Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/0gMkTFP_rN_33V4nLudBQo0oOTc.roa
File: 0gMkTFP_rN_33V4nLudBQo0oOTc.roa (raw, json)
Hash identifier: GAOIELJJHqo4xpUodzsbIERiSRL/BwRUM2OQofsADJ4=
Subject key identifier: D2:03:24:4C:53:FF:AC:DF:F7:DD:5E:27:2E:E7:41:42:8D:28:39:37
Certificate issuer: /CN=3f56231e7ef53181b630260f5739a939980bce0f
Certificate serial: 019554266F758FE48E73BF704184FA964A25
Authority key identifier: 3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/0gMkTFP_rN_33V4nLudBQo0oOTc.roa
Signing time: Sat 01 Mar 2025 23:59:19 +0000
ROA not before: Sat 01 Mar 2025 23:59:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201150
IP address blocks: 193.106.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Mar 2025 14:21:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:54:26:6f:75:8f:e4:8e:73:bf:70:41:84:fa:96:4a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f56231e7ef53181b630260f5739a939980bce0f
Validity
Not Before: Mar 1 23:59:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d203244c53ffacdff7dd5e272ee741428d283937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:46:cc:d4:47:0a:23:9c:7c:34:77:92:36:1e:
e2:f4:57:b0:cc:e8:c9:b4:50:db:b0:8e:4b:10:3e:
47:d1:e8:d6:89:12:49:70:99:f4:7f:5a:b3:8e:a8:
33:67:f7:27:88:02:67:8e:96:3d:38:33:03:39:b5:
c9:9c:be:55:71:1a:94:ff:b1:59:a2:b9:2e:a4:8f:
54:c1:a2:e9:a5:c7:f2:e2:e5:13:16:9d:cd:a2:6e:
d3:d9:50:e2:b8:69:f8:38:71:c1:1a:94:ba:2f:f3:
09:d8:60:01:37:73:97:6f:c3:43:9c:f2:2a:a7:ee:
de:c0:ca:1c:75:7a:53:7e:92:6c:06:f6:ca:ac:50:
90:91:29:6b:0c:74:7c:d5:b7:de:29:d6:89:40:e7:
68:ab:10:d4:0e:d4:5a:94:7b:4e:c3:fb:a8:bb:6d:
2b:bd:2b:29:01:59:66:3a:c3:02:57:be:a6:f0:c1:
fe:69:06:3d:90:61:ed:ca:cc:29:2d:c0:20:2b:97:
90:b9:3b:40:ef:d2:56:62:9f:87:05:95:1a:9e:8e:
16:36:ae:58:04:62:2f:db:48:56:8a:6c:73:d7:d5:
23:e6:7d:28:29:72:99:d6:30:9b:57:73:6a:03:64:
c5:e7:49:8b:d3:51:e6:58:ea:59:f4:48:65:bc:53:
c8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:03:24:4C:53:FF:AC:DF:F7:DD:5E:27:2E:E7:41:42:8D:28:39:37
X509v3 Authority Key Identifier:
keyid:3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/0gMkTFP_rN_33V4nLudBQo0oOTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.191.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:34:b7:45:cc:a4:39:92:fc:aa:fe:88:6a:05:9d:af:93:86:
f5:88:76:b9:39:66:e9:e3:ed:53:5a:4c:1c:12:f5:98:9b:92:
46:8d:33:ef:1b:f2:30:8d:ff:30:5d:d0:8b:19:ae:0f:9b:a4:
db:a1:ef:96:85:ab:f7:57:a1:0d:ac:0b:9c:4f:2c:57:8b:63:
75:8e:9a:e1:ac:c8:e7:b4:b0:d1:09:13:e9:47:2a:4a:ff:8c:
dd:56:94:4c:18:fc:f6:6b:19:02:8e:c5:b9:35:d3:c0:36:5d:
ac:a6:ac:c9:39:d6:dd:fd:ee:da:27:e3:43:70:e9:45:34:91:
b5:77:61:3b:ef:33:2b:11:d0:ae:3c:f2:79:9f:e7:a0:3b:7b:
87:ca:04:00:2e:d9:cb:f4:69:31:be:9a:fb:b6:be:7a:31:6c:
0a:b5:7d:e3:1d:f1:b4:6e:29:60:e4:bb:d7:74:60:f1:65:af:
4d:db:8b:e1:84:0c:44:ba:26:51:de:f0:68:d8:d6:e5:57:ff:
12:36:0b:2f:bb:a4:c8:1e:5e:ee:89:69:b7:61:09:a1:59:aa:
b9:e4:4f:21:e4:06:70:e1:30:38:cc:ad:04:41:6a:57:32:11:
f9:6d:a8:61:08:c2:9d:ff:0c:61:8e:25:51:8a:eb:97:60:55:
99:0e:64:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:46:33 2025 by rpki-client