Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/CIT50btXdKliRyJlH2hzSgG5Rjs.roa
File: CIT50btXdKliRyJlH2hzSgG5Rjs.roa (raw, json)
Hash identifier: 8QJh0JtocHcTjVZHSedOki3+eOEBjxhu9K2rcJ7xTDY=
Subject key identifier: 08:84:F9:D1:BB:57:74:A9:62:47:22:65:1F:68:73:4A:01:B9:46:3B
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0194FA007A37B087F73E7AFC388D3EBAE04A
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/CIT50btXdKliRyJlH2hzSgG5Rjs.roa
Signing time: Wed 12 Feb 2025 11:52:02 +0000
ROA not before: Wed 12 Feb 2025 11:52:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137897
IP address blocks: 62.171.240.0/22 maxlen: 24
213.18.196.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 14 Feb 2025 14:29:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fa:00:7a:37:b0:87:f7:3e:7a:fc:38:8d:3e:ba:e0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Feb 12 11:52:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0884f9d1bb5774a9624722651f68734a01b9463b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a2:85:49:50:51:f1:15:66:bc:c0:b0:00:a4:
49:79:01:b3:66:f4:35:23:be:74:a7:4d:fa:1b:2d:
33:4c:67:60:90:e5:90:6f:dd:30:d8:2d:52:3a:52:
97:b8:33:82:cb:1c:16:60:54:98:04:6e:59:85:38:
5b:b7:28:18:8c:ac:08:6b:7a:96:01:fb:b2:3c:53:
f9:0e:a5:1f:28:e2:a0:3c:8f:c2:38:c1:e8:5f:a5:
8b:6c:65:54:cf:f7:01:35:c1:82:59:de:a6:63:2e:
82:09:08:a2:f2:7f:aa:c4:a7:a8:21:05:2d:fc:4e:
16:2a:1e:ea:99:09:c5:1f:cc:a6:40:14:8d:1d:02:
2a:46:13:26:3d:46:56:79:da:c7:4c:df:ce:67:54:
fc:2f:4a:36:bd:3a:07:dd:b8:b5:ab:62:86:61:a0:
eb:74:be:3b:2e:12:26:82:8c:1c:65:4a:7f:27:22:
9f:ac:39:b1:4c:76:c2:a6:7c:60:a2:20:2d:ff:3f:
7d:ec:08:97:14:0f:e2:e0:e4:17:32:df:a4:2a:70:
17:1c:6b:88:04:2a:82:95:66:cc:c3:d6:b3:e7:8d:
a5:45:c3:4d:e9:1c:81:91:38:aa:3a:0e:70:85:98:
64:3f:f8:2d:ad:b0:85:11:6c:f2:92:93:8c:4c:97:
c8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:84:F9:D1:BB:57:74:A9:62:47:22:65:1F:68:73:4A:01:B9:46:3B
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/CIT50btXdKliRyJlH2hzSgG5Rjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.171.240.0/22
213.18.196.0/22
Signature Algorithm: sha256WithRSAEncryption
44:cd:49:75:aa:69:04:7d:95:38:30:6c:0c:d1:db:20:91:ad:
18:8a:cd:4e:8e:11:a1:4e:6d:70:77:c2:ec:d1:fc:3c:a3:8e:
35:d0:3a:1c:f3:79:d8:ed:85:d1:ec:36:20:03:11:3e:7d:45:
2f:25:be:65:de:c9:4b:4b:8f:80:7e:72:6a:9e:01:bd:09:74:
3c:bb:21:0f:14:64:ca:fe:36:0c:d0:80:69:e1:6f:e0:ba:12:
42:56:fd:11:dc:d5:0a:14:63:8c:03:ea:a0:80:2c:ec:00:94:
3b:cb:7f:a7:69:70:76:36:bd:1c:73:c8:74:89:2c:28:96:ee:
db:49:7e:35:24:cd:28:92:9b:ce:30:a9:bd:6c:dd:3a:d1:60:
50:3e:87:4d:fa:58:ab:44:45:ed:ab:6c:c1:6a:d2:c4:7b:4f:
42:cf:39:39:89:1a:98:25:dc:78:9e:95:49:c6:b0:4d:29:67:
e0:d9:bb:79:40:76:3b:bb:8a:a5:5c:d6:9f:4d:2c:26:9e:9c:
a2:2a:f7:6d:ad:66:04:b2:81:cd:75:61:af:7d:2b:61:84:b2:
b3:80:ef:e4:a2:41:af:e8:31:c5:cb:f6:0f:a8:3e:93:0b:79:
ba:7c:91:e0:6f:19:ac:f0:97:17:6f:83:d2:37:3e:87:5a:a2:
aa:07:1c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:10:09 2025 by rpki-client