Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/FrPAyrVam6MHQJCD9_5AvJoEr0c.roa
File: FrPAyrVam6MHQJCD9_5AvJoEr0c.roa (raw, json)
Hash identifier: PY2w0RmH5cA77/1x6hzeyinx0cLQyXT5FqDTLBji3/Q=
Subject key identifier: 16:B3:C0:CA:B5:5A:9B:A3:07:40:90:83:F7:FE:40:BC:9A:04:AF:47
Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Certificate serial: 019427B6235687CC1A308B4EF9C5675565C8
Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/FrPAyrVam6MHQJCD9_5AvJoEr0c.roa
Signing time: Thu 02 Jan 2025 15:50:35 +0000
ROA not before: Thu 02 Jan 2025 15:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 194.164.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:23:56:87:cc:1a:30:8b:4e:f9:c5:67:55:65:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Validity
Not Before: Jan 2 15:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16b3c0cab55a9ba307409083f7fe40bc9a04af47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:46:62:de:2f:5b:d6:63:82:b0:81:aa:a9:
b4:de:74:4d:5c:1f:86:18:63:8e:30:9c:23:36:83:
16:47:1e:07:94:e9:58:cd:0a:c3:76:8a:4a:48:43:
e0:e2:2b:2a:55:a1:12:fb:2c:6d:3b:e8:f5:9e:59:
08:83:ae:7f:b2:05:b8:d4:e9:f8:a8:dc:d1:62:4e:
00:c2:a7:96:52:92:af:b3:e9:14:33:9c:94:bc:ef:
5d:28:a2:5a:ac:54:3d:c3:8b:94:a7:70:04:e6:bd:
6e:9f:c5:52:c3:25:79:63:4e:45:51:c7:48:ee:6c:
ef:32:e7:ad:5d:3d:69:32:88:36:ad:d5:03:4b:ad:
a8:12:de:dd:9f:0f:0c:cb:0e:5a:7b:c3:af:e0:24:
36:cc:dc:11:84:26:82:2c:51:16:19:b5:a2:ad:d0:
b5:f6:ec:c6:41:31:7c:26:c4:73:28:ba:d6:c5:b4:
91:6e:8c:6e:c2:a6:2e:44:5c:59:f8:01:d7:d8:d2:
47:2c:fd:79:b2:4a:85:d4:5c:50:c1:48:75:c7:b3:
c1:15:0e:7a:d6:ad:c1:78:0f:55:6c:f2:6f:9f:e2:
f7:d6:39:d2:83:a6:c8:1d:16:c8:06:21:da:ca:17:
a3:bb:87:a0:78:83:50:c2:3e:71:36:ea:52:39:e1:
79:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B3:C0:CA:B5:5A:9B:A3:07:40:90:83:F7:FE:40:BC:9A:04:AF:47
X509v3 Authority Key Identifier:
keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/FrPAyrVam6MHQJCD9_5AvJoEr0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.164.246.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:7c:ea:27:6d:bd:1e:c5:eb:d1:bd:b8:25:f8:ee:2d:71:98:
ae:9c:1f:10:56:8d:17:94:ae:9d:31:7d:d6:a4:64:38:25:06:
09:99:1c:7e:6f:77:2b:ba:4e:0b:02:73:8c:82:ac:a2:a7:e5:
07:88:05:e3:15:17:e6:80:57:66:4d:6c:43:17:4c:87:54:63:
96:d4:74:d8:19:4f:d2:69:29:22:30:95:75:09:48:5f:b2:9f:
e5:23:2f:76:00:d6:68:d6:d2:fa:ae:d9:c0:d5:b1:e1:d7:58:
c4:34:79:15:c2:83:8a:49:ba:f0:53:a8:8b:75:dd:de:f2:b2:
0f:39:d3:16:79:b2:da:2c:f4:ff:e0:97:62:99:5d:d8:55:7c:
86:e1:35:4f:3e:8b:57:8f:06:c0:29:93:94:9d:80:ad:ab:91:
aa:74:55:cd:aa:05:f1:30:71:1e:31:80:48:e5:5f:b1:29:e6:
ab:8b:fd:86:3f:a8:5a:15:e3:83:fb:78:5b:12:ec:f6:48:8f:
bf:fd:18:31:c2:b7:e5:0f:06:26:8d:5d:4c:26:4d:b6:0f:78:
b2:75:40:5f:a5:86:79:b7:98:7a:fe:63:f0:19:e4:d3:86:b7:
5a:c6:d7:b6:29:3b:25:ad:c3:69:6f:1f:54:07:dc:51:69:ba:
be:45:97:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:14:16 2025 by rpki-client