Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/7tz1DtxVV461VJFXbrRXU97cHvY.roa
File: 7tz1DtxVV461VJFXbrRXU97cHvY.roa (raw, json)
Hash identifier: 1Pm+UUb2gAbv0fLZBYs5AP/WVnwmVGaN4bWhLQE4/6s=
Subject key identifier: EE:DC:F5:0E:DC:55:57:8E:B5:54:91:57:6E:B4:57:53:DE:DC:1E:F6
Certificate issuer: /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial: 0194221FB005C85AE110642B89E7C0E2996B
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/7tz1DtxVV461VJFXbrRXU97cHvY.roa
Signing time: Wed 01 Jan 2025 13:48:09 +0000
ROA not before: Wed 01 Jan 2025 13:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215071
IP address blocks: 194.104.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Mar 2025 06:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b0:05:c8:5a:e1:10:64:2b:89:e7:c0:e2:99:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Validity
Not Before: Jan 1 13:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eedcf50edc55578eb55491576eb45753dedc1ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5d:57:76:92:c6:26:cc:56:6a:a9:57:12:01:
07:c1:14:06:1f:48:29:f7:75:0d:ff:1e:5d:0e:10:
4c:bc:c4:fa:6c:6a:99:e0:46:23:bf:78:6c:e7:07:
b3:7c:68:db:b2:1e:fd:98:95:68:ce:78:d4:54:1e:
0a:b8:43:bc:d6:6d:a6:b7:2e:91:7d:70:b5:29:32:
45:43:e2:b0:08:06:ed:3e:e1:c7:1a:e1:2e:ae:c6:
f1:20:6a:55:3e:09:c7:a4:dc:48:da:10:16:81:da:
96:1d:66:c8:5e:70:cc:5d:3f:09:33:1f:4f:42:68:
9a:83:49:8f:7d:92:a2:a8:2b:5b:09:80:76:61:93:
c3:d1:c1:3d:c4:a5:66:c0:9c:c2:e5:6a:22:69:40:
c3:19:7e:63:17:a7:ac:e7:e5:2d:77:df:db:4b:10:
0d:a9:30:94:dc:24:5b:f7:89:36:85:39:11:39:f9:
bf:f2:ad:27:11:1b:98:56:6c:da:af:48:5c:16:d1:
83:52:6a:67:b2:cb:f6:ef:e2:d2:a9:58:2b:67:fb:
03:da:ad:83:04:7d:de:c2:c3:b6:38:40:8f:c5:db:
1b:eb:4b:4e:6b:f9:b2:ba:e2:7c:55:4c:6c:94:e6:
3a:43:36:14:d1:b7:30:9a:cc:c3:a5:a2:12:a1:a1:
8c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DC:F5:0E:DC:55:57:8E:B5:54:91:57:6E:B4:57:53:DE:DC:1E:F6
X509v3 Authority Key Identifier:
keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/7tz1DtxVV461VJFXbrRXU97cHvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.138.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:f5:65:d6:70:eb:d3:d6:a7:3f:14:23:fc:1e:33:6e:81:97:
52:a2:55:33:74:ff:47:a7:9c:1d:57:9c:5d:45:05:45:44:c6:
be:06:a8:dc:84:93:3e:81:89:c8:c0:ee:dc:6f:23:15:cb:5a:
e1:a1:c5:0d:57:ba:7e:f0:f3:b6:8d:b7:f2:a2:37:53:75:e7:
6f:9e:30:05:17:f9:3a:90:e7:3c:f8:9e:c0:bc:fb:84:b1:9f:
2f:6a:c6:c1:da:ec:5b:c3:5d:13:5c:c6:2d:bd:e1:12:2f:c9:
35:a6:94:3d:a3:7e:b7:47:cf:77:79:7f:49:fd:70:00:46:a3:
ab:76:80:5b:b8:2b:87:5c:38:02:14:fa:42:3f:e7:49:63:bd:
42:93:27:b9:06:f0:6b:04:99:b5:27:a9:9b:5f:ce:19:b8:85:
9c:da:1a:31:0f:2f:b1:e2:b9:87:e7:bb:01:58:92:05:93:aa:
7d:6d:21:6f:13:56:68:39:d8:a6:88:57:95:a9:34:87:93:b6:
8c:aa:d0:96:f8:7a:13:dc:c8:cb:ad:70:3c:40:ec:05:9b:4c:
29:e7:10:2c:15:c7:d9:9b:26:9c:fb:6b:82:f2:6e:c9:b6:6d:
73:9a:c2:39:48:6a:31:14:f7:f5:9b:a0:7e:e8:ea:b2:02:ca:
b1:08:b2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 10:12:30 2025 by rpki-client