Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/g60fFRYoq9_pSve7LpSTcuHCHDk.roa
File: g60fFRYoq9_pSve7LpSTcuHCHDk.roa (raw, json)
Hash identifier: GK+LCGAffdhTPXBoOmBdmH4uAtsKF2DGWoE8yB31Ans=
Subject key identifier: 83:AD:1F:15:16:28:AB:DF:E9:4A:F7:BB:2E:94:93:72:E1:C2:1C:39
Certificate issuer: /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Certificate serial: 0195D176F990DE63E6E66E4628E5AC43FA01
Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/g60fFRYoq9_pSve7LpSTcuHCHDk.roa
Signing time: Wed 26 Mar 2025 07:59:50 +0000
ROA not before: Wed 26 Mar 2025 07:59:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2850
IP address blocks: 193.1.128.0/19 maxlen: 19
193.1.160.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 26 Mar 2025 10:13:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d1:76:f9:90:de:63:e6:e6:6e:46:28:e5:ac:43:fa:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Validity
Not Before: Mar 26 07:59:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83ad1f151628abdfe94af7bb2e949372e1c21c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:03:29:90:cc:9d:69:d4:6b:25:4c:4a:95:
19:19:89:52:0c:89:71:be:98:29:f9:66:82:5d:55:
f6:b5:ff:f5:4e:0c:d4:a7:c0:52:af:f9:f5:da:00:
77:cc:eb:27:c4:8e:4e:79:cc:75:87:01:bb:1e:3f:
b8:57:a3:e1:40:1c:50:da:de:8c:4f:0c:4e:ee:e4:
77:80:66:07:d9:c6:12:b9:7a:92:0a:bd:75:f8:c8:
c2:6a:37:f2:05:a8:87:92:06:9d:93:4b:35:30:fa:
09:d3:26:92:17:54:ae:ea:57:5c:06:6a:2d:ab:e9:
c9:d9:f4:20:1f:e2:16:d0:c2:db:2c:98:10:e3:90:
56:6a:96:46:61:74:21:00:85:03:e0:f3:f0:df:a4:
48:88:05:ea:f3:32:e1:5f:1f:61:28:e9:30:54:0d:
a9:82:eb:89:b2:73:d3:cc:a4:87:d8:26:4b:0a:d6:
ec:b6:de:33:b0:93:6c:15:56:3d:46:7c:91:ce:4d:
9d:41:7d:3f:d6:b7:6c:ea:2f:51:dc:ba:95:27:29:
47:2e:7c:b6:d7:c9:49:a8:c4:df:ee:25:c7:c5:29:
ba:11:9b:c9:f2:30:24:9e:24:94:bb:ba:66:c0:f3:
41:06:d8:43:45:6e:a5:cf:40:e1:b0:6c:12:ff:a8:
53:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AD:1F:15:16:28:AB:DF:E9:4A:F7:BB:2E:94:93:72:E1:C2:1C:39
X509v3 Authority Key Identifier:
keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/g60fFRYoq9_pSve7LpSTcuHCHDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.1.128.0-193.1.175.255
Signature Algorithm: sha256WithRSAEncryption
9f:be:02:7c:51:15:86:f7:e4:f1:99:85:b1:b8:7e:b8:13:76:
4d:aa:65:81:26:6c:90:59:81:1d:c2:45:1a:02:47:11:69:5f:
3f:ac:4b:f8:fc:14:73:49:42:b7:f9:2f:74:ff:d5:cc:64:5e:
46:e4:2e:0e:15:14:53:5e:41:e7:78:0c:b6:7b:a6:b1:ed:ae:
33:e1:3b:bc:32:e3:86:3b:4b:fc:06:15:c1:f6:48:4b:0a:8d:
7b:36:0a:83:6f:d1:b3:d2:96:71:b8:8f:d7:4b:5a:a7:a6:6e:
4b:48:6c:f6:a2:6a:03:50:97:64:dc:55:f0:d6:fa:55:93:c0:
e9:3e:41:8c:ea:c6:2f:ca:cc:54:d7:ad:58:33:ef:06:29:0a:
27:ee:43:1f:5e:a9:d7:57:16:c5:09:70:f1:21:00:51:89:cd:
f0:b6:80:7b:21:c3:a6:ba:5e:13:05:27:d7:a8:79:85:7f:eb:
d4:68:dd:19:8a:5d:81:24:8f:92:2e:ac:b6:73:c5:9a:9a:9b:
8d:0d:ec:4d:0c:e2:97:ed:0a:a5:06:6c:cc:c9:a9:99:f9:5d:
92:e5:2e:c3:92:8f:92:e7:26:47:be:c2:8c:ca:43:f6:4a:5c:
5e:91:d2:e0:21:cb:80:97:39:0d:dc:8b:39:20:f2:a1:65:15:
c4:a5:e0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:17:45 2025 by rpki-client