Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/GE7mhEaigYr8Rh0xdZ8gn6JGJQw.roa
File: GE7mhEaigYr8Rh0xdZ8gn6JGJQw.roa (raw, json)
Hash identifier: 2u1JpY2zu3a+A9gIF0I6+1fcCjsB1DrQ5oFW2YMSA6A=
Subject key identifier: 18:4E:E6:84:46:A2:81:8A:FC:46:1D:31:75:9F:20:9F:A2:46:25:0C
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01956BEF9CB7F4865B4C39F7EB3F2B4C29DB
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/GE7mhEaigYr8Rh0xdZ8gn6JGJQw.roa
Signing time: Thu 06 Mar 2025 14:50:20 +0000
ROA not before: Thu 06 Mar 2025 14:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 193.168.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Mar 2025 12:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6b:ef:9c:b7:f4:86:5b:4c:39:f7:eb:3f:2b:4c:29:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Mar 6 14:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=184ee68446a2818afc461d31759f209fa246250c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:83:61:9f:cc:1d:3a:e2:9d:89:2a:8b:0e:db:
9a:b6:0b:f0:f8:c7:66:0e:35:a3:a4:c8:dd:2f:46:
20:7f:03:c9:2d:73:f7:c7:3f:68:73:9b:66:b9:60:
90:f6:6c:5e:8b:66:df:2f:f8:fe:e4:35:33:ef:37:
fd:09:80:8b:fa:67:82:c0:9d:d0:e4:8b:17:36:97:
c9:f2:35:03:d9:b7:7d:fc:e2:29:7a:f2:ab:e0:cc:
bc:af:84:5d:d3:5c:4f:a9:43:3a:c1:32:fc:76:44:
9a:65:c0:f7:90:35:c0:f9:02:0d:7e:66:c8:45:bf:
f9:05:1f:76:b6:66:dc:c5:77:e4:db:ed:b7:a3:94:
f6:cb:44:e1:79:49:85:96:c2:cf:b2:aa:13:ee:12:
23:9a:85:4a:36:34:2c:0c:87:0b:26:5f:8f:fd:77:
29:a2:d3:d4:15:d5:da:f9:68:7a:4d:d8:c6:6f:d7:
77:f4:f1:29:2b:7f:7e:32:10:dc:94:fd:51:39:32:
e4:df:37:9e:c8:a7:8f:d9:30:0c:5e:8d:2d:5e:42:
1e:e4:13:73:73:37:c7:ee:48:92:d2:f0:98:39:be:
48:d8:8f:26:b9:5f:b6:d9:39:bb:06:39:9e:93:db:
f5:8f:10:28:50:6d:dc:2b:5a:32:41:83:e3:54:59:
99:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4E:E6:84:46:A2:81:8A:FC:46:1D:31:75:9F:20:9F:A2:46:25:0C
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/GE7mhEaigYr8Rh0xdZ8gn6JGJQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.203.0/24
Signature Algorithm: sha256WithRSAEncryption
14:8b:10:88:5f:57:a8:d8:6a:be:66:50:8b:b9:5b:a4:41:7f:
e1:25:0f:20:30:3c:41:a9:45:8f:98:4f:11:f7:59:87:14:7b:
2f:26:98:0a:96:f8:33:af:00:72:47:e5:72:86:c5:47:8f:3a:
85:b0:4d:60:a9:8b:01:01:39:d5:66:21:1e:a5:f8:23:0d:56:
74:3e:c4:c2:40:b4:ec:d9:a6:a6:32:f9:70:ab:a0:6c:a0:59:
38:d2:4e:b1:9d:49:d5:73:7f:06:65:71:40:90:52:b6:90:b6:
4d:1d:46:a3:7d:e4:0f:9f:ab:36:dc:e9:23:e5:10:d2:40:e7:
25:63:5a:8c:53:77:78:0c:53:cb:ea:93:c9:dd:54:55:ba:f6:
16:09:7e:be:c2:7b:e1:97:ff:af:8f:0a:b5:89:c1:dd:c5:83:
7e:a1:c9:81:37:9c:25:e8:0b:c8:b2:ce:ea:20:83:76:71:75:
c5:de:f1:02:9c:5c:36:65:45:27:a5:c7:e0:05:1f:fe:b0:fd:
bd:35:9a:42:d4:b1:3a:43:74:e6:ee:80:d4:53:c9:37:09:1d:
48:0d:43:48:94:58:3d:89:bb:59:17:9e:cf:d5:f9:b6:00:e3:
7a:e9:51:c1:c7:d1:eb:3a:20:01:f3:c1:7c:bd:57:1b:5c:45:
4e:11:af:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:22:15 2025 by rpki-client