Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/6DtvojDvJSqgOpIg2p-Yie-r7aA.roa
File: 6DtvojDvJSqgOpIg2p-Yie-r7aA.roa (raw, json)
Hash identifier: VdktcdL7ihGqc5bPm2YXiea6MxDEBUQv8g3q+IDMbu8=
Subject key identifier: E8:3B:6F:A2:30:EF:25:2A:A0:3A:92:20:DA:9F:98:89:EF:AB:ED:A0
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 0195B8E847212C81BCC10347DB39326699DA
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/6DtvojDvJSqgOpIg2p-Yie-r7aA.roa
Signing time: Fri 21 Mar 2025 13:33:05 +0000
ROA not before: Fri 21 Mar 2025 13:33:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 94.154.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 13:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b8:e8:47:21:2c:81:bc:c1:03:47:db:39:32:66:99:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Mar 21 13:33:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e83b6fa230ef252aa03a9220da9f9889efabeda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:d4:a9:7b:b9:ad:a2:57:9a:7c:f2:bd:83:
23:4d:1a:dd:af:1e:c6:28:87:c5:f3:1d:cf:b0:66:
1f:c8:80:27:db:10:6d:1e:75:9b:0d:ed:cd:31:19:
8d:c0:2f:c0:ac:1d:ef:16:30:a0:51:41:d3:ac:be:
18:75:f8:63:0d:5c:bf:d2:57:55:81:bc:7f:3d:1e:
34:9a:39:ee:82:b0:af:9e:ac:1c:a9:37:47:f2:59:
28:55:42:e8:1c:3f:6c:f2:1d:d2:86:07:10:4e:f6:
fa:60:68:50:c8:45:b2:e1:e8:83:3d:7d:76:81:06:
e1:a4:81:2b:d9:4b:f1:2f:e3:66:35:40:4d:16:4e:
db:77:5e:61:05:4e:20:85:85:ec:f3:5e:e2:17:07:
46:19:ac:86:83:c8:82:22:72:0f:57:97:ef:ae:f4:
2f:a2:ca:17:04:4f:c3:93:ab:99:e3:ac:4b:ae:2b:
a6:98:52:9f:02:e2:b4:7e:d7:61:68:8d:57:6f:8a:
bf:92:43:52:2c:0a:e7:69:d5:79:fb:7c:22:9b:51:
1b:cd:f7:5f:33:8a:ac:1b:0d:34:d2:47:97:ed:5a:
49:76:69:ba:d6:96:1f:41:46:4d:b1:7a:f6:3a:db:
9a:59:c5:c0:7a:a8:29:dc:31:d5:9b:1f:c5:6d:d8:
1c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3B:6F:A2:30:EF:25:2A:A0:3A:92:20:DA:9F:98:89:EF:AB:ED:A0
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/6DtvojDvJSqgOpIg2p-Yie-r7aA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.41.0/24
Signature Algorithm: sha256WithRSAEncryption
88:dc:dc:5a:71:fb:1c:e7:36:1a:d0:89:b8:26:b8:bd:83:96:
ba:fc:f9:44:1f:2c:44:21:27:86:79:76:18:6e:ad:8f:2e:1d:
2c:3f:62:5e:d2:d8:1d:9f:bd:dc:39:2f:94:be:66:8e:ce:b5:
26:c2:6c:32:e1:fc:b8:12:fe:10:32:19:db:75:47:7c:fe:d6:
98:f2:37:4a:22:36:31:ae:fb:e1:cf:6c:64:12:65:9d:78:3b:
b5:06:26:5e:e7:e2:a9:07:1f:02:7d:a9:a6:cc:d8:5f:46:36:
5d:a0:68:84:08:e7:ae:ff:e7:61:6b:f8:67:62:05:3b:7f:27:
44:98:98:d8:2f:6b:7f:05:40:f5:6d:5c:b4:02:89:97:67:a6:
4f:b4:f1:80:16:c9:a3:44:b9:6e:be:af:c9:19:a7:d0:aa:a4:
b0:ad:ad:4f:45:c3:ff:fb:5b:e8:17:45:fe:c1:87:93:88:51:
36:79:a6:c7:09:81:7f:7c:c5:bc:5c:12:69:1f:5c:d2:04:57:
19:e3:4c:b3:11:4d:84:64:ba:37:fc:bc:f6:16:75:58:25:4a:
e0:a1:d9:1b:60:c7:fa:83:4d:20:6f:0f:9e:38:b4:b7:89:a1:
a4:5b:aa:b2:ff:1c:87:d2:c4:91:6d:30:95:46:50:2c:ae:b7:
61:4c:a4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:00:52 2025 by rpki-client