Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/KBabEyET0gKJAJct0IUoMTwf06Y.roa
File: KBabEyET0gKJAJct0IUoMTwf06Y.roa (raw, json)
Hash identifier: yD+ZMatAbiExFr391K7+2y4btP5/m3MCfkXNSdIfFtI=
Subject key identifier: 28:16:9B:13:21:13:D2:02:89:00:97:2D:D0:85:28:31:3C:1F:D3:A6
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0195B8E846FEA062C54B88CBA71F615BEDB5
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/KBabEyET0gKJAJct0IUoMTwf06Y.roa
Signing time: Fri 21 Mar 2025 13:33:05 +0000
ROA not before: Fri 21 Mar 2025 13:33:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 94.154.36.0/24 maxlen: 24
94.154.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 13:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b8:e8:46:fe:a0:62:c5:4b:88:cb:a7:1f:61:5b:ed:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Mar 21 13:33:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28169b132113d2028900972dd08528313c1fd3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:92:95:ba:71:8a:ba:7d:c9:69:7d:41:63:ec:
6f:dd:3a:f4:ae:09:84:95:43:94:19:e3:3d:12:6e:
11:09:53:2a:14:91:84:eb:c9:32:90:7e:08:a8:47:
e8:75:01:96:6b:ad:94:08:93:a7:33:cf:75:d3:4e:
ce:75:82:18:21:f9:c5:04:1a:5c:03:7e:27:01:63:
dc:15:2c:17:fa:4f:2a:b7:81:b8:14:ad:04:0b:00:
25:8c:a1:5d:fb:16:37:88:da:d7:1f:42:6f:5b:0c:
42:ae:44:1f:9c:d1:e0:db:f5:41:9a:c6:7f:a0:5e:
81:d2:fb:a4:60:45:7d:b2:8e:9f:24:92:78:c6:87:
a8:1f:bf:81:8a:ff:12:1d:80:fe:ed:e2:9c:bd:93:
c9:e0:05:20:58:62:3c:98:b5:98:7c:b7:04:f0:78:
fc:d2:ed:a3:0d:25:45:c2:9e:27:3e:32:30:c3:ce:
21:a0:ee:8e:2e:e4:7d:55:bc:86:25:98:04:86:7a:
6a:ae:09:67:0f:f3:a6:c4:78:56:31:41:61:5e:a6:
40:00:0c:80:a0:f7:81:f5:2a:9e:47:7a:b5:57:7d:
5e:42:0f:98:80:0b:ea:a0:22:38:c5:43:bd:7c:7f:
7e:62:dc:9f:cc:77:80:ce:8e:17:dd:52:00:8c:80:
8f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:16:9B:13:21:13:D2:02:89:00:97:2D:D0:85:28:31:3C:1F:D3:A6
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/KBabEyET0gKJAJct0IUoMTwf06Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.36.0/23
Signature Algorithm: sha256WithRSAEncryption
12:69:b2:88:aa:49:06:07:ab:2a:02:49:00:66:2e:7e:7a:c6:
60:2f:2f:0d:43:8a:23:d2:46:a2:a0:9c:59:04:53:43:48:15:
f1:24:52:3b:9e:cd:51:e4:99:47:18:41:5e:6a:1b:99:d5:3a:
59:a6:4d:23:f1:14:db:e3:d1:11:ca:da:28:98:b8:7c:c1:d6:
7a:df:dc:16:bc:6c:a4:4a:1d:f1:77:4e:ff:3a:68:ff:7a:34:
c5:89:7a:3d:56:6c:f7:4c:a0:f7:02:00:eb:b1:f2:d1:e5:aa:
d6:c5:e0:f6:a0:75:b8:8f:09:f0:06:0f:2c:2b:dc:8f:2f:0f:
2b:98:1f:9b:05:88:87:6d:95:58:07:8e:0b:11:4e:b3:8f:f6:
45:5b:74:c8:35:46:b2:8c:65:cd:fb:ff:11:fd:f9:24:2f:30:
b0:1e:e1:15:b4:80:58:6d:47:07:52:34:fe:10:58:d5:d7:f2:
f2:21:02:65:47:25:b3:cc:ef:8e:cf:91:87:c4:af:af:ae:9a:
47:5a:27:85:43:74:f6:0d:57:51:48:e8:ce:00:79:7d:05:39:
1c:1e:f1:ec:98:c3:7a:07:3a:62:e7:08:70:3f:25:85:14:19:
3a:70:b2:d9:95:6b:b7:5a:b2:56:61:d8:a5:d8:2d:ac:e9:8f:
df:95:a1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:24:57 2025 by rpki-client