Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/VAxf8EK3_6EZlmCwwPbJRS6XQ7Y.roa
File: VAxf8EK3_6EZlmCwwPbJRS6XQ7Y.roa (raw, json)
Hash identifier: 4WTLym7hGlr4cTQ0hd35DyMvFzpgM8rq4+BPuEnyTrU=
Subject key identifier: 54:0C:5F:F0:42:B7:FF:A1:19:96:60:B0:C0:F6:C9:45:2E:97:43:B6
Certificate issuer: /CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
Certificate serial: 018CC2DB17641A00A169619D4C4499E4AD2C
Authority key identifier: 53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/VAxf8EK3_6EZlmCwwPbJRS6XQ7Y.roa
Signing time: Mon 01 Jan 2024 02:29:47 +0000
ROA not before: Mon 01 Jan 2024 02:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207309
IP address blocks: 194.30.186.0/24 maxlen: 24
2a10:3d80::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:17:64:1a:00:a1:69:61:9d:4c:44:99:e4:ad:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
Validity
Not Before: Jan 1 02:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=540c5ff042b7ffa1199660b0c0f6c9452e9743b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cb:56:d5:f2:9a:07:89:eb:40:14:b4:d7:82:
f9:27:79:54:9c:2f:22:28:16:0b:d8:9e:2e:af:c9:
08:cd:89:1e:23:2d:66:e1:29:ce:f6:fe:29:81:2d:
ce:69:a5:19:33:62:64:a5:48:2b:a6:e1:9e:31:98:
ce:6a:c4:52:3c:3c:bf:96:a9:54:32:a3:5e:5c:33:
ba:7e:b6:43:59:3d:1c:41:1f:f1:1a:ca:cf:3d:e4:
d4:56:6f:61:a0:76:a0:04:56:c5:6f:1d:3b:6e:77:
fa:4c:11:00:c4:e0:1d:25:e5:56:41:c4:51:b4:6d:
6a:69:f5:3b:16:e7:a5:ea:e6:44:ce:22:60:2d:d4:
90:4f:7e:16:32:0b:be:b3:6d:1d:bd:c2:c9:2c:8c:
dc:43:22:67:67:c1:ec:d9:a1:a2:14:49:6e:05:ca:
a8:36:29:bb:23:6d:23:6c:37:a0:d1:c9:e1:43:06:
b0:21:03:3d:bd:e3:90:9d:07:53:94:8c:f7:89:63:
55:d6:18:96:ab:94:c8:51:f1:a8:7d:d2:2e:08:5f:
bc:70:3f:f4:e5:84:40:34:c5:c8:e9:1c:61:11:3d:
76:89:ec:f0:09:af:dd:ab:67:ac:6f:a4:11:48:a0:
37:c3:06:39:62:ac:c0:64:e4:36:22:6a:9f:93:c7:
33:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0C:5F:F0:42:B7:FF:A1:19:96:60:B0:C0:F6:C9:45:2E:97:43:B6
X509v3 Authority Key Identifier:
keyid:53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/VAxf8EK3_6EZlmCwwPbJRS6XQ7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.30.186.0/24
IPv6:
2a10:3d80::/29
Signature Algorithm: sha256WithRSAEncryption
01:ce:8f:c6:df:35:7d:38:00:12:f6:21:9f:1e:4b:c7:4d:16:
e7:6c:05:0e:2e:85:5e:bd:56:9d:56:8d:81:54:89:ad:ae:d2:
ef:45:2b:21:d8:4e:50:88:ae:bc:57:10:88:5e:64:ea:20:04:
3d:61:fb:05:9e:8d:98:0e:61:93:be:48:1c:a5:d3:ab:04:8b:
7a:8d:6b:14:de:5b:62:c6:4b:b5:48:44:29:5f:35:8b:f1:63:
b1:6e:a7:91:8d:5e:bd:0f:2a:aa:7d:33:e7:48:48:59:5f:ca:
f2:c1:14:46:1a:cc:4e:6b:d1:07:64:e9:b8:4a:90:90:9c:9f:
ef:65:6c:85:b9:c8:6a:ad:4d:25:8d:92:ed:54:35:5f:06:8a:
31:3b:6d:7b:51:f2:e9:e1:d1:27:3d:e8:22:32:75:fb:3e:14:
b8:cf:95:7f:5e:cd:9e:7e:dc:64:c2:25:1d:81:0f:05:f8:bb:
89:9e:bc:df:93:4b:e7:23:68:f2:4e:bc:5d:82:43:3c:3d:56:
a5:20:ed:5f:1a:3b:1f:59:35:11:2b:32:11:ff:07:11:67:fe:
3b:1e:f4:d8:73:55:5b:6c:11:60:12:fa:43:6f:14:c5:7e:45:
7f:c2:2e:d5:f8:b0:3c:3d:bc:c4:f4:48:dc:7d:d5:db:9c:ac:
39:d2:85:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:59:48 2025 by rpki-client