Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mQ0bQlfwL00bjERgdANxagLgwnc.roa
File: mQ0bQlfwL00bjERgdANxagLgwnc.roa (raw, json)
Hash identifier: 2B8veNXdLR9IHTTPIdveyx0Bk1xxzyYFEjRUyQFcluQ=
Subject key identifier: 99:0D:1B:42:57:F0:2F:4D:1B:8C:44:60:74:03:71:6A:02:E0:C2:77
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194B649F1AB3CF63361D8B2A0E17EF9C701
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mQ0bQlfwL00bjERgdANxagLgwnc.roa
Signing time: Thu 30 Jan 2025 08:18:06 +0000
ROA not before: Thu 30 Jan 2025 08:18:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215925
IP address blocks: 194.85.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Feb 2025 11:59:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b6:49:f1:ab:3c:f6:33:61:d8:b2:a0:e1:7e:f9:c7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 30 08:18:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=990d1b4257f02f4d1b8c44607403716a02e0c277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c6:5b:4e:78:d3:2a:fd:53:95:96:05:ae:38:
27:c1:60:66:8f:f0:d6:aa:c4:08:88:35:b5:e1:b0:
17:28:ee:99:d0:b7:b2:79:c8:12:f9:05:3a:ba:a3:
d2:d0:da:c4:d7:b3:52:30:01:38:c8:9d:88:c6:ba:
fa:05:e9:1a:63:41:29:68:25:2c:63:88:e8:32:27:
53:cf:6c:ed:9d:79:84:ff:a1:b2:84:18:b4:d5:38:
e4:45:a1:06:c0:af:4b:db:49:f3:7d:e9:33:6e:db:
31:a3:4e:81:15:a3:60:8e:dc:9d:ce:5c:92:ea:fa:
2d:68:12:bb:5a:d7:cb:d2:6d:f0:cc:87:0c:f2:f5:
a9:be:89:7e:42:cf:f0:1b:6f:eb:43:f4:cc:53:ae:
c0:af:59:57:23:4a:b8:18:4c:b8:cf:2d:0f:a5:2f:
fa:74:43:41:99:6e:b3:e5:9c:9d:85:9b:5a:bb:9b:
4a:1a:4b:c2:be:fc:4a:f3:8a:ac:2e:27:33:09:49:
a2:fd:48:59:55:a7:d7:41:5f:24:f3:e2:46:f5:72:
77:96:95:16:6b:23:b9:80:06:aa:0f:d9:da:a1:ca:
26:3e:7d:8a:b9:05:b6:5f:89:99:b3:0c:3a:bc:26:
6c:0e:0a:50:8a:7c:85:5a:91:f0:f0:de:f3:91:09:
44:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0D:1B:42:57:F0:2F:4D:1B:8C:44:60:74:03:71:6A:02:E0:C2:77
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mQ0bQlfwL00bjERgdANxagLgwnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.85.251.0/24
Signature Algorithm: sha256WithRSAEncryption
05:25:b7:92:7f:43:96:9d:18:e2:2a:70:aa:68:25:73:0c:40:
c1:cf:04:e7:0a:8b:f3:f8:39:72:0d:7b:e0:a4:96:66:9e:26:
d1:0d:30:a8:b7:f6:ab:b9:de:7c:e6:74:76:54:a2:27:aa:ff:
9f:51:13:60:7d:24:1e:f5:cc:e6:76:3c:52:2d:51:17:df:c9:
79:fa:af:56:6e:0b:ad:69:be:68:9c:f8:67:27:bd:41:89:95:
fd:05:ea:eb:fd:e0:85:f3:62:79:e2:12:2d:7f:f2:41:49:10:
0c:38:30:bd:81:5e:6f:22:04:79:7a:62:a6:ca:42:0b:d4:3e:
d9:10:0b:5e:af:d0:ec:a0:ca:0d:97:9d:61:9f:6d:80:a3:fd:
b8:8b:c4:f1:ad:de:bb:b4:38:49:d9:96:f5:b9:79:73:6b:4a:
2c:d7:8d:89:ae:d5:f1:e9:98:fe:ca:a9:43:e8:e4:d0:4d:dc:
a2:ad:ba:f9:d8:ac:4e:fd:41:d9:7e:40:ed:2b:81:62:d9:19:
ef:5f:57:a3:f5:ce:21:df:0c:16:3f:db:20:62:ec:d2:fa:99:
ad:70:3c:fa:60:61:e3:22:55:53:58:6d:18:e8:3e:25:65:b1:
e0:cf:b0:a6:89:d5:a4:30:14:ac:14:ed:64:fa:f8:f1:30:1f:
35:a6:c3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:45 2025 by rpki-client