Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/CFwyoQUa5QBfsP0vedJyd4ituEo.roa
File: CFwyoQUa5QBfsP0vedJyd4ituEo.roa (raw, json)
Hash identifier: TMQLO0JWA5fCjyFgcvBsSF3sYZGc2jqGef1zotecvl4=
Subject key identifier: 08:5C:32:A1:05:1A:E5:00:5F:B0:FD:2F:79:D2:72:77:88:AD:B8:4A
Certificate issuer: /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial: 01958500F26C461D188B9C2E42E872C925F2
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/CFwyoQUa5QBfsP0vedJyd4ituEo.roa
Signing time: Tue 11 Mar 2025 11:39:46 +0000
ROA not before: Tue 11 Mar 2025 11:39:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211448
IP address blocks: 94.176.160.0/23 maxlen: 23
94.176.160.0/24 maxlen: 24
94.176.161.0/24 maxlen: 24
193.30.126.0/24 maxlen: 24
193.30.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 15:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:00:f2:6c:46:1d:18:8b:9c:2e:42:e8:72:c9:25:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Validity
Not Before: Mar 11 11:39:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=085c32a1051ae5005fb0fd2f79d2727788adb84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:97:40:12:04:02:70:77:e2:24:0f:9c:18:99:
72:e2:b0:95:9c:f7:02:74:1d:ed:fb:cd:18:56:6c:
48:84:00:c0:a7:f3:d2:38:3f:23:22:4a:fb:7d:b3:
9e:ea:cf:bf:6b:4e:4e:d8:71:aa:bf:60:4f:fd:42:
07:46:75:fc:c9:29:a9:60:59:f8:08:b5:7c:52:f9:
25:f8:75:e1:3a:4c:60:b9:72:46:6e:f5:47:0f:5d:
86:5f:e6:4f:56:90:fc:08:22:c7:b0:13:ba:9f:1f:
4d:36:c4:54:88:ac:55:a7:cf:28:fa:25:d1:ff:84:
79:c0:db:d9:28:c9:0c:2d:57:86:61:40:79:a9:48:
cf:33:cb:f5:8a:95:74:10:1d:ff:9f:a1:8f:9a:8a:
c9:6b:b1:cb:f8:0f:79:e9:c9:83:81:4e:d9:b5:67:
f4:08:76:0f:28:b8:cd:72:2a:e7:8b:44:59:2e:7a:
04:2c:b1:1f:ad:7f:ed:79:2a:eb:e4:31:ca:13:67:
fb:69:3d:fa:a8:19:5f:07:f2:71:34:94:6f:fa:05:
26:92:ef:08:1d:c2:b0:01:62:6a:31:f6:35:c3:45:
89:69:79:b4:63:76:b3:b6:e1:14:f1:80:3e:c4:d0:
ac:2d:47:76:c0:72:3c:b0:0f:e6:eb:2b:18:ce:32:
3d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5C:32:A1:05:1A:E5:00:5F:B0:FD:2F:79:D2:72:77:88:AD:B8:4A
X509v3 Authority Key Identifier:
keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/CFwyoQUa5QBfsP0vedJyd4ituEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.160.0/23
193.30.126.0/23
Signature Algorithm: sha256WithRSAEncryption
58:98:bb:ed:98:e9:f2:9f:3c:c5:ff:80:f3:ef:25:18:8e:ff:
95:b7:af:90:4d:eb:12:71:c1:73:fb:b6:f1:c4:0c:22:46:0d:
8b:f7:55:95:7b:9c:a0:7e:68:30:70:d6:c8:5b:5f:3a:c6:08:
93:51:bf:03:8b:a1:0f:8f:32:9f:c3:4e:18:7e:cc:af:3e:52:
ca:c5:b6:0c:c0:72:e8:68:8d:4e:f2:30:4d:97:c4:d9:37:4f:
64:ae:2c:32:c5:01:5e:09:ab:a0:d8:b4:d0:89:54:86:28:90:
1f:f1:89:46:b3:2c:89:a2:ee:59:24:d6:05:d5:c7:33:88:98:
49:8e:1e:35:67:13:01:4c:dc:51:50:14:df:ea:31:89:eb:3d:
d6:3f:1a:e5:03:17:6e:bc:74:fa:a8:9f:6b:51:1c:7d:7a:9e:
50:ea:1c:94:45:6d:65:30:97:ff:0e:af:e8:14:f6:66:08:84:
27:d6:ed:6c:bb:1c:54:3c:0f:8e:6b:8b:12:26:21:df:97:7a:
75:be:cf:a7:af:88:c3:5e:c5:54:11:fa:30:80:6c:9e:5d:2e:
c2:f5:27:95:4e:2e:d8:98:0d:1f:63:1f:b9:a7:fe:ca:fd:63:
f6:66:eb:05:07:3a:e4:a2:c5:17:7c:f4:fb:42:7b:4e:6e:53:
fc:d2:00:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:55:16 2025 by rpki-client