Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/8ZXjV3k1rIc8SehBJ08-wpwCIEU.roa
File: 8ZXjV3k1rIc8SehBJ08-wpwCIEU.roa (raw, json)
Hash identifier: 84ookV/PqY/iKblxNuMJb00XRxdZm2KbeGgGXkONSqo=
Subject key identifier: F1:95:E3:57:79:35:AC:87:3C:49:E8:41:27:4F:3E:C2:9C:02:20:45
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C2F543BBCD356732F5868E98C44E7
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/8ZXjV3k1rIc8SehBJ08-wpwCIEU.roa
Signing time: Wed 01 Jan 2025 01:47:48 +0000
ROA not before: Wed 01 Jan 2025 01:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57136
IP address blocks: 193.226.118.0/24 maxlen: 24
217.156.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Mar 2025 09:52:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2f:54:3b:bc:d3:56:73:2f:58:68:e9:8c:44:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f195e3577935ac873c49e841274f3ec29c022045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e9:86:e6:7f:a5:90:18:57:6d:e5:a4:a8:e6:
72:fb:2d:99:de:b4:9e:6b:80:d2:93:05:08:c8:af:
98:57:99:a0:55:c0:a7:9a:58:f6:76:6b:a7:9d:82:
c7:4d:25:4a:90:96:11:1b:19:8a:6c:ce:3c:5d:cc:
a0:b7:91:98:57:82:85:2e:83:a6:47:5d:4b:3e:0d:
6d:89:35:66:ca:41:b1:eb:c1:1e:a0:62:9f:40:b0:
f9:9d:b0:cd:f5:24:c7:66:cf:19:ee:82:b3:de:64:
df:9b:3f:33:91:e4:56:94:d4:3a:22:2b:6e:be:56:
b5:27:2d:f6:d0:c6:7c:4d:98:96:c9:a4:2d:61:fe:
a5:6e:b3:a5:56:d0:f6:8a:d6:94:42:f6:8d:c8:2d:
ab:71:7f:b7:a4:0c:de:78:7c:1f:78:c0:e5:88:ae:
05:d1:b2:42:a8:bb:8d:bf:fd:8b:15:03:3b:71:63:
9b:07:17:b1:88:9f:d2:26:b2:69:88:06:20:ef:aa:
04:e9:b7:6a:7e:c4:3b:f6:d3:97:f2:06:ac:17:c1:
8c:8f:1a:1c:32:77:ab:29:54:0b:c5:6f:db:32:0f:
de:8c:e6:0f:e7:54:69:6f:16:07:9f:3d:30:66:96:
cc:df:56:44:f4:e0:32:7a:4b:65:61:db:83:11:e5:
8d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:95:E3:57:79:35:AC:87:3C:49:E8:41:27:4F:3E:C2:9C:02:20:45
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/8ZXjV3k1rIc8SehBJ08-wpwCIEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.226.118.0/24
217.156.79.0/24
Signature Algorithm: sha256WithRSAEncryption
86:76:d1:df:b4:4b:1f:b6:39:01:dc:52:14:fb:12:c9:a2:b6:
4c:60:77:bd:67:1b:71:38:5e:b7:4a:15:56:4c:d1:a8:ab:d9:
1b:f3:4e:66:57:6c:a5:ee:93:3a:06:25:fd:46:e7:71:0a:c5:
a0:9b:a5:be:57:b7:a8:5b:27:3a:b0:a4:f9:33:4f:81:b0:a2:
d3:8d:87:a7:89:84:2f:91:c0:15:f3:c8:fd:69:6b:7b:42:47:
9f:08:03:e9:fa:fd:80:15:e3:e4:9f:c9:3c:1f:e4:51:e8:57:
01:3d:bb:65:70:20:e0:a7:91:8f:c9:7d:83:40:c4:0a:2c:ae:
c6:c2:9f:da:44:92:d6:1c:2d:5a:a6:fe:f5:ae:88:37:f6:c4:
f3:3f:22:b3:4f:99:49:b8:e1:90:2b:4b:e7:99:72:c4:4b:a5:
a0:c9:0e:68:91:c1:3d:a0:13:dd:f8:e7:07:17:7a:76:45:fb:
f3:dd:e4:03:45:dd:ce:98:13:a7:f6:24:38:c6:70:e1:05:f5:
99:c8:af:86:96:22:ec:7b:d4:4f:e7:94:b9:1a:a0:05:89:61:
4e:fb:78:94:92:0b:54:0a:38:9b:6a:e7:42:be:e3:13:af:76:
25:4f:03:15:11:c3:df:8b:04:05:6d:81:9c:50:4d:ee:f4:b7:
97:f8:ba:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:16:16 2025 by rpki-client