Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/DIBDcfC37l85oqFsgOXhqMZ5XvY.roa
File: DIBDcfC37l85oqFsgOXhqMZ5XvY.roa (raw, json)
Hash identifier: RwBJKMojavCNydnUMuiFD7B/06k4RerB9S2BH+amD4Q=
Subject key identifier: 0C:80:43:71:F0:B7:EE:5F:39:A2:A1:6C:80:E5:E1:A8:C6:79:5E:F6
Certificate issuer: /CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Certificate serial: 019425220FDE4B4B2AED63E292DB0AC8AFB5
Authority key identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/DIBDcfC37l85oqFsgOXhqMZ5XvY.roa
Signing time: Thu 02 Jan 2025 03:49:36 +0000
ROA not before: Thu 02 Jan 2025 03:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210004
IP address blocks: 194.0.5.0/24 maxlen: 24
2001:678:8::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 14 Feb 2025 14:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:0f:de:4b:4b:2a:ed:63:e2:92:db:0a:c8:af:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Validity
Not Before: Jan 2 03:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c804371f0b7ee5f39a2a16c80e5e1a8c6795ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7c:5a:67:a4:9d:d7:7b:f6:2c:a6:f4:a8:ff:
a1:fd:a3:30:e2:84:20:ee:92:67:24:4b:db:af:35:
0f:d9:a7:4b:11:46:aa:0b:49:d2:3b:5d:98:46:4c:
ca:cf:4d:33:fd:44:3a:12:97:4c:e4:2f:e9:0a:f4:
ec:60:1f:f7:99:04:2a:8f:0b:df:bb:59:a4:0b:6d:
51:7d:4d:29:62:9f:50:e2:a6:c6:9f:b1:52:ed:77:
16:4b:45:74:e1:ed:07:78:0f:40:b5:ba:9e:b4:7b:
6e:49:35:0a:15:2c:13:9e:a5:de:6f:62:92:62:91:
a1:fb:fb:60:c7:92:5b:c0:9c:81:4d:6f:48:53:c9:
2c:75:86:c8:15:d2:1b:4a:f5:0c:37:2a:83:2c:3c:
e4:d7:d3:6c:e0:81:69:9b:45:8e:a9:0c:0c:0b:96:
c6:68:74:0f:34:32:d1:6d:e5:09:39:65:4a:9c:f0:
4e:ac:5f:c9:ec:f4:d6:74:0c:ea:3a:58:6c:79:4f:
fb:36:dc:e7:c6:9d:44:8a:70:21:80:80:2b:d6:8e:
75:bc:ae:a8:63:46:a7:bb:ca:96:db:b5:71:55:92:
f4:54:31:06:0d:26:12:0b:85:60:3a:6e:d0:db:0d:
ca:02:ca:39:fe:8f:89:da:a1:85:3f:6f:e2:88:ea:
65:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:80:43:71:F0:B7:EE:5F:39:A2:A1:6C:80:E5:E1:A8:C6:79:5E:F6
X509v3 Authority Key Identifier:
keyid:D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/DIBDcfC37l85oqFsgOXhqMZ5XvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.5.0/24
IPv6:
2001:678:8::/48
Signature Algorithm: sha256WithRSAEncryption
ad:21:ea:b3:67:c5:5e:21:63:73:8f:6c:67:6c:92:be:6a:4d:
fc:86:79:19:d4:32:db:bf:19:50:dd:89:73:6b:88:59:d3:83:
51:a5:02:dc:f3:13:1d:5b:12:1b:3f:62:9c:a6:54:03:1a:a9:
4f:e2:de:87:55:40:c6:6b:e6:bd:6a:5d:04:c9:c2:49:86:e1:
6b:64:bd:e1:e1:05:43:a0:8f:e6:3f:f1:a7:23:7c:7d:08:ab:
29:1b:92:fc:ec:fe:08:e0:54:30:63:f0:37:61:4f:4c:ff:ef:
a2:57:78:cc:ab:06:ed:fb:d2:8a:d2:ee:07:e0:37:4c:bf:59:
87:98:cf:32:5d:58:2a:e5:37:1c:66:82:c1:43:9a:54:22:d2:
c4:00:9f:ed:16:9b:f5:c5:41:ff:3e:c2:82:cd:84:a5:20:83:
2b:70:f8:9e:2a:3e:d8:7a:2f:19:aa:00:f4:32:ad:0e:85:b9:
69:9d:f4:f8:06:ba:5f:2d:81:06:9c:f8:4f:cf:12:53:c8:bc:
2e:20:3b:00:d3:f0:c8:25:c8:66:fc:1b:f6:66:74:d9:e0:19:
bf:ab:8d:8b:60:ad:34:af:65:fe:b8:d5:07:b5:63:e8:d2:6b:
0d:93:21:c3:3c:46:01:16:d0:a5:1a:e2:3a:e3:b5:e5:da:d3:
10:d8:ab:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:40:33 2025 by rpki-client