Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/e_GgdAasneVTYMTT473pmt3roEo.roa
File: e_GgdAasneVTYMTT473pmt3roEo.roa (raw, json)
Hash identifier: nyDp5XxXEzdM0NnwYbTXEYlMIcO41v1H/PDZaI1sTGU=
Subject key identifier: 7B:F1:A0:74:06:AC:9D:E5:53:60:C4:D3:E3:BD:E9:9A:DD:EB:A0:4A
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 0196E39CDCF4F4B049BC6A2AD44BEEF23073
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/e_GgdAasneVTYMTT473pmt3roEo.roa
Signing time: Sun 18 May 2025 13:37:10 +0000
ROA not before: Sun 18 May 2025 13:37:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136510
IP address blocks: 194.126.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 May 2025 01:27:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e3:9c:dc:f4:f4:b0:49:bc:6a:2a:d4:4b:ee:f2:30:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: May 18 13:37:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bf1a07406ac9de55360c4d3e3bde99addeba04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9d:d5:6b:a9:ca:7f:8f:3e:80:f1:b9:33:58:
b6:68:74:06:d9:a9:69:13:c1:c0:f5:59:09:f7:eb:
2b:f9:81:d3:20:8e:3f:a3:5e:c4:52:10:26:fa:a6:
60:a5:ef:90:3a:eb:d6:05:be:b6:0a:39:93:ae:7d:
54:dc:84:4c:38:76:a3:83:48:fc:f1:ca:47:72:4a:
e3:60:d2:01:a8:b1:9e:5f:9a:eb:08:1b:d3:c2:0e:
dc:1b:1f:18:62:3c:b9:64:b7:c6:a2:79:67:d6:10:
66:f4:ee:15:33:27:0e:9a:eb:e9:f0:bc:03:3d:ae:
a6:83:cb:c1:c1:56:27:0f:a8:bb:ce:82:bb:2c:e1:
29:fc:4b:2d:d8:29:4e:c0:fb:89:3f:6c:fd:25:72:
bc:2d:d2:6c:de:cd:c1:c0:ee:ab:cb:84:04:9e:15:
be:35:06:95:7d:b3:44:7a:c6:f4:c0:d6:93:0c:ea:
6e:90:2f:64:48:ec:58:e1:34:a5:c9:27:c3:61:f0:
59:ac:a3:4e:99:ec:01:64:d6:aa:1f:26:a2:39:3f:
d6:0e:a8:91:3c:6c:5c:4d:2d:e4:2e:80:21:ae:5a:
47:2d:47:aa:39:03:c2:ca:5e:fd:16:da:b0:d7:5d:
6a:c6:60:36:25:0e:6b:69:97:be:f1:2d:f3:51:34:
8d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F1:A0:74:06:AC:9D:E5:53:60:C4:D3:E3:BD:E9:9A:DD:EB:A0:4A
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/e_GgdAasneVTYMTT473pmt3roEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.227.0/24
Signature Algorithm: sha256WithRSAEncryption
23:35:96:07:50:e1:ca:66:53:a5:65:a8:a5:fe:6b:99:2d:7f:
f3:0a:1e:77:8a:de:55:bf:68:be:27:24:68:9b:3d:35:fd:44:
95:43:21:1c:4d:69:cc:46:be:5e:f1:9b:eb:e1:37:0c:6a:fd:
5b:c9:ac:0b:ad:c6:cf:df:72:29:a7:14:e8:d9:aa:da:2b:4a:
9e:1a:ea:43:8b:7f:21:3f:9d:6c:55:6f:3e:f1:35:e1:7e:e8:
0f:a5:7d:0d:ff:e6:c5:8f:cd:d3:fd:d7:d8:01:16:5f:1f:7a:
27:39:cb:96:08:45:ef:04:95:f6:15:9a:51:8a:70:dc:7d:06:
62:ec:74:12:21:2e:7e:33:24:20:b4:e2:7e:fe:1a:61:13:fe:
18:1e:27:24:64:11:c1:8b:3e:a4:b4:03:0f:8b:b3:c7:9f:db:
b6:d3:4e:a5:23:9b:ad:05:86:0d:81:fe:66:11:5c:d9:eb:75:
46:92:28:4e:27:80:57:62:f4:62:b9:9a:c3:35:bb:38:22:06:
fc:34:c4:40:fd:3e:b2:a0:d2:b2:12:26:d0:52:11:1b:cb:6c:
04:13:f2:8e:14:c5:5f:d4:f0:92:13:48:55:eb:c1:4f:6a:2a:
ea:97:80:a6:ab:c9:34:e0:16:69:48:e7:2b:7b:f3:71:79:cb:
da:2c:b3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:59:58 2025 by rpki-client