Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/rrIAJyvUmSAaBmNa199KaUyP-60.roa
File: rrIAJyvUmSAaBmNa199KaUyP-60.roa (raw, json)
Hash identifier: fKjK1ox3wXQXpT4UsehwbmnQGQ2XFcpwtO+m9U2+9wg=
Subject key identifier: AE:B2:00:27:2B:D4:99:20:1A:06:63:5A:D7:DF:4A:69:4C:8F:FB:AD
Certificate issuer: /CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Certificate serial: 0194282349713F369AAA34212AB2E7E056D1
Authority key identifier: 06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/rrIAJyvUmSAaBmNa199KaUyP-60.roa
Signing time: Thu 02 Jan 2025 17:49:48 +0000
ROA not before: Thu 02 Jan 2025 17:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214834
IP address blocks: 195.66.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Jan 2025 21:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:49:71:3f:36:9a:aa:34:21:2a:b2:e7:e0:56:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Validity
Not Before: Jan 2 17:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aeb200272bd499201a06635ad7df4a694c8ffbad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:c0:ee:39:3b:43:48:01:5f:73:e3:9f:ae:
66:67:6d:09:ce:f9:46:b0:76:0e:8c:53:9f:69:0f:
cc:d2:7a:94:41:73:5c:17:57:9f:8e:fb:a1:ce:b2:
39:db:49:88:08:a6:c7:e7:36:0b:aa:40:3f:52:94:
1b:73:ff:61:cd:42:8f:c1:32:fd:9c:de:21:c6:6e:
0f:3a:b0:29:44:5b:fc:18:6b:5a:0a:d6:15:c7:57:
49:d4:36:d8:04:b4:41:34:3c:b5:fd:d0:9c:2f:b6:
3d:e9:53:60:bd:7f:44:7f:8c:a0:36:3e:75:eb:c2:
b5:db:44:f2:b1:8e:e1:8d:41:6b:dc:54:8d:45:0c:
d0:2f:52:34:ef:b0:25:b7:57:fd:eb:ff:c3:4d:86:
ab:30:02:e2:b2:4e:2e:fa:56:b3:f7:c9:bc:88:99:
eb:b6:e4:b6:b3:72:15:5c:c0:f5:d3:ca:bf:37:53:
5a:43:f7:f5:b2:63:0d:73:d6:e3:32:25:24:de:85:
c5:d9:65:00:40:cc:d9:f7:84:74:ac:93:ad:c2:1e:
8c:00:03:41:03:d3:8c:b2:7e:16:9b:3c:55:b8:96:
fb:0b:da:53:38:31:2b:89:ca:d0:84:b7:e5:54:55:
21:ac:c5:e1:f2:c2:66:14:0e:86:d7:1c:cd:2d:05:
16:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B2:00:27:2B:D4:99:20:1A:06:63:5A:D7:DF:4A:69:4C:8F:FB:AD
X509v3 Authority Key Identifier:
keyid:06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/rrIAJyvUmSAaBmNa199KaUyP-60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.101.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:f3:96:11:b3:27:b5:2d:8b:75:0a:24:af:57:5a:07:63:a5:
61:7b:38:70:cc:c1:dc:c4:67:7d:8d:a4:90:17:b5:a0:3d:d4:
67:68:ea:de:25:9f:42:20:74:65:f8:13:3b:05:56:27:72:2e:
43:7c:f2:b1:dd:03:a5:4f:c5:15:55:81:86:eb:4e:c3:77:ce:
f5:ed:91:b6:01:88:d4:6a:c9:c9:22:bf:96:1c:6b:ec:68:94:
ff:6d:07:e8:25:b1:45:d1:0c:77:1a:04:60:a8:c3:07:04:18:
1a:5d:94:f4:84:88:ae:65:4e:f8:a4:b2:f2:65:49:be:03:9c:
a1:b7:2c:ed:2e:fb:21:88:84:88:1a:11:50:28:95:3c:d2:38:
fd:0f:28:7d:21:74:6a:a5:92:9c:8a:60:be:41:3b:b0:c3:93:
f8:87:0c:fb:c0:f5:d8:0e:c7:9c:1e:8e:3c:17:5e:d7:df:b9:
5c:00:d1:72:43:b9:ed:fa:c3:70:99:6e:14:13:13:50:ad:2c:
f5:9a:27:b6:49:3e:5b:48:c9:01:ae:6f:49:ca:3c:fb:a9:b2:
79:17:c0:41:a3:a6:e4:5c:f5:47:05:ff:90:c6:04:d5:1b:8e:
61:ff:7e:a6:62:70:4a:1e:6b:fc:da:52:ac:ae:c3:5d:67:97:
ee:be:d7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:18:43 2025 by rpki-client