Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/0RUOONXtK-xnpFxCmylvITWTv1A.roa
File: 0RUOONXtK-xnpFxCmylvITWTv1A.roa (raw, json)
Hash identifier: juC085Z7eJPIlR1nHHnYnvsB/lwXA6XSQb/r2/mA2Fo=
Subject key identifier: D1:15:0E:38:D5:ED:2B:EC:67:A4:5C:42:9B:29:6F:21:35:93:BF:50
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01942823D45170958DADA6D21626BA22B840
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/0RUOONXtK-xnpFxCmylvITWTv1A.roa
Signing time: Thu 02 Jan 2025 17:50:24 +0000
ROA not before: Thu 02 Jan 2025 17:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49011
IP address blocks: 95.174.160.0/19 maxlen: 19
178.19.0.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 13 Feb 2025 13:34:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:d4:51:70:95:8d:ad:a6:d2:16:26:ba:22:b8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 17:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1150e38d5ed2bec67a45c429b296f213593bf50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d6:6a:79:6b:17:bb:26:0c:22:86:db:1d:fc:
fc:8c:be:9e:46:5e:5e:12:42:ea:1f:1a:55:b9:25:
cc:3d:c4:97:bd:ab:4d:de:d5:43:fc:1c:5a:71:bb:
9b:51:64:85:d3:e1:d6:76:a4:85:ac:be:bb:c1:62:
57:b5:8d:3e:d6:50:be:23:d4:37:af:10:0c:8e:97:
37:81:24:2d:32:43:c3:4f:e6:1e:b0:36:80:be:dc:
39:8f:49:e5:84:6d:0f:e7:17:62:fb:1a:6c:12:ec:
df:11:61:f9:6e:9f:9b:79:50:e5:44:47:a8:18:95:
8b:9f:2d:88:4f:04:ad:d9:ad:57:fc:a6:a8:6a:36:
15:53:1e:57:59:a6:41:9c:c4:91:d4:64:aa:bd:41:
0b:0f:d7:0a:49:0b:a5:e6:8c:ba:36:7a:90:02:d6:
2d:f3:07:6a:6e:a8:8a:eb:4a:06:e0:bc:8b:6b:47:
6d:77:f8:9d:ba:c4:cf:40:70:b6:b6:3e:7c:0b:46:
7e:89:a1:97:b7:6a:50:36:38:1d:2c:66:9b:8f:65:
2a:3a:60:4b:9a:ce:29:1d:a0:55:81:64:f5:e3:61:
36:81:a5:bd:c9:a8:ee:17:b2:a1:75:d4:3b:f0:63:
de:74:c1:7c:c2:d1:d9:a4:c2:cd:9d:08:02:b7:54:
a9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:15:0E:38:D5:ED:2B:EC:67:A4:5C:42:9B:29:6F:21:35:93:BF:50
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/0RUOONXtK-xnpFxCmylvITWTv1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.174.160.0/19
178.19.0.0/20
Signature Algorithm: sha256WithRSAEncryption
5b:9d:2f:87:38:78:0d:da:77:44:4a:40:4a:a7:6b:c6:54:38:
0b:6c:8b:9e:5c:a7:38:7a:4e:e0:e0:18:bb:b3:9d:12:d7:91:
c0:65:fc:38:c9:dc:d0:f6:b1:49:8b:80:f4:84:e7:76:3b:03:
99:60:d8:f0:93:26:cd:34:84:b5:01:71:50:16:bb:8d:48:8f:
f0:56:00:69:49:f5:a0:26:90:60:04:fc:0a:81:91:eb:b6:60:
7e:df:e8:db:f0:a4:11:c7:ff:7a:bd:a4:37:c2:12:76:0a:e2:
ae:53:60:39:46:65:08:2e:96:68:0a:f5:28:e5:98:a6:69:1c:
33:3b:6d:ee:15:ce:e1:b0:8f:45:a9:83:2c:b7:d4:43:d6:b4:
b6:54:72:8b:35:23:36:4b:c4:b9:82:ee:66:74:88:b4:7d:2a:
c1:00:9d:8a:e3:7a:9b:7a:59:1b:59:0a:93:8d:f4:10:7f:84:
0a:f9:57:5c:ad:5e:d4:a0:89:2f:f1:1f:a9:33:55:05:c8:7d:
75:ed:f7:6c:57:0a:f7:43:5a:1c:f7:03:37:ad:b1:fc:3e:c8:
4d:83:5c:85:e3:a0:b7:c7:9e:bf:7f:45:16:60:b0:14:1a:73:
bf:5a:7c:a3:a7:04:f4:63:8d:a5:af:04:76:e4:7c:08:94:ea:
6f:ea:db:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:40:22 2025 by rpki-client