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/z1QTWqJ2ACcFSl0qJlSBMhq4FcU.roa
File: z1QTWqJ2ACcFSl0qJlSBMhq4FcU.roa (raw, json)
Hash identifier: tUTI+aPzgY6BPzSb/rwf+8w2m88fZ80s4qxgqMebcyI=
Subject key identifier: CF:54:13:5A:A2:76:00:27:05:4A:5D:2A:26:54:81:32:1A:B8:15:C5
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194CD5683AE4706869755B67BB1BC5C4A0D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/z1QTWqJ2ACcFSl0qJlSBMhq4FcU.roa
Signing time: Mon 03 Feb 2025 19:43:06 +0000
ROA not before: Mon 03 Feb 2025 19:43:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201086
IP address blocks: 94.103.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 14:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cd:56:83:ae:47:06:86:97:55:b6:7b:b1:bc:5c:4a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 3 19:43:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf54135aa2760027054a5d2a265481321ab815c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2a:84:cb:ff:23:6f:b5:ac:d1:67:50:b8:cd:
b7:59:92:ce:60:fc:89:11:0b:9f:06:c7:9c:86:c4:
ae:b4:b9:07:6f:22:d4:9d:64:82:f9:4b:7a:c7:ec:
a9:d5:60:b2:b3:49:7c:9c:bc:0a:00:80:85:26:e4:
92:21:35:25:24:f4:d2:b6:c7:9d:43:a0:c1:88:4a:
8c:43:c3:f6:a6:0b:10:32:16:06:75:c2:be:c3:73:
28:0b:ef:bb:f2:de:13:cf:cb:df:c0:68:17:34:c1:
f0:d9:06:6d:02:dc:2a:a8:50:29:da:29:e2:6d:36:
fe:b2:b3:65:1c:fe:1d:c9:56:ca:91:20:22:e7:08:
5c:bf:9a:c3:48:a5:8b:38:d4:e6:5a:0c:ac:13:ec:
f3:23:70:65:19:e6:4a:ad:af:d1:06:06:12:04:6d:
37:b4:e6:86:9b:8b:7e:e9:5d:84:45:0b:2a:29:ee:
56:e8:40:99:2f:8a:d7:f6:cb:22:00:b3:00:5e:c1:
bd:90:c5:d0:34:4e:0a:3b:e4:62:56:d3:84:46:97:
26:e9:c4:da:90:b4:21:8f:43:93:2b:5b:ea:69:10:
08:e8:33:78:6d:26:3e:d3:e3:3f:1f:64:e0:ba:b8:
e9:7c:ae:33:6c:45:7c:5a:43:03:8f:e1:81:96:35:
25:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:54:13:5A:A2:76:00:27:05:4A:5D:2A:26:54:81:32:1A:B8:15:C5
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/z1QTWqJ2ACcFSl0qJlSBMhq4FcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.166.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:df:7f:4f:9b:0d:27:f0:35:d1:01:94:26:59:e0:04:4f:c4:
90:12:6e:15:1f:8c:3f:54:45:de:27:cb:2a:1d:fd:e7:0f:0d:
d9:a6:29:0b:71:5e:fe:21:87:b2:8c:e7:52:5f:22:a8:e9:b6:
ee:a4:10:d3:2b:f3:5c:95:06:c2:0b:f8:2c:ee:08:23:63:2a:
ed:a4:2d:c8:8e:a5:31:76:e9:c2:f8:3e:85:25:01:af:54:35:
23:af:f2:9a:f3:08:f8:de:6e:7a:0a:38:25:df:f0:f6:5d:b4:
b5:1d:48:4e:6d:29:a5:8d:f0:16:46:1c:fe:6e:3d:dc:cf:5f:
88:2d:e8:59:9c:3b:de:0b:44:86:1f:a8:ef:f0:ca:fd:1a:9c:
d0:31:6e:70:b3:21:e3:ca:8f:f8:d7:fa:5b:40:9b:2e:34:df:
f0:14:f0:4b:9b:06:ee:15:00:18:53:f1:a5:a5:31:93:b1:20:
6b:eb:71:91:64:5c:66:9a:ac:9c:38:a7:77:cb:71:b1:8b:81:
9d:53:e7:aa:77:ae:62:af:0d:5d:86:81:06:d7:5d:ca:7d:dc:
8b:6b:32:c6:5f:fa:68:6d:48:ce:84:c1:b5:6c:5b:21:21:ae:
ef:49:c0:82:96:b5:2e:f4:27:9d:bf:92:cd:b1:60:8c:34:cb:
47:d4:4c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:34:35 2025 by rpki-client