Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/ew4JvEuIb41pAzdqA5PHLHCWOeg.roa
File: ew4JvEuIb41pAzdqA5PHLHCWOeg.roa (raw, json)
Hash identifier: d6qvykxjrLPKzejipIMe89I676tMnvESpXdpSITmErc=
Subject key identifier: 7B:0E:09:BC:4B:88:6F:8D:69:03:37:6A:03:93:C7:2C:70:96:39:E8
Certificate issuer: /CN=65282bf52bfb80f1106b3c0ecdfa1a5433305086
Certificate serial: 019571F645114363D09730955A33E90F3780
Authority key identifier: 65:28:2B:F5:2B:FB:80:F1:10:6B:3C:0E:CD:FA:1A:54:33:30:50:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/ew4JvEuIb41pAzdqA5PHLHCWOeg.roa
Signing time: Fri 07 Mar 2025 18:55:19 +0000
ROA not before: Fri 07 Mar 2025 18:55:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196864
IP address blocks: 193.93.168.0/22 maxlen: 22
2001:67c:1908::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 12 Mar 2025 19:59:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:71:f6:45:11:43:63:d0:97:30:95:5a:33:e9:0f:37:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65282bf52bfb80f1106b3c0ecdfa1a5433305086
Validity
Not Before: Mar 7 18:55:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b0e09bc4b886f8d6903376a0393c72c709639e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:83:01:47:20:32:18:0d:82:b0:a1:5b:31:0c:
43:57:c4:9d:10:4d:f7:59:9f:86:6e:16:cb:21:05:
d2:5c:c1:5d:fe:93:a2:8d:12:a4:c0:bb:9c:4a:e4:
1e:84:5d:30:46:03:35:8d:49:3c:9a:82:cb:68:aa:
c3:26:1f:36:d2:77:f0:79:91:9a:79:f4:05:af:2f:
a5:04:b3:0b:ef:02:11:f1:c4:0a:8e:d4:22:62:c7:
4f:13:58:b0:37:61:d9:4a:92:33:b9:e2:01:a9:d3:
83:f1:6b:ff:4d:d9:14:06:5d:69:3a:f7:ac:a1:75:
f6:bb:e2:6c:64:39:58:1a:39:1b:4f:ea:11:8a:17:
ca:58:69:91:fc:4c:c7:a5:95:c9:e7:53:b5:52:7a:
30:71:e9:70:a5:94:cd:59:a2:19:04:d8:de:80:a9:
0b:5c:be:bd:ce:2d:d7:67:82:92:4d:81:0a:eb:30:
44:aa:80:67:9f:7e:f3:7b:d1:99:29:64:81:c5:f9:
4a:5d:ad:55:59:81:c6:55:0f:ab:79:36:4b:53:8b:
9d:e8:8f:49:2d:16:9f:68:a6:9c:1e:26:fa:b6:de:
2c:f4:65:85:7a:27:e6:ac:74:ad:ee:cd:34:49:57:
00:1e:58:88:79:9c:92:21:67:26:d7:7b:11:73:c5:
e6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0E:09:BC:4B:88:6F:8D:69:03:37:6A:03:93:C7:2C:70:96:39:E8
X509v3 Authority Key Identifier:
keyid:65:28:2B:F5:2B:FB:80:F1:10:6B:3C:0E:CD:FA:1A:54:33:30:50:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/ew4JvEuIb41pAzdqA5PHLHCWOeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.168.0/22
IPv6:
2001:67c:1908::/48
Signature Algorithm: sha256WithRSAEncryption
71:9f:31:2d:0f:0e:0a:32:38:c1:83:e5:35:8e:16:11:64:51:
f9:0f:67:ae:f5:a5:c2:e1:e2:d2:7c:0a:27:a0:9a:3a:c9:76:
72:80:0f:0d:f8:67:7b:2f:d2:b2:9c:9f:87:3b:d6:4b:ca:2d:
c4:f6:06:fd:35:c1:b3:47:68:ba:e9:3e:6c:85:8a:1e:42:23:
6e:dc:2f:f4:87:b5:8b:35:23:5a:d6:b6:33:14:a9:01:9e:60:
a0:70:5d:ba:72:09:d2:4e:c8:e1:57:d7:bb:33:3a:0e:c9:c2:
30:c0:c8:28:b9:03:1b:17:bd:aa:26:b9:e1:08:bb:41:04:b1:
03:fb:5c:e6:22:10:02:46:f3:a4:2e:f6:f0:63:93:a8:8a:c2:
0a:ff:7e:6d:14:be:83:a2:8c:bc:1c:59:6f:01:d1:a9:87:54:
a7:50:cf:f5:91:45:b1:a9:c5:f6:2c:79:e7:e8:b5:b5:0e:ac:
e7:9c:7d:5c:4d:3c:61:d6:27:21:6a:dc:16:97:47:a6:67:db:
da:bb:88:06:42:79:f1:63:b5:95:f4:7c:b1:44:2b:c1:ef:34:
f5:9c:d0:85:a1:e8:11:06:6b:66:36:95:cb:b7:e6:b5:22:05:
1a:cc:0c:5c:40:55:50:84:6a:0e:9e:3b:f9:1a:8f:0c:40:ac:
7b:0f:ff:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:47:02 2025 by rpki-client