Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/EfbJJRlLjjayxmM7vJL1XuBScPs.roa
File: EfbJJRlLjjayxmM7vJL1XuBScPs.roa (raw, json)
Hash identifier: FH2F6rRtsm/A5YSvRMiZuqUFtpsauss9LsUyVdeb9aA=
Subject key identifier: 11:F6:C9:25:19:4B:8E:36:B2:C6:63:3B:BC:92:F5:5E:E0:52:70:FB
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 01956589BBC7B1BADC49F2D3ADB730A882BC
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/EfbJJRlLjjayxmM7vJL1XuBScPs.roa
Signing time: Wed 05 Mar 2025 09:01:20 +0000
ROA not before: Wed 05 Mar 2025 09:01:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8737
IP address blocks: 194.120.224.0/22 maxlen: 23
194.120.224.0/23 maxlen: 23
194.120.226.0/23 maxlen: 23
194.120.228.0/23 maxlen: 23
194.120.250.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 19 Mar 2025 08:55:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:65:89:bb:c7:b1:ba:dc:49:f2:d3:ad:b7:30:a8:82:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Mar 5 09:01:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11f6c925194b8e36b2c6633bbc92f55ee05270fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:13:cb:09:bb:fd:81:f9:8d:44:1e:10:95:6e:
44:90:58:fb:2d:b0:a0:a3:3c:f8:84:5d:3d:48:52:
db:71:43:7a:76:48:72:2c:61:be:b7:3d:26:fb:bb:
98:dc:66:4d:0b:d0:3a:76:2c:26:36:76:34:e6:41:
0a:43:1e:e6:0f:22:6c:db:39:04:c4:95:09:40:6a:
de:e0:66:e3:df:bd:4c:51:aa:da:8b:0d:8d:c1:ac:
e2:4c:f6:5c:51:18:77:86:b5:13:4d:ac:15:ab:13:
83:93:b4:99:a5:26:dc:4b:a3:1d:3f:2b:1d:f2:f7:
3b:d4:d3:0c:9b:f3:e2:ed:d3:21:82:6e:fd:27:10:
06:37:eb:3d:fb:75:5e:2a:af:d5:1b:8a:d0:79:54:
38:20:da:47:98:49:11:15:0a:1d:bc:9b:5b:7c:ce:
7b:a8:6d:f2:d0:0b:05:7e:a4:07:d1:37:98:c6:6b:
46:e6:79:47:92:f7:e0:31:ef:ba:75:e9:35:e3:aa:
9a:f0:f4:75:9b:27:cc:ed:cd:13:2f:cf:70:95:4c:
4f:21:b9:be:6e:44:bc:6d:f8:f4:d7:9c:c5:8a:af:
22:75:ec:3c:37:7f:3e:22:78:fa:f8:de:ca:ae:1d:
20:14:4d:0f:e9:d8:66:0b:04:0f:21:5c:29:e2:ba:
c8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F6:C9:25:19:4B:8E:36:B2:C6:63:3B:BC:92:F5:5E:E0:52:70:FB
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/EfbJJRlLjjayxmM7vJL1XuBScPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.120.224.0-194.120.229.255
194.120.250.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:01:48:88:9c:c6:4c:65:cb:88:e7:36:50:db:a6:b1:88:6d:
90:5e:54:ec:4b:04:36:38:9c:cf:af:43:6a:fa:d8:8d:1e:85:
a9:47:2f:4a:99:f3:16:1e:44:7c:4a:60:eb:ac:53:b6:1e:3f:
7e:1a:d9:8f:54:28:1b:6b:e0:dc:97:7a:4c:73:ae:9e:59:ca:
9d:74:ea:b4:ec:d5:68:4e:ea:f1:b1:53:7e:97:b9:f1:47:ef:
39:b8:6e:e7:07:35:30:e2:a0:47:2f:60:42:02:86:c6:30:5e:
30:bc:13:97:91:aa:65:82:b9:dc:3d:54:09:49:51:c1:c1:d2:
d2:a6:3f:eb:a2:75:bf:79:26:cc:99:b6:0d:43:32:d7:cd:32:
1f:40:32:5e:e0:6f:19:9f:ef:5f:27:ff:00:0e:6d:17:8a:14:
ed:92:6c:31:e6:9f:4a:00:88:4b:aa:cf:19:51:06:8f:9e:88:
cf:f7:21:b6:0b:22:17:75:5f:76:27:e5:92:d2:ab:69:c3:97:
69:77:1c:f0:cb:cf:b8:45:11:ab:56:46:77:39:76:a5:40:c4:
d6:05:ea:00:a8:47:28:cf:2e:c1:de:2f:68:53:aa:3f:ab:04:
03:54:15:bd:da:3f:08:ac:32:5a:70:c7:91:4d:13:ee:a2:c8:
b9:b5:06:fb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:10:32 2025 by rpki-client