Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/v0xhdyaCd9SVJG9ce4exF3c97k4.roa
File: v0xhdyaCd9SVJG9ce4exF3c97k4.roa (raw, json)
Hash identifier: /jZ/pSmvVbj6q9Ab6rkXNkTRylkYZvssi2+6wXt0Bw8=
Subject key identifier: BF:4C:61:77:26:82:77:D4:95:24:6F:5C:7B:87:B1:17:77:3D:EE:4E
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0193BF83254D19597AD029B3CF1D943F1781
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/v0xhdyaCd9SVJG9ce4exF3c97k4.roa
Signing time: Fri 13 Dec 2024 10:14:23 +0000
ROA not before: Fri 13 Dec 2024 10:14:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6762
IP address blocks: 194.38.49.0/24 maxlen: 24
194.38.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bf:83:25:4d:19:59:7a:d0:29:b3:cf:1d:94:3f:17:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Dec 13 10:14:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf4c6177268277d495246f5c7b87b117773dee4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:10:8f:40:44:d8:77:b0:83:24:69:13:0e:e3:
d2:c7:24:41:db:f2:87:f2:51:bc:fc:24:0f:08:53:
87:2d:0d:ea:57:ae:91:27:2d:32:7b:1a:25:45:9c:
c1:71:53:b8:ae:e9:c4:77:2b:09:5e:f9:cf:51:72:
95:b5:78:a5:34:68:9a:ee:4e:25:fb:7c:e2:65:6e:
d7:6b:79:b0:d8:d7:1c:e0:85:60:7d:05:64:eb:94:
42:24:9f:5a:a9:03:13:0f:52:54:dd:11:00:c1:86:
59:e0:ee:e8:f9:32:d6:e1:a0:72:0b:64:5a:ab:59:
02:8a:be:9f:38:b5:fb:6f:34:82:d3:62:14:9a:77:
89:f8:33:31:f7:7c:b7:8b:f9:56:e6:c6:42:39:d4:
59:80:3a:12:78:cd:f6:e8:a6:49:3c:0e:7c:4b:d2:
dc:df:d2:0a:b4:85:70:12:1d:5e:d6:eb:c7:90:fe:
c5:dd:32:1f:ef:55:04:95:70:47:a9:fd:7c:3d:f1:
60:c7:19:10:0e:59:98:3d:58:39:92:6e:77:ef:95:
ae:0a:3d:d3:14:a3:1e:79:c9:ad:4d:d8:bb:9b:48:
c2:c4:1d:21:90:c6:95:6a:8f:74:f9:58:ac:7f:70:
58:46:ca:6d:ca:5b:a0:fa:c2:0b:b7:86:5f:29:49:
92:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4C:61:77:26:82:77:D4:95:24:6F:5C:7B:87:B1:17:77:3D:EE:4E
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/v0xhdyaCd9SVJG9ce4exF3c97k4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.49.0/24
194.38.51.0/24
Signature Algorithm: sha256WithRSAEncryption
83:06:27:11:95:fe:39:c6:96:df:b7:e6:65:70:49:d5:35:b4:
75:bf:37:0f:85:c7:a8:af:4f:b9:a0:88:e6:be:07:69:44:4b:
1a:2b:ae:88:9a:29:9b:9e:b1:42:1b:c9:d7:59:2d:d8:d8:10:
56:f2:03:d7:a6:9e:b2:fe:56:85:06:0e:1b:c9:ec:9b:56:63:
be:59:7c:f6:5e:eb:9c:7a:77:45:00:99:42:75:95:9b:d1:23:
9e:5f:aa:de:fd:b8:93:59:e7:56:64:43:35:d2:10:e2:87:9d:
54:9d:dd:75:e5:e5:25:45:43:a6:b7:89:2d:16:27:c1:2f:8c:
4b:17:d0:3e:b3:eb:aa:24:32:ef:42:90:eb:b8:27:c2:d4:b1:
f1:d1:05:bc:66:36:69:2e:f9:55:3f:5d:67:dc:d8:e3:b0:9c:
6d:49:bf:ac:8f:84:2e:72:84:1d:99:bd:86:b4:a5:be:66:84:
d1:ae:5e:e5:4d:94:cf:61:18:ac:c8:bb:f1:b0:9d:6a:57:59:
c2:c4:7c:8c:e2:84:14:c9:3e:13:d4:c6:4c:5e:bd:df:23:3e:
8c:80:34:b8:5f:75:4a:a7:d7:1f:0a:dd:4d:ad:8c:4c:db:f1:
49:09:f2:5a:f2:1a:ad:f8:ed:ad:5d:65:ef:3d:74:9d:06:3c:
cd:98:00:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:55:18 2025 by rpki-client