Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/E1mw2F1dy6qEC8sMMJ2_LP1xTmo.roa
File: E1mw2F1dy6qEC8sMMJ2_LP1xTmo.roa (raw, json)
Hash identifier: eHkr8ctv+qv0X6qlF4ExvVldKVfKcs95KRr0Cgq76LA=
Subject key identifier: 13:59:B0:D8:5D:5D:CB:AA:84:0B:CB:0C:30:9D:BF:2C:FD:71:4E:6A
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01947A115FE986C0527797B8A49A9A2FB6E8
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/E1mw2F1dy6qEC8sMMJ2_LP1xTmo.roa
Signing time: Sat 18 Jan 2025 15:39:06 +0000
ROA not before: Sat 18 Jan 2025 15:39:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214943
IP address blocks: 195.177.92.0/24 maxlen: 24
195.211.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Jan 2025 19:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7a:11:5f:e9:86:c0:52:77:97:b8:a4:9a:9a:2f:b6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 18 15:39:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1359b0d85d5dcbaa840bcb0c309dbf2cfd714e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3d:e9:9a:47:93:6f:61:01:b8:a1:5c:61:51:
83:f8:bc:f2:70:a6:04:e3:dd:00:8f:ad:c4:89:6c:
d5:69:f4:1d:20:ac:6a:9a:12:75:1f:f3:f0:83:db:
a6:aa:91:7b:ac:45:56:25:80:29:6e:f4:da:db:a2:
c4:11:7b:96:d5:9c:ee:b9:46:ec:85:04:65:40:de:
50:b5:1a:62:30:10:9f:f1:ce:cc:98:4f:2f:93:2a:
9f:c8:e8:cd:4c:8f:c2:dc:83:6e:8a:77:83:52:77:
c1:c0:8f:3a:f3:a4:56:d7:39:36:09:86:da:7d:3d:
c4:1a:63:8f:06:5b:42:20:11:a9:0a:be:d1:c8:67:
24:c0:8e:a6:f6:87:b1:1e:f0:2f:e2:8a:e3:51:82:
41:62:29:1f:f8:20:7d:9f:b1:89:65:74:c1:f1:7a:
d2:3f:c8:4d:7c:c2:73:28:5e:a7:49:c8:aa:20:eb:
39:32:f4:63:6e:39:7b:be:0c:d9:2d:6f:5d:f6:ad:
d1:bd:ef:98:af:89:e6:41:37:66:a2:f4:e2:d1:01:
81:ba:0a:6d:07:76:ee:50:e8:8a:d3:9e:d2:a7:29:
92:67:cc:65:2d:77:92:0f:bf:69:88:8c:08:27:05:
c1:27:79:b7:5f:fb:53:38:97:93:d4:4a:ad:f9:7e:
ca:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:59:B0:D8:5D:5D:CB:AA:84:0B:CB:0C:30:9D:BF:2C:FD:71:4E:6A
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/E1mw2F1dy6qEC8sMMJ2_LP1xTmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.92.0/24
195.211.190.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:44:b9:e8:c4:fe:5c:0e:b7:5b:10:9d:81:be:4f:99:97:0a:
c6:10:11:08:d0:40:f0:13:5d:50:90:b2:23:10:23:9f:76:e6:
7e:04:a0:cd:f5:2d:46:eb:f1:21:5f:19:4e:49:56:cb:75:bf:
9b:1c:4a:23:1d:ef:b7:ff:e5:16:93:4c:24:6b:aa:28:10:69:
82:89:3b:ec:f9:85:de:73:5e:9a:53:3e:44:32:a9:71:7b:69:
f4:b5:8d:f3:88:a7:8c:77:ad:10:e6:51:2c:04:57:5c:fc:10:
bf:79:92:11:4b:2c:27:85:25:7c:75:b4:1a:ff:c6:78:cb:a0:
e9:67:23:a6:10:cb:2d:28:c0:6d:2a:bb:06:e9:dd:e8:59:ea:
9d:30:32:e8:5e:c3:54:32:b8:4b:c3:f4:95:de:8c:72:eb:e2:
12:90:70:d0:d3:19:41:03:c2:ae:93:a4:81:90:2f:7d:61:3b:
63:82:65:04:be:0f:93:1f:11:10:10:49:77:0c:18:ed:77:0f:
88:43:b2:1a:e8:49:58:5b:8b:a5:e1:cc:49:e4:54:6c:8b:ee:
95:fb:dd:d2:62:81:5e:3a:31:a3:ff:10:71:75:41:fd:1f:c8:
61:df:56:1d:4d:b8:2d:01:68:4b:32:23:00:2a:83:c4:49:2e:
ca:86:ca:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:15:13 2025 by rpki-client