Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/Tje5P2652sgPDtEbF-VZWo3Fj40.roa
File: Tje5P2652sgPDtEbF-VZWo3Fj40.roa (raw, json)
Hash identifier: 5c8bPnGmal4GcZKUALZdSDRIphFPVRiS1wnlK+Q6chE=
Subject key identifier: 4E:37:B9:3F:6E:B9:DA:C8:0F:0E:D1:1B:17:E5:59:5A:8D:C5:8F:8D
Certificate issuer: /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial: 0196F8B37E0F782D8933FEE20130A261FDD1
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/Tje5P2652sgPDtEbF-VZWo3Fj40.roa
Signing time: Thu 22 May 2025 15:53:54 +0000
ROA not before: Thu 22 May 2025 15:53:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8391
IP address blocks: 195.138.54.0/24 maxlen: 24
195.253.0.0/16 maxlen: 24
195.253.6.0/24 maxlen: 24
195.253.96.0/19 maxlen: 24
2a01:5b0::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 08:55:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f8:b3:7e:0f:78:2d:89:33:fe:e2:01:30:a2:61:fd:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Validity
Not Before: May 22 15:53:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e37b93f6eb9dac80f0ed11b17e5595a8dc58f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fd:04:e5:16:b4:cf:4b:bb:8e:25:b8:b9:d9:
69:1c:3e:84:aa:f2:a0:e9:7a:88:38:d1:b2:96:eb:
13:0b:08:9c:b9:18:c0:8b:b1:ab:08:03:ad:52:16:
dc:2a:1a:8f:c0:65:5b:7b:86:68:bd:78:93:38:66:
6d:3b:58:40:13:2b:04:90:5f:80:9f:bb:10:18:e6:
7e:4c:1b:a2:48:5c:97:1b:9f:39:d0:8e:f4:db:5a:
9e:a7:53:78:03:51:29:8f:19:75:aa:c7:3c:16:fc:
30:8d:92:39:9a:17:86:0d:7d:bb:c1:ae:11:1e:b9:
d5:c5:8b:d1:84:05:c2:05:c0:82:de:38:0a:86:d5:
00:59:d4:c7:78:ef:4d:c9:7d:18:3c:e2:35:99:4f:
94:09:48:14:45:41:f6:29:a0:e8:c6:4f:4c:42:fe:
41:0a:ee:21:94:c7:ed:f8:1a:ad:81:ae:84:e5:5e:
28:a0:74:b4:38:2a:d5:9f:35:67:ce:c7:a5:2d:56:
25:6b:b9:52:0b:c0:df:5f:7b:7a:7d:db:d9:b0:27:
60:54:c4:3e:b9:ec:44:8f:dc:2f:87:a2:85:b4:79:
65:f4:72:d4:f0:04:51:c8:91:dc:d1:14:8b:01:c4:
ad:8b:c6:1e:49:84:98:7c:6a:ba:cf:ce:6b:7a:19:
38:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:37:B9:3F:6E:B9:DA:C8:0F:0E:D1:1B:17:E5:59:5A:8D:C5:8F:8D
X509v3 Authority Key Identifier:
keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/Tje5P2652sgPDtEbF-VZWo3Fj40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.54.0/24
195.253.0.0/16
IPv6:
2a01:5b0::/32
Signature Algorithm: sha256WithRSAEncryption
0f:02:9b:3e:d0:6c:84:f3:53:9d:65:15:dc:c2:bd:12:e7:88:
23:fc:14:2c:9f:d8:35:9f:77:65:63:69:f1:d5:18:16:7b:4b:
22:9a:f2:67:d0:d9:96:90:44:eb:a2:21:cb:c2:85:75:94:30:
65:f1:c0:7a:7b:2e:1d:69:6a:8d:fb:78:06:14:ab:8c:b9:2f:
99:a4:de:1d:f0:4d:82:c8:5c:1b:bb:f8:87:01:f2:5a:a7:f4:
f7:5d:e1:ef:6e:93:47:09:61:c8:cf:06:80:a0:62:71:58:eb:
50:f0:4a:cb:b2:97:65:b0:8f:6f:a9:d1:dd:a1:5b:45:d1:10:
ae:3c:dd:8f:24:e8:07:49:ef:22:db:a4:25:21:fc:7e:7b:b5:
66:ae:e4:fe:ed:ed:68:27:69:0b:1d:a4:bd:fe:77:87:a5:57:
59:0b:6b:c2:f0:2e:ef:80:e2:1d:0d:81:23:97:d8:da:ef:88:
06:99:84:85:14:b0:09:ff:43:f2:2c:8c:4f:5b:e2:2b:d9:a9:
07:bd:90:a0:a5:21:70:c0:cd:cb:66:84:81:b0:bc:6c:bc:59:
8d:c9:8b:00:b7:17:39:3f:c2:68:36:90:fd:42:cd:e5:e3:a1:
84:ac:10:48:72:76:52:87:c3:77:be:ad:6e:e6:dc:60:97:d1:
62:a9:17:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:04:59 2025 by rpki-client