Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/5mEcqEXNNqrVuv93a9z1IfVzoZo.roa
File: 5mEcqEXNNqrVuv93a9z1IfVzoZo.roa (raw, json)
Hash identifier: qKPisJboZuOZlkfChg78Wdgeq8J+yHmWI6f3VzW3Eps=
Subject key identifier: E6:61:1C:A8:45:CD:36:AA:D5:BA:FF:77:6B:DC:F5:21:F5:73:A1:9A
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019422FBB0DE21B11764FAA7862B33A5BFC2
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/5mEcqEXNNqrVuv93a9z1IfVzoZo.roa
Signing time: Wed 01 Jan 2025 17:48:27 +0000
ROA not before: Wed 01 Jan 2025 17:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16125
IP address blocks: 195.177.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 Jan 2025 09:37:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b0:de:21:b1:17:64:fa:a7:86:2b:33:a5:bf:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 1 17:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6611ca845cd36aad5baff776bdcf521f573a19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e0:d7:bb:b8:87:e8:ea:b4:b3:79:58:d7:29:
b3:d4:cf:9e:7f:9c:91:e3:85:bb:47:aa:94:33:44:
06:c4:f1:eb:73:a5:9a:be:d8:24:06:1d:f1:12:46:
8a:75:e5:d1:fa:99:d1:9d:69:be:89:46:f9:00:ab:
22:1d:b3:96:7f:e6:0a:d7:57:e3:c6:dd:d3:71:29:
f3:4a:49:cd:e6:20:46:95:41:cb:6c:70:c0:b5:b8:
20:5e:8d:7f:e8:34:5b:ea:0f:cb:0a:23:0c:42:da:
0e:50:9b:32:3d:b3:e4:18:1f:39:7a:14:0e:bf:78:
25:51:ba:43:7f:d5:1a:54:7f:e2:86:82:91:d3:c5:
10:9c:de:a6:31:f6:3c:7e:ca:68:2a:74:b4:2c:ad:
e0:3b:c6:3a:72:4e:00:e1:30:bd:3a:2c:9e:4b:d3:
b5:67:39:c9:c4:b2:e8:e3:eb:df:75:94:1c:74:9c:
bc:f9:59:71:42:c7:cd:f4:4c:0c:cf:a0:53:f4:a2:
3c:02:6b:21:fd:9b:8f:bd:33:8e:6f:71:91:3a:a4:
e7:91:1e:bb:1d:1b:b4:f2:f5:1a:d5:ab:de:a9:bc:
dc:c8:4f:16:bd:86:ee:30:f1:31:ca:ed:6c:8d:ed:
cd:a6:ab:ae:ca:9a:aa:47:de:e7:81:d7:c0:b3:06:
5a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:61:1C:A8:45:CD:36:AA:D5:BA:FF:77:6B:DC:F5:21:F5:73:A1:9A
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/5mEcqEXNNqrVuv93a9z1IfVzoZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
36:6d:a9:d2:a6:31:74:3e:a0:b8:fd:a9:c0:39:e0:39:71:93:
ce:fe:f2:10:db:2d:7d:e6:09:9b:4e:3b:47:cd:21:a3:b6:29:
c5:f5:7c:f1:45:da:c7:8f:34:ec:bd:66:ac:64:99:76:83:a9:
e4:ce:78:0c:04:61:5b:7d:85:19:1c:90:f2:af:b9:29:3c:19:
51:36:5c:0f:12:88:6b:d7:c3:2b:4d:89:0d:71:06:5f:63:ff:
a5:23:72:5a:f9:15:79:5b:72:d8:28:da:d2:8d:28:4f:43:9a:
dd:0d:31:f3:26:26:dc:c1:cb:37:ea:f3:8c:4f:f5:4d:2e:f6:
24:4b:ac:df:a0:c3:44:5b:78:15:da:c4:08:a3:2c:82:97:2e:
dc:e8:b0:1d:1f:f9:fb:15:56:90:58:4f:c9:8a:4f:d4:9c:79:
91:d0:e8:66:4f:29:c1:1b:94:57:98:36:1b:77:4a:a5:c0:9b:
79:c2:53:2d:58:e8:92:86:39:8c:2f:b2:c2:4d:16:c0:9b:b4:
2a:31:f5:08:cb:25:76:e8:d8:c5:a1:40:85:f2:f4:0e:3c:3c:
35:18:65:f9:d7:bb:6f:40:80:19:50:28:c2:f4:c6:09:45:ea:
03:3a:ec:9d:7d:6a:9e:b0:5d:bb:3e:5a:49:ae:5d:21:03:ee:
a9:48:15:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:37:42 2025 by rpki-client