Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/6DBR4vkfF9yIGKDiQPbGDKIDzm4.roa
File: 6DBR4vkfF9yIGKDiQPbGDKIDzm4.roa (raw, json)
Hash identifier: Z9KE1shgIugMT9Rm0J3mHcH3rDNyn7eUDBTRHKJBypE=
Subject key identifier: E8:30:51:E2:F9:1F:17:DC:88:18:A0:E2:40:F6:C6:0C:A2:03:CE:6E
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 0194C1752188A8D9ED09FFB41766696E642F
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/6DBR4vkfF9yIGKDiQPbGDKIDzm4.roa
Signing time: Sat 01 Feb 2025 12:21:06 +0000
ROA not before: Sat 01 Feb 2025 12:21:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 195.216.168.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 06 Feb 2025 17:49:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c1:75:21:88:a8:d9:ed:09:ff:b4:17:66:69:6e:64:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Feb 1 12:21:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e83051e2f91f17dc8818a0e240f6c60ca203ce6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:ec:02:ef:74:da:83:89:47:62:0c:84:04:
97:8a:10:5e:8a:74:ae:b4:97:27:f3:f8:49:7d:ac:
e4:b7:b4:57:8c:73:37:a9:11:43:bb:f4:4c:98:4e:
86:21:97:61:ad:41:05:82:a9:92:5d:f8:ab:ba:9b:
b9:b1:8f:51:b8:dc:72:4a:6e:23:35:7c:9a:1e:2a:
53:9f:53:d2:3e:fa:5b:40:0f:b4:42:44:79:ca:dc:
71:0c:cb:61:5f:0e:56:9c:7f:8f:69:92:92:95:b5:
d4:56:8c:26:72:9e:95:94:91:7a:02:3d:79:9e:86:
b2:a4:97:7b:a1:de:5f:66:81:d8:39:4e:a2:4b:03:
9e:df:c0:0f:1b:16:09:06:f0:99:0b:dc:f2:51:b3:
8e:69:e1:cf:cc:49:33:8c:e8:4e:ae:3d:1a:16:c0:
23:19:ad:9c:d9:68:50:41:64:78:30:41:53:f6:10:
8c:d5:d8:6a:a6:29:5e:92:56:a4:f0:4f:06:b4:e5:
6d:7b:ea:de:ac:99:4a:8f:86:68:2d:64:bd:04:eb:
58:0a:d7:19:67:9f:09:74:ca:c4:08:59:a4:01:b8:
6f:ca:20:38:59:09:35:14:14:4e:07:4f:d9:d3:a9:
07:88:dc:40:0b:95:52:c0:ae:fd:84:78:3d:41:9c:
f5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:30:51:E2:F9:1F:17:DC:88:18:A0:E2:40:F6:C6:0C:A2:03:CE:6E
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/6DBR4vkfF9yIGKDiQPbGDKIDzm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.168.0/21
Signature Algorithm: sha256WithRSAEncryption
94:04:db:f2:15:3b:41:d6:6f:88:6b:72:a2:f9:30:69:a0:18:
d1:69:51:86:ad:31:85:ba:a5:f0:08:fe:9b:69:a1:9a:53:33:
f6:e9:3c:00:25:78:bf:88:d4:7d:ab:d7:fc:b8:60:9b:79:18:
c5:0b:15:6b:4b:1f:83:ed:8a:db:55:60:a6:a4:bc:06:5c:e1:
af:82:19:e6:b3:d9:20:00:58:3a:1c:a3:5e:da:f6:49:dd:09:
bb:9c:8b:65:55:f1:a4:9f:24:9c:fe:4d:12:81:00:86:38:36:
ae:21:90:47:33:11:17:cf:23:bc:f9:2c:60:09:5e:d8:0a:49:
b4:a3:e4:35:a2:5a:23:c3:38:62:02:80:90:6b:83:4b:36:04:
f7:0d:ed:79:aa:e8:6e:1c:93:84:da:d3:06:82:f7:eb:0c:3e:
a6:08:53:82:c7:d4:ca:5e:c3:ab:30:2c:74:64:29:a9:4a:a4:
85:5e:e5:dd:e4:e8:e7:03:2c:94:aa:f8:b5:9d:00:63:d8:bd:
a1:c5:51:19:d8:32:c9:12:bf:e0:be:99:f2:2d:5c:ba:30:1e:
f7:73:29:51:6b:8f:33:8b:c1:fd:68:98:c0:dd:9f:63:07:46:
01:09:eb:80:b4:c3:4f:3d:84:3d:dc:ef:a5:76:da:e3:94:9a:
ff:f7:30:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:53:45 2025 by rpki-client