Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/u5YmdIqOh1QMSxXcLf3-3Kk21Tw.roa
File: u5YmdIqOh1QMSxXcLf3-3Kk21Tw.roa (raw, json)
Hash identifier: Omhe9k1TFHAHycfmZUBvYvYMAzauAHon5PcpsG0tlvk=
Subject key identifier: BB:96:26:74:8A:8E:87:54:0C:4B:15:DC:2D:FD:FE:DC:A9:36:D5:3C
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 018CC8DEEA47A90A31574363DBCB69A9D584
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/u5YmdIqOh1QMSxXcLf3-3Kk21Tw.roa
Signing time: Tue 02 Jan 2024 06:31:41 +0000
ROA not before: Tue 02 Jan 2024 06:31:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44006
IP address blocks: 194.28.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:ea:47:a9:0a:31:57:43:63:db:cb:69:a9:d5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Jan 2 06:31:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb9626748a8e87540c4b15dc2dfdfedca936d53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:95:e3:36:66:b2:fe:00:a2:21:26:be:4f:51:
2b:fb:e4:38:57:4a:cc:44:3a:3d:2a:25:cc:c2:61:
b2:22:44:57:64:23:3f:43:77:f3:c2:c7:cd:75:9d:
60:a4:d7:29:ca:28:4e:32:47:b2:f9:47:80:3d:c3:
d2:74:9a:6f:e6:f3:65:66:c3:50:21:6c:5d:23:7c:
88:e7:09:1c:2e:3a:39:23:f7:ed:82:eb:97:83:b0:
73:84:91:ec:80:de:23:bf:06:97:93:be:c5:8c:20:
ec:62:8c:81:88:ac:a3:7c:f3:63:e5:0c:e1:57:a7:
31:57:e8:ad:69:7e:b4:be:c6:db:9c:be:02:f5:3e:
99:94:05:76:f8:eb:a1:9a:51:80:92:96:6a:9b:99:
03:6e:d9:50:1e:97:63:bb:21:58:cb:13:f7:0c:93:
e7:4c:6a:b5:7e:fa:97:14:b9:b2:d6:5a:1e:4b:db:
81:8c:3c:e2:6b:6a:9b:bb:fd:66:f2:e6:30:06:71:
bd:e4:2a:f5:fa:77:f5:e1:ac:70:14:79:29:99:68:
48:b0:c8:c3:b3:5b:3a:75:61:c3:2e:5c:ac:48:28:
da:99:39:76:c0:67:aa:de:a2:d3:43:c7:b1:3f:81:
a8:39:7c:13:91:20:fb:5a:de:6e:27:57:47:cb:31:
2c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:96:26:74:8A:8E:87:54:0C:4B:15:DC:2D:FD:FE:DC:A9:36:D5:3C
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/u5YmdIqOh1QMSxXcLf3-3Kk21Tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.100.0/24
Signature Algorithm: sha256WithRSAEncryption
00:38:9e:a0:c6:90:b6:d3:ff:e0:f4:d4:1b:56:36:30:16:a9:
7f:1a:d3:65:21:41:da:fb:02:2d:95:bd:63:1d:84:e3:be:fc:
69:c2:f3:d1:ba:6b:43:02:da:cb:cf:da:60:32:1e:73:5d:fc:
7d:87:f8:4d:24:58:1c:dc:33:08:3b:0d:2a:29:11:13:d6:72:
14:24:8d:51:36:f1:84:d5:1b:69:8e:fe:88:7f:6a:30:bb:7e:
94:d0:10:33:bb:56:cf:48:44:d3:cb:2e:c0:c0:46:bf:d5:9d:
80:6b:ae:8a:e9:d1:d8:fd:37:b1:10:7b:fc:7f:06:a3:42:cf:
2d:04:f0:a4:1d:6e:3f:63:de:cc:28:f3:8c:8c:93:35:8b:53:
11:d6:23:a8:fd:91:fe:2b:1d:e4:c1:f5:7c:03:f2:c1:ae:fe:
a0:78:7a:cf:cc:a2:d3:82:29:85:26:8e:f0:cc:ea:69:91:b4:
e0:35:0f:8e:22:58:9f:3f:d3:03:b4:d2:14:2c:28:7f:8a:f2:
6a:06:20:d3:6d:75:6d:3b:1d:4d:c6:67:5b:c0:ac:d5:f5:b7:
34:31:15:c0:a6:ca:d0:0a:85:c4:f4:4d:93:02:43:39:58:dd:
36:9c:f6:73:f2:e8:f1:c3:96:1e:ac:0c:66:25:6f:9a:e7:d7:
30:eb:63:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:05:07 2025 by rpki-client