Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/lTK7ObfLxh37EDKfSWwemJ2xWRk.roa
File: lTK7ObfLxh37EDKfSWwemJ2xWRk.roa (raw, json)
Hash identifier: j0ZiCrgKdop+lr8T67TV9rFySUKvUqChlUZ6Ued/HSU=
Subject key identifier: 95:32:BB:39:B7:CB:C6:1D:FB:10:32:9F:49:6C:1E:98:9D:B1:59:19
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019422FBC97F78B9F78FE8FDE29E1321F251
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/lTK7ObfLxh37EDKfSWwemJ2xWRk.roa
Signing time: Wed 01 Jan 2025 17:48:33 +0000
ROA not before: Wed 01 Jan 2025 17:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393427
IP address blocks: 195.177.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Jan 2025 19:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c9:7f:78:b9:f7:8f:e8:fd:e2:9e:13:21:f2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 1 17:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9532bb39b7cbc61dfb10329f496c1e989db15919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:b6:be:f6:ea:b7:88:91:56:b3:b8:72:2e:
e2:8e:57:5e:00:e0:a1:28:b0:1e:df:58:a7:4d:38:
98:98:e8:31:64:3c:fe:67:41:84:ad:44:32:a3:43:
08:6e:fb:e9:40:b2:b3:58:4c:27:d6:32:81:33:62:
1a:af:10:15:f4:83:eb:6a:74:05:5b:b5:1e:c7:3e:
dd:6b:b6:dc:8a:e5:87:72:ce:9e:99:4d:8d:7f:d5:
36:7f:21:25:e4:17:51:fe:42:a7:04:64:8d:d3:bd:
1c:ab:e5:6d:0f:66:67:06:35:d4:47:ca:30:53:6f:
2f:7c:6e:02:67:58:c0:80:0c:03:ce:cc:65:d7:60:
16:3b:2b:e6:a4:dd:12:f8:75:f4:e4:3e:5f:36:dc:
39:01:ab:67:e0:63:99:e4:3d:14:0a:c0:06:bb:28:
f2:2d:1e:b9:17:24:e7:cf:85:33:1b:4e:6e:ed:84:
7d:6b:1d:93:be:a0:ab:75:28:9e:c3:7f:ea:11:77:
87:c6:b3:0e:3f:e0:18:82:09:5a:6b:b5:c5:38:fb:
f9:f7:c6:14:51:95:b8:ff:d8:62:0d:95:88:e3:23:
d1:5a:35:e8:5e:a1:65:98:82:69:29:09:06:ec:24:
5a:9e:bf:f6:b0:b5:72:2d:1c:20:56:a4:5e:b7:a3:
bc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:32:BB:39:B7:CB:C6:1D:FB:10:32:9F:49:6C:1E:98:9D:B1:59:19
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/lTK7ObfLxh37EDKfSWwemJ2xWRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.94.0/24
Signature Algorithm: sha256WithRSAEncryption
68:d0:78:10:01:ef:bc:b0:97:1a:ef:bb:23:0a:b8:55:86:2c:
56:46:b6:63:81:66:e8:bc:a8:78:33:85:15:a2:48:64:c6:1a:
2a:35:a3:e7:5d:45:c3:da:9b:f1:d4:25:14:c1:05:04:be:8c:
96:24:8c:1a:b6:ee:05:78:e0:6a:6c:d8:aa:64:28:8b:f5:9d:
23:e9:9d:18:71:49:14:9d:52:ef:48:53:1c:c9:69:01:6f:38:
25:57:be:38:9a:bf:00:57:dc:35:5c:5b:f3:9a:df:8f:e0:f6:
dd:12:a3:9a:91:fb:aa:b6:9c:5b:72:88:10:46:dc:ac:ad:eb:
62:28:f7:5e:e0:6a:98:9f:e8:39:1f:22:cb:7d:9d:85:f9:b4:
fa:dd:99:82:e9:bf:c0:9e:c6:09:bf:c9:7b:75:90:33:49:05:
76:90:53:61:83:67:ea:93:47:1b:9c:db:33:56:4b:d7:ab:d6:
2e:48:78:2f:83:69:16:11:55:b3:8d:13:4c:b1:32:63:d7:d0:
4d:2f:02:26:54:aa:47:a7:4b:41:ce:49:64:b2:bf:47:da:3a:
33:be:b0:01:cf:2a:55:e1:1c:b1:65:44:30:83:6c:c8:b2:08:
32:bf:a5:f8:2c:5a:3e:80:5a:4d:54:03:cf:f1:4e:29:97:d6:
2b:07:1b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:50:05 2025 by rpki-client