Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/kri6EzI-VR_tGXqBYNvovzTlxmg.roa
File: kri6EzI-VR_tGXqBYNvovzTlxmg.roa (raw, json)
Hash identifier: 6ggMlIzy8oxUPqxLsJ2k6bNsqTjjGUSqnnbGInLMReU=
Subject key identifier: 92:B8:BA:13:32:3E:55:1F:ED:19:7A:81:60:DB:E8:BF:34:E5:C6:68
Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial: 019427B57566EBC653EE79B2CF2C0B4098E9
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/kri6EzI-VR_tGXqBYNvovzTlxmg.roa
Signing time: Thu 02 Jan 2025 15:49:50 +0000
ROA not before: Thu 02 Jan 2025 15:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1764
IP address blocks: 195.242.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Jan 2025 08:34:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:75:66:eb:c6:53:ee:79:b2:cf:2c:0b:40:98:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Validity
Not Before: Jan 2 15:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92b8ba13323e551fed197a8160dbe8bf34e5c668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b4:be:e6:25:f6:72:c9:b1:ce:40:43:e7:51:
39:62:69:28:9b:27:57:db:10:c8:f6:2f:bd:df:23:
d4:69:bf:fb:69:ab:fe:1d:32:2f:d8:e7:ce:e7:28:
d5:5c:df:04:d6:f6:a9:a5:30:27:4c:6d:32:34:49:
2c:71:4f:61:45:3b:16:40:39:a6:90:dc:b0:78:a3:
c9:fb:87:9b:19:a3:cc:16:77:02:2e:c5:c3:77:fc:
86:e9:ee:eb:f4:27:cd:97:87:c4:a5:32:dd:62:25:
46:a1:3d:85:4b:96:02:47:d6:43:63:29:ab:86:44:
40:e1:c1:67:3b:88:74:f6:8b:60:b1:a7:2a:aa:a3:
ab:c1:eb:80:5a:ee:76:80:2f:3f:38:b6:29:b1:1b:
4f:e8:8d:31:2e:b7:a9:bd:e1:6b:26:42:7e:f8:4d:
db:13:fd:59:5b:5e:c1:8f:3f:4c:a0:93:74:01:01:
9e:2b:5f:8b:f9:c5:fa:59:e8:52:43:27:04:2c:51:
3a:fc:a7:6b:1d:9a:15:46:7b:c9:5f:d4:0b:4a:98:
aa:e2:a5:4c:d4:10:38:bc:79:0a:98:ed:2d:0a:e2:
d6:12:9b:09:1f:87:12:2b:98:27:b2:e4:63:be:29:
cf:b6:c1:66:d2:db:b0:e0:80:b4:19:5c:55:b2:d0:
c4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B8:BA:13:32:3E:55:1F:ED:19:7A:81:60:DB:E8:BF:34:E5:C6:68
X509v3 Authority Key Identifier:
keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/kri6EzI-VR_tGXqBYNvovzTlxmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.184.0/24
Signature Algorithm: sha256WithRSAEncryption
45:48:fa:88:a9:5a:34:1d:d3:a1:68:f1:a3:11:2b:e6:ec:5e:
c9:ce:13:8a:c9:62:c4:8e:d1:6f:2b:69:53:d3:6c:d0:fa:b4:
2c:88:57:75:7d:e4:b2:8d:11:b3:5c:2b:5c:7c:ba:21:97:c7:
a0:da:c8:eb:7e:d4:10:b8:db:83:0b:4f:78:ec:2e:6b:14:4c:
9b:51:ba:00:fd:be:06:ac:d5:44:0f:90:85:b5:37:8b:dd:4d:
f9:4d:c7:cf:b2:34:7e:2c:ca:35:56:94:e3:70:dd:19:b7:5d:
1a:af:ac:99:c9:00:20:9c:3d:cb:fb:50:34:a2:df:ff:5e:08:
ce:b0:af:53:d9:b1:78:ea:72:aa:4f:e3:c5:f1:f9:81:ab:ee:
9d:97:39:b7:33:15:5b:13:c0:d6:65:82:f9:9b:04:d1:50:65:
a5:a9:6d:6f:b8:78:8a:e3:f5:7a:90:7b:75:59:99:78:df:13:
d8:1e:de:d9:83:45:6a:e4:f2:ca:ae:ed:8f:10:24:50:0c:60:
4e:c7:5f:a2:4c:bb:8f:44:8c:4f:86:85:0a:04:b8:e2:b1:58:
df:d4:60:be:51:88:92:37:2d:08:9b:26:f6:f8:92:e8:12:a3:
8f:56:60:ef:d7:2a:db:84:36:56:de:f6:59:0a:8c:bf:c0:fa:
8c:bc:4f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:06:38 2025 by rpki-client