Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/xFHdem9noqcrfpM4LsLRDE6q4zQ.roa
File: xFHdem9noqcrfpM4LsLRDE6q4zQ.roa (raw, json)
Hash identifier: sPuOaav4M1f3tbzUVkjHTB+EcBb8VJOh4xVCaeseAoo=
Subject key identifier: C4:51:DD:7A:6F:67:A2:A7:2B:7E:93:38:2E:C2:D1:0C:4E:AA:E3:34
Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial: 0194228D75E30EAA0DD9DE5A23EC6B467A8F
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/xFHdem9noqcrfpM4LsLRDE6q4zQ.roa
Signing time: Wed 01 Jan 2025 15:48:03 +0000
ROA not before: Wed 01 Jan 2025 15:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 185.206.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 06:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:75:e3:0e:aa:0d:d9:de:5a:23:ec:6b:46:7a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Validity
Not Before: Jan 1 15:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c451dd7a6f67a2a72b7e93382ec2d10c4eaae334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:40:13:bf:3d:e7:0e:31:df:e1:d7:ca:04:1d:
5c:89:d7:32:09:2c:28:f7:9b:f1:df:86:a7:7c:d0:
04:27:25:a7:24:d2:50:91:8c:0e:67:13:d1:8c:e5:
a5:77:54:96:b3:2f:7b:15:a5:e3:bb:b7:09:93:5b:
70:4e:43:67:5e:5c:35:01:83:7f:96:9c:a0:90:9b:
96:e7:87:2c:c7:d1:d4:f1:c4:1f:dc:e9:ce:80:e5:
66:19:aa:72:7f:d8:5c:83:84:c2:84:66:08:31:8c:
92:ac:45:bc:7c:3c:62:2a:65:8f:27:c3:67:eb:f4:
38:97:54:b6:f6:13:3b:b4:8b:19:a1:65:73:7c:20:
ef:26:49:8c:00:e6:6c:30:e6:4a:03:54:c0:6e:18:
67:89:3f:d4:28:d6:db:d2:44:1e:e5:d0:67:f3:9d:
d6:95:a4:da:78:ae:d7:71:8e:f9:84:45:8b:23:33:
36:b8:6b:99:53:33:bb:e6:68:60:57:cd:b8:ba:ee:
f8:d5:4f:e2:bc:4c:89:60:8a:ef:03:c6:a6:22:a3:
f3:4d:0f:5b:e0:25:f4:64:97:cd:04:38:1a:e4:00:
21:cd:3c:54:c7:d9:44:1a:60:7c:87:f9:35:b5:0d:
73:d8:94:a6:94:3d:59:ad:8e:b7:24:2a:17:58:75:
9a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:51:DD:7A:6F:67:A2:A7:2B:7E:93:38:2E:C2:D1:0C:4E:AA:E3:34
X509v3 Authority Key Identifier:
keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/xFHdem9noqcrfpM4LsLRDE6q4zQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.125.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:c4:32:c1:20:e9:cf:92:65:07:08:a3:4e:ad:85:b6:ec:9d:
83:ea:e1:d5:44:31:f8:b6:4b:34:ef:16:67:46:cb:aa:91:3b:
bf:3b:5c:f0:de:ad:30:53:bb:c2:3d:22:ce:ec:ff:40:2e:ea:
1d:9f:fd:0b:b1:78:9d:fa:34:f6:72:9d:19:2f:1f:5a:68:c5:
d2:3c:16:e7:8b:eb:dc:15:29:14:a2:2b:b7:5f:fb:06:c6:bf:
a2:dc:96:76:da:1f:3a:f9:ee:ff:75:8f:78:e7:ef:6d:e2:35:
82:4d:91:9b:90:0d:91:21:22:d4:be:f8:7f:a6:63:47:7c:9b:
96:f9:bc:fa:c8:3f:5b:bc:53:6c:c7:be:22:07:cd:c3:20:9d:
c8:d9:21:c0:c0:6c:4a:5d:df:2d:ca:d4:cb:98:f4:48:7c:ec:
e4:7c:d1:6e:81:a0:f9:ef:10:3d:36:3f:91:34:78:6b:df:0e:
bc:85:a1:3a:6c:f2:ca:63:59:1d:a6:a0:6f:64:89:fa:fa:a5:
8c:34:ab:e7:a1:6e:8f:1f:a4:9d:24:86:b2:94:a9:45:9e:a8:
e7:a5:fb:82:60:de:fb:e1:0d:27:a1:6e:09:d7:1d:c5:7d:c5:
01:8d:aa:6e:9c:7f:7d:74:7b:3b:cb:a7:29:da:64:ce:3f:02:
fb:81:25:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 21:53:44 2025 by rpki-client