Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/eY2Qi3nKHKfUMWWRH-WB8m6KcZU.roa
File: eY2Qi3nKHKfUMWWRH-WB8m6KcZU.roa (raw, json)
Hash identifier: LCTH3LtLkhdP5u4ZquFFUpbW4meSGvZgEoYKkg9oE0U=
Subject key identifier: 79:8D:90:8B:79:CA:1C:A7:D4:31:65:91:1F:E5:81:F2:6E:8A:71:95
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 01951987C3FA91C88DEB1F1EF1BA35E0835F
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/eY2Qi3nKHKfUMWWRH-WB8m6KcZU.roa
Signing time: Tue 18 Feb 2025 14:48:02 +0000
ROA not before: Tue 18 Feb 2025 14:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8737
IP address blocks: 194.120.224.0/22 maxlen: 22
194.120.228.0/23 maxlen: 23
194.120.250.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 05 Mar 2025 08:32:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:87:c3:fa:91:c8:8d:eb:1f:1e:f1:ba:35:e0:83:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Feb 18 14:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=798d908b79ca1ca7d43165911fe581f26e8a7195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cd:f8:3c:f6:d0:dd:12:34:c8:d7:1c:ef:83:
a2:6e:76:48:33:0e:3a:63:6c:5e:85:97:1e:88:53:
a7:4f:ce:5d:db:b5:02:53:67:03:67:40:5d:8e:86:
ac:59:59:cf:62:d9:a4:0c:23:33:e2:a3:7a:c7:e8:
29:e0:92:78:07:80:99:cf:64:da:56:30:c3:39:17:
8b:3d:a7:84:ce:d8:6a:18:12:de:4d:7d:0c:73:47:
e7:91:7c:58:5a:5b:e9:4e:03:e4:ae:cf:12:9e:10:
10:62:fc:88:5e:9d:a7:e5:c4:e8:22:37:00:0a:1b:
d3:1d:7e:b3:24:eb:85:52:34:be:70:32:0a:47:df:
43:43:a3:e5:25:86:24:7d:6f:c2:95:e3:7b:a8:5e:
4c:b7:bd:b2:69:04:60:69:e0:c1:75:ac:09:d7:e5:
1c:40:22:ce:83:eb:36:b1:fe:c0:a4:08:9e:fb:11:
2d:d2:5f:f3:87:76:fe:42:5c:41:7f:e4:d4:7a:7b:
9b:28:1a:a6:ac:6a:86:05:d5:19:a0:4f:90:44:41:
9a:b0:01:f0:b0:c8:71:6e:bf:26:9b:83:32:0d:d4:
11:f4:2d:25:7f:ea:55:9e:1b:2e:9e:ad:84:b0:f2:
2d:7c:06:27:56:b7:5a:04:6e:e3:98:11:42:51:95:
84:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8D:90:8B:79:CA:1C:A7:D4:31:65:91:1F:E5:81:F2:6E:8A:71:95
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/eY2Qi3nKHKfUMWWRH-WB8m6KcZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.120.224.0-194.120.229.255
194.120.250.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:d9:29:54:02:de:46:08:ce:81:c0:1f:67:ff:62:73:9b:4a:
be:82:57:41:87:0b:15:2e:e7:ac:81:e0:bf:06:2d:09:df:55:
cd:07:c7:cc:98:9a:94:fe:77:17:1a:b7:61:61:81:99:a2:61:
45:6a:67:93:de:19:31:c6:54:b3:46:51:6c:bc:32:a6:fb:52:
17:4b:8b:78:fd:34:2e:19:47:4c:fe:f4:32:09:57:3f:02:98:
7d:14:37:27:7b:23:d5:5c:eb:31:74:21:d4:40:74:ed:40:8e:
23:19:29:92:b8:ed:03:c5:c7:d6:e2:f2:58:57:dc:27:2f:83:
53:7f:1b:29:7b:f9:d8:5f:e0:06:6b:c8:73:fe:96:1a:df:21:
ca:d2:7d:a1:05:f1:24:48:b3:bb:df:c1:84:34:72:85:c6:aa:
09:6e:f6:36:df:92:a8:5b:c9:5f:c1:39:79:3c:5c:f2:3d:ec:
d4:47:c4:bf:b3:e6:a1:f5:60:74:ac:07:47:6c:ad:af:a8:83:
a5:8f:21:0e:ba:67:09:57:de:59:e3:41:74:9c:c6:24:2b:79:
76:2d:27:0b:9a:ee:39:eb:17:5c:a8:a5:f3:bf:7c:73:d3:e3:
3b:e3:68:05:6a:fb:61:be:c6:b9:71:f8:3d:79:92:56:82:3e:
aa:bb:16:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:17:36 2025 by rpki-client