Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/AZR9cq3cCDtBhtXXTxMhwkTEEOI.roa
File: AZR9cq3cCDtBhtXXTxMhwkTEEOI.roa (raw, json)
Hash identifier: suFVnZdGjE65p3+FphM3YzbsdCM7ePKwoJuuWFZXJHM=
Subject key identifier: 01:94:7D:72:AD:DC:08:3B:41:86:D5:D7:4F:13:21:C2:44:C4:10:E2
Certificate issuer: /CN=58c4ea7a385efa36724196b4343960baa47cbeb7
Certificate serial: 018CC86F0D0EB3DB0B371E78110F3FFFD8D3
Authority key identifier: 58:C4:EA:7A:38:5E:FA:36:72:41:96:B4:34:39:60:BA:A4:7C:BE:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WMTqejhe-jZyQZa0NDlguqR8vrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/AZR9cq3cCDtBhtXXTxMhwkTEEOI.roa
Signing time: Tue 02 Jan 2024 04:29:30 +0000
ROA not before: Tue 02 Jan 2024 04:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34863
IP address blocks: 194.30.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:0d:0e:b3:db:0b:37:1e:78:11:0f:3f:ff:d8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58c4ea7a385efa36724196b4343960baa47cbeb7
Validity
Not Before: Jan 2 04:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01947d72addc083b4186d5d74f1321c244c410e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2f:56:b2:55:13:d1:30:45:be:06:bb:0e:dd:
39:ff:1f:03:1f:1d:23:70:65:e5:f0:5a:ef:1e:2b:
68:af:3b:5e:9d:28:0c:07:95:6a:40:49:ba:1d:79:
93:16:bc:36:30:0e:ee:f6:a4:b7:d9:85:19:e8:1d:
69:33:5e:bc:83:92:fb:84:01:9a:6b:85:44:49:13:
f3:35:df:c3:d6:7b:55:ba:f9:4e:9f:03:77:5a:fd:
12:02:fb:85:bd:3f:6d:6a:b2:8f:15:17:9f:51:17:
94:e7:91:fa:5e:ce:53:3a:ef:c2:db:15:24:4a:62:
16:06:08:88:09:cd:65:0c:64:4b:37:9c:56:32:9a:
54:f0:2c:03:16:2c:44:f5:0b:24:dd:47:52:0a:75:
df:16:6e:7e:e0:2d:85:03:56:7b:e0:21:d2:19:18:
63:75:35:16:9a:7e:cd:1f:d6:10:2a:71:38:97:d8:
6a:6d:50:6f:d4:c4:de:4b:53:f1:ff:0d:83:1b:cf:
be:ae:31:c5:c1:1c:15:f8:d6:80:b6:b4:29:d8:bb:
37:d6:56:24:8e:16:04:2c:a8:f2:50:2f:3a:6b:f3:
3f:53:26:44:5a:ab:31:b7:b7:81:6a:a2:7a:48:5c:
92:bd:7e:40:8c:70:08:69:ba:83:ff:0a:96:52:76:
f4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:94:7D:72:AD:DC:08:3B:41:86:D5:D7:4F:13:21:C2:44:C4:10:E2
X509v3 Authority Key Identifier:
keyid:58:C4:EA:7A:38:5E:FA:36:72:41:96:B4:34:39:60:BA:A4:7C:BE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMTqejhe-jZyQZa0NDlguqR8vrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/AZR9cq3cCDtBhtXXTxMhwkTEEOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/WMTqejhe-jZyQZa0NDlguqR8vrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.30.173.0/24
Signature Algorithm: sha256WithRSAEncryption
15:04:26:88:f8:d4:06:58:22:2b:76:f5:ab:7e:44:53:77:7e:
95:dc:19:43:8b:60:f8:59:5e:b0:3b:c9:3b:d1:c3:63:74:26:
a1:19:04:55:63:54:74:f5:4a:62:70:16:3d:b4:2f:74:50:34:
d8:25:0f:f5:e3:19:b3:ee:91:3a:1c:62:a6:c2:66:46:97:79:
61:b2:15:d3:44:0d:f3:46:29:4d:84:11:47:40:9b:6a:90:72:
23:d9:2c:92:58:6f:f7:c6:49:cb:95:7f:7b:84:20:f4:9a:88:
1f:d8:41:d5:6b:10:4e:1c:eb:36:7e:0f:d3:18:e4:27:92:8e:
32:3f:5a:60:f1:28:64:c0:85:75:4b:60:ff:1e:a6:55:78:4d:
3f:ec:28:38:fd:28:5d:7c:d3:c7:56:1f:c5:b8:a4:32:c0:f4:
de:6c:e2:c5:2d:46:e0:d4:bf:a3:ee:b8:02:1e:b7:1c:a0:43:
39:36:ea:dd:6a:bf:15:04:ae:76:09:dd:25:36:82:87:8d:83:
46:af:c8:c8:ca:4d:71:2a:e4:16:94:4f:59:d0:1b:3b:df:05:
7a:32:4b:cf:b1:6c:85:a4:dd:79:4a:62:e2:00:5e:45:ff:12:
65:97:90:e8:1d:58:6d:5e:1f:71:cd:43:7c:c2:0f:6b:50:5e:
3f:34:e5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:27:04 2025 by rpki-client