Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/1-g5svdi3mwVaIcz7TjQ98u-lywc.roa
File: 1-g5svdi3mwVaIcz7TjQ98u-lywc.roa (raw, json)
Hash identifier: /5gWQ+kjtVh0p0uPC7XtNfD5w0Tz6LYqaosg9b4frCs=
Subject key identifier: FA:0E:6C:BD:D8:B7:9B:05:5A:21:CC:FB:4E:34:3D:F2:EF:A5:CB:07
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 0194206846C32BBB633BC82DEBC9E30FC45C
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/1-g5svdi3mwVaIcz7TjQ98u-lywc.roa
Signing time: Wed 01 Jan 2025 05:48:12 +0000
ROA not before: Wed 01 Jan 2025 05:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 94.154.44.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 17:12:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:46:c3:2b:bb:63:3b:c8:2d:eb:c9:e3:0f:c4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Jan 1 05:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa0e6cbdd8b79b055a21ccfb4e343df2efa5cb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2b:cc:6d:e4:b0:d0:13:60:b7:39:9f:05:39:
5b:a9:43:e6:c1:a3:48:8e:5e:4c:1b:e9:e8:1b:45:
c6:86:12:2b:6d:c1:0b:fc:f4:af:40:ea:25:d3:40:
87:a1:1d:b6:a0:20:bd:46:fb:c4:a1:ec:c3:53:20:
2d:ab:46:ba:6f:12:ed:73:8b:cc:25:27:9e:95:d5:
d5:79:ae:61:d3:c8:de:b2:ac:51:99:6c:8e:02:ee:
e8:cc:ac:f4:20:69:90:63:1a:e5:f9:f3:28:88:1c:
97:81:e9:43:03:9e:28:9e:5b:f8:ea:b9:7e:cc:02:
85:70:c8:de:b8:3b:f2:78:33:e1:2c:0b:fd:cb:a2:
32:5a:76:41:08:c8:54:9d:91:b6:a2:24:de:b2:34:
91:4d:cb:74:27:00:17:62:cf:55:93:ce:ec:58:a7:
b1:c4:a9:e1:f2:79:de:08:73:62:8e:5c:be:42:01:
9b:ef:81:28:62:03:14:bf:4a:09:b5:4a:85:18:9e:
da:2f:de:fd:97:6e:cd:82:3f:5a:9a:a5:f3:e1:a5:
4a:46:01:1c:55:6e:37:b6:53:50:9d:e3:7e:29:54:
7a:ea:21:d3:b7:92:72:8f:dc:bf:23:99:eb:44:7d:
ad:d2:22:27:eb:1c:6f:58:c7:69:7a:61:2c:29:d2:
30:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0E:6C:BD:D8:B7:9B:05:5A:21:CC:FB:4E:34:3D:F2:EF:A5:CB:07
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/1-g5svdi3mwVaIcz7TjQ98u-lywc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.44.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:92:32:8b:7d:f1:9b:bf:76:1d:ed:cc:66:c4:f4:0c:e6:4b:
7b:f8:db:85:1f:19:95:45:36:4b:71:8d:67:28:b5:e6:f7:ae:
64:32:bf:8e:18:d5:c2:1f:40:a1:11:4b:1c:b7:95:96:ab:af:
0c:88:31:fb:ed:5a:e4:c2:f6:6b:da:68:ca:7d:12:0e:a3:8b:
90:5c:40:0b:4a:4c:b5:f4:2f:6e:c7:4b:f5:b9:02:dd:13:80:
b7:3b:a8:80:a9:8f:76:e0:b2:79:09:c0:e4:7c:f9:cf:9f:90:
6e:64:ad:73:19:cb:ae:33:fc:68:9f:b2:97:aa:3e:5f:ab:28:
86:d2:bc:d1:f6:48:c3:39:8c:ed:8c:85:0f:8f:f9:42:9d:b3:
cf:94:7a:8f:39:d2:0a:04:c3:b3:68:51:d1:0e:f3:9a:29:65:
eb:57:44:2d:fb:30:0d:5e:fc:c0:00:f7:85:ec:07:b3:cb:75:
2b:41:c5:53:7f:f1:24:a4:ba:5a:fa:87:8c:a4:f0:be:8d:c9:
91:67:1c:f4:d7:d0:17:4b:8f:0a:15:21:3c:fd:2a:23:ec:0d:
e8:75:1c:4a:5c:56:35:19:7e:61:27:77:86:19:70:03:35:1e:
e3:c9:86:45:4c:94:49:d2:46:90:00:03:58:83:1c:4b:40:3a:
29:5d:5c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:53:43 2025 by rpki-client