Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/0KvyEEmGS7TBdB55YTJSyiR6bBc.roa
File: 0KvyEEmGS7TBdB55YTJSyiR6bBc.roa (raw, json)
Hash identifier: sICImoMvIA4SnHijQFZ8Y7H4YD2P8cvsFXrxAFIncXg=
Subject key identifier: D0:AB:F2:10:49:86:4B:B4:C1:74:1E:79:61:32:52:CA:24:7A:6C:17
Certificate issuer: /CN=7d443134dcd16ac16f6cd209fa1c7f958ca6db7e
Certificate serial: 0195B57AF84E7BAD5ED7FC74920B31A3B2EC
Authority key identifier: 7D:44:31:34:DC:D1:6A:C1:6F:6C:D2:09:FA:1C:7F:95:8C:A6:DB:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUQxNNzRasFvbNIJ-hx_lYym234.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/0KvyEEmGS7TBdB55YTJSyiR6bBc.roa
Signing time: Thu 20 Mar 2025 21:34:49 +0000
ROA not before: Thu 20 Mar 2025 21:34:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57276
IP address blocks: 195.250.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Mar 2025 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b5:7a:f8:4e:7b:ad:5e:d7:fc:74:92:0b:31:a3:b2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d443134dcd16ac16f6cd209fa1c7f958ca6db7e
Validity
Not Before: Mar 20 21:34:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0abf21049864bb4c1741e79613252ca247a6c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:92:21:e8:ec:25:b2:f0:b2:e3:13:ae:32:3c:
b8:a7:b3:47:22:cc:5d:32:c6:40:e7:55:13:23:2f:
e7:07:a4:e1:3c:e6:01:1e:46:63:27:6e:6a:4e:5b:
02:a0:08:c7:34:a5:3e:ac:72:52:ef:4d:8a:de:30:
9b:8b:e6:f8:e5:e8:70:f2:d7:7c:57:d5:40:a8:a7:
08:92:87:50:6b:ec:96:95:47:5d:7e:fe:44:9c:55:
12:c7:87:74:18:87:4d:d3:1e:e7:89:c5:7f:30:eb:
a4:e2:e8:20:65:b4:ee:0c:a7:bc:c4:92:36:24:3c:
be:0a:f1:d3:13:2d:6e:ff:7d:db:4c:7d:4e:96:61:
cf:22:74:f6:79:c5:9d:e7:e5:fb:5e:2b:c0:39:ea:
6a:ca:82:93:44:62:3d:a2:b9:58:2e:de:31:e6:ff:
fa:44:fb:37:87:e1:2d:a0:48:ce:b2:52:7f:5b:3d:
08:e8:73:2a:fc:2b:08:98:4d:68:dc:4d:8c:5f:98:
49:7f:de:58:89:16:1e:83:7f:da:b8:e3:5e:b2:78:
4d:c1:43:8a:78:84:5c:53:45:be:5b:58:8d:57:3b:
66:85:16:5a:67:1a:31:1b:bb:45:80:97:0c:7e:c6:
aa:17:5d:20:b5:a7:9a:f2:8c:29:70:02:8a:49:05:
c6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AB:F2:10:49:86:4B:B4:C1:74:1E:79:61:32:52:CA:24:7A:6C:17
X509v3 Authority Key Identifier:
keyid:7D:44:31:34:DC:D1:6A:C1:6F:6C:D2:09:FA:1C:7F:95:8C:A6:DB:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUQxNNzRasFvbNIJ-hx_lYym234.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/0KvyEEmGS7TBdB55YTJSyiR6bBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.250.19.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:29:b6:20:f2:bb:62:bb:fb:cb:89:cc:be:07:4c:14:9b:ec:
e2:8e:98:c8:fa:95:14:d2:cc:93:74:ab:d4:49:e2:b7:b7:5a:
77:35:c0:ba:90:94:82:55:0c:e3:a8:83:56:97:e0:fb:c8:ef:
d9:25:54:db:3c:a8:3c:a2:04:89:bb:29:42:a0:e5:4e:50:40:
d1:49:9d:4d:3f:42:ff:ea:f7:db:58:c0:27:0b:d6:d9:79:89:
05:38:63:a8:ba:44:06:a8:fb:68:62:6b:f2:1d:b1:36:c5:b3:
be:b1:85:3b:aa:cf:19:aa:fc:a2:b2:36:a9:ff:c0:67:54:d1:
84:2f:5d:8e:8a:7d:9a:a5:f9:44:6a:69:92:e8:73:68:27:37:
5c:33:24:61:55:73:8b:52:d4:9a:42:56:43:d0:b6:bf:2f:d4:
a7:bc:db:95:ad:4d:bb:50:ab:b2:03:13:b4:99:b4:1a:39:f1:
96:62:52:cb:8c:df:17:76:cb:96:7e:2e:9a:01:c4:42:47:31:
71:0c:89:bc:bf:c4:9e:85:18:b5:97:25:68:5a:bf:7d:66:51:
07:84:60:20:bb:b8:d5:48:79:6d:53:e3:a2:a9:c8:e6:e8:ce:
44:fe:7b:a2:2a:4b:59:0d:7a:64:b5:40:9a:bc:be:ff:d3:ca:
62:b3:22:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:26:52 2025 by rpki-client