Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/7CqJNaZo5ctYVYkh7BnnRFJ4n6g.roa
File: 7CqJNaZo5ctYVYkh7BnnRFJ4n6g.roa (raw, json)
Hash identifier: g3H+PUgTlcgmkdBNY/9GLU9RUNlL9Z2bzApO3ET0ifk=
Subject key identifier: EC:2A:89:35:A6:68:E5:CB:58:55:89:21:EC:19:E7:44:52:78:9F:A8
Certificate issuer: /CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Certificate serial: 0194221FF67515E96989A1373209C1A52A59
Authority key identifier: 33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/7CqJNaZo5ctYVYkh7BnnRFJ4n6g.roa
Signing time: Wed 01 Jan 2025 13:48:27 +0000
ROA not before: Wed 01 Jan 2025 13:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20904
IP address blocks: 193.143.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Feb 2025 08:47:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f6:75:15:e9:69:89:a1:37:32:09:c1:a5:2a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Validity
Not Before: Jan 1 13:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec2a8935a668e5cb58558921ec19e74452789fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:79:b1:8e:af:eb:39:66:04:39:33:db:0c:
c3:41:9b:d8:00:92:b1:89:24:91:8a:01:9b:a6:f1:
ce:0c:8d:44:d7:c2:cb:ed:d6:b4:37:79:65:aa:e4:
20:c9:56:76:5e:28:0a:2f:88:0b:27:ce:d6:1c:1d:
36:3d:f3:f1:ee:e4:8c:84:45:f2:ea:8d:ee:0b:22:
7e:7a:77:45:d2:bf:9e:1c:5c:5d:3a:9e:dc:76:5f:
8e:33:db:f8:6f:21:7f:f1:bc:6f:9d:db:99:7c:43:
16:95:b3:58:6b:a8:9d:6b:a1:ee:58:26:b2:f6:35:
cf:ef:34:06:cb:1a:8f:17:de:de:6c:b7:f3:13:0b:
f5:be:c8:98:17:1c:50:14:e0:3a:b5:f3:7a:14:54:
0e:49:4a:b2:c1:db:2a:58:c7:db:3b:ff:a0:3a:4a:
f6:54:3a:5a:4c:ac:da:3e:ab:46:02:6a:34:37:b3:
1b:04:55:a2:a7:90:c5:7a:13:8c:8e:da:a1:5d:f6:
36:5b:76:91:e8:35:9c:7d:be:f2:39:96:a1:db:17:
f1:83:9b:b3:b7:50:3c:b8:6d:a9:4a:18:5c:67:45:
2f:b3:fa:a9:ea:c5:c6:dd:1e:76:3f:f1:7c:f2:d5:
d9:d0:1c:ce:a7:39:a3:f1:ae:fe:b0:fc:3b:39:c1:
4c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2A:89:35:A6:68:E5:CB:58:55:89:21:EC:19:E7:44:52:78:9F:A8
X509v3 Authority Key Identifier:
keyid:33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/7CqJNaZo5ctYVYkh7BnnRFJ4n6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.74.0/24
Signature Algorithm: sha256WithRSAEncryption
59:3a:20:a1:72:70:d9:ec:2b:02:d8:45:8a:a8:be:2d:80:e9:
aa:93:a7:df:26:82:c2:94:b0:a5:6e:3a:40:73:c0:32:56:54:
78:63:83:d7:d4:22:cf:cf:1d:8f:1a:85:1b:17:4c:c2:e6:b0:
ee:d7:30:7c:2e:80:1b:d0:95:95:72:f1:1c:a7:76:e5:95:40:
d9:a4:4e:cc:95:50:15:34:d9:61:99:9a:28:e0:3b:2f:07:b9:
bc:0a:9b:da:d9:a0:12:20:18:1c:44:6d:f9:ab:62:e0:82:23:
9b:8e:ae:d9:30:6b:ee:33:99:6a:ac:0d:da:7b:3b:5e:87:db:
5b:28:fc:03:ba:c9:4d:1e:8d:6c:80:50:fd:7c:79:b7:23:4a:
24:da:3f:44:39:f8:fe:9d:3f:16:27:03:7f:22:05:81:bb:a5:
62:d5:91:b3:7a:cb:7b:9f:29:48:1d:d8:84:b2:50:7f:76:96:
78:58:21:7a:96:88:31:95:0c:b6:69:6b:38:75:69:4f:cc:c6:
38:1a:f6:39:cb:9c:86:a9:39:35:b1:39:4a:c7:f9:1c:bd:93:
ab:c9:00:10:39:de:7b:6a:05:75:2d:3b:1b:26:ad:3c:df:9b:
f8:5b:70:39:3f:86:f1:53:53:da:07:6d:63:ca:29:86:c8:46:
d8:d8:ce:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:39:54 2025 by rpki-client