Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/XNp6ALeMYOGYKGWn2UmAzHoGHuk.roa
File: XNp6ALeMYOGYKGWn2UmAzHoGHuk.roa (raw, json)
Hash identifier: 2vtg1xXEHdByB3cFyObrVMlSr+bw4EuimxYxFDi8ClI=
Subject key identifier: 5C:DA:7A:00:B7:8C:60:E1:98:28:65:A7:D9:49:80:CC:7A:06:1E:E9
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019422FBB0864958DE6921BA6E6F5DE8B6DA
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/XNp6ALeMYOGYKGWn2UmAzHoGHuk.roa
Signing time: Wed 01 Jan 2025 17:48:27 +0000
ROA not before: Wed 01 Jan 2025 17:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 195.177.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Jan 2025 19:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b0:86:49:58:de:69:21:ba:6e:6f:5d:e8:b6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 1 17:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cda7a00b78c60e1982865a7d94980cc7a061ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a6:99:b4:a3:fe:f7:f8:fc:81:55:66:05:19:
d5:9f:3b:e6:70:a1:64:7f:62:4e:06:8a:e8:07:4c:
1f:2e:9b:a0:3f:1a:cd:09:74:2c:6e:aa:f2:a2:b2:
37:31:af:f4:f3:05:1a:d1:ca:f4:49:d0:1b:6d:89:
fa:82:87:a7:64:a3:98:b4:68:11:bf:42:44:0d:72:
fa:e7:84:d6:84:e4:1a:fd:9e:1c:58:92:00:30:7e:
a4:58:e1:21:e8:02:7b:f6:8c:e5:55:db:a6:90:c2:
08:ea:53:aa:88:30:18:ad:d7:93:3c:23:a3:12:21:
b5:3d:ea:04:c3:ec:c9:b4:cf:09:26:74:ae:29:79:
7a:bf:44:5f:7b:47:45:32:51:53:41:52:83:a5:15:
72:67:b0:06:a4:70:da:14:0e:48:c4:60:fb:e5:b5:
4e:a6:81:f6:25:43:d5:1f:fa:78:29:86:6f:4a:f5:
66:48:2a:79:4f:da:62:ee:29:61:4e:f7:4a:e1:63:
e5:f6:7a:9e:51:d4:59:53:17:8e:b7:30:e2:f0:28:
d1:c8:9c:55:c0:6b:13:bd:a5:0d:c3:b8:15:8b:0a:
96:37:c7:90:c9:48:ed:83:e0:90:d6:de:ed:76:f9:
cb:f0:92:92:58:24:a9:67:50:4a:cf:f9:c0:57:56:
44:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DA:7A:00:B7:8C:60:E1:98:28:65:A7:D9:49:80:CC:7A:06:1E:E9
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/XNp6ALeMYOGYKGWn2UmAzHoGHuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.94.0/24
Signature Algorithm: sha256WithRSAEncryption
26:7a:e7:2d:91:e4:7a:60:8f:7f:c7:66:26:b7:f9:f4:73:d7:
48:54:db:29:44:b4:4f:14:3f:7e:62:b9:00:88:32:fd:11:2e:
67:83:77:06:1e:17:cb:6f:41:af:63:30:4e:60:67:b4:9c:24:
d3:1a:17:1f:ef:38:79:42:4a:ce:04:63:ad:84:37:03:8c:b8:
a7:9e:c9:ac:2d:97:9e:67:a4:22:43:8f:7a:9c:d9:19:09:6b:
bd:ea:4e:54:43:18:54:7e:fd:db:e4:dc:cb:14:6c:85:17:8e:
84:3a:33:ee:ba:5b:8a:68:27:b7:f9:41:ef:fa:d1:d1:10:fa:
23:9d:25:93:1a:54:ca:68:8c:20:4e:5c:7c:07:da:97:05:fb:
5e:31:12:96:8d:85:c7:59:42:0a:5e:0a:a2:bf:ec:fb:91:80:
c0:e1:e3:54:ee:ca:fa:64:1f:46:e7:9f:46:1e:c5:b7:b2:35:
a3:6e:6d:59:56:67:86:c6:9d:7e:e6:b7:48:e0:df:3b:45:bf:
61:dd:44:4f:4d:d6:bd:84:7b:a6:27:2a:34:df:84:45:50:5c:
77:7f:17:92:e5:c4:d8:6c:e9:a8:5f:8d:dc:a4:ea:e4:c0:3a:
21:b1:25:2a:70:86:77:aa:4b:64:1d:19:9c:eb:87:36:fb:8b:
ea:ca:90:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:51:53 2025 by rpki-client