Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/amBjbzwMiJ7RBF2zv8ujbdId01g.roa
File: amBjbzwMiJ7RBF2zv8ujbdId01g.roa (raw, json)
Hash identifier: vSjRP4zFswMP2XOBKGvBG/u2R3HGvzxSg52kDkITSrU=
Subject key identifier: 6A:60:63:6F:3C:0C:88:9E:D1:04:5D:B3:BF:CB:A3:6D:D2:1D:D3:58
Certificate issuer: /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial: 019488390816FB014741130CB19DB796A964
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/amBjbzwMiJ7RBF2zv8ujbdId01g.roa
Signing time: Tue 21 Jan 2025 09:37:06 +0000
ROA not before: Tue 21 Jan 2025 09:37:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200404
IP address blocks: 194.37.92.0/24 maxlen: 24
194.37.93.0/24 maxlen: 24
194.37.94.0/24 maxlen: 24
194.37.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Jan 2025 15:37:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:39:08:16:fb:01:47:41:13:0c:b1:9d:b7:96:a9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Validity
Not Before: Jan 21 09:37:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a60636f3c0c889ed1045db3bfcba36dd21dd358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fa:1c:36:f7:6b:5c:99:c1:d3:6a:a2:2d:d3:
9d:06:5e:d2:fe:d0:28:78:79:1f:44:ef:90:d7:aa:
75:4d:65:30:9e:30:7c:18:c1:14:1f:dc:81:68:3d:
8f:ba:d9:9e:57:c9:b4:4c:98:a3:2c:ec:a9:64:ff:
5d:74:02:ab:d8:43:fa:c7:94:6b:53:5b:eb:89:eb:
2c:96:66:2a:ba:d1:f7:54:b8:52:d1:19:12:60:57:
0e:fe:f9:7d:7a:3d:80:7d:8b:1b:42:1e:23:60:a6:
0e:4c:5e:11:4d:73:12:42:d5:6a:8d:2e:19:ce:28:
a8:be:ac:3e:f4:e2:2d:24:02:55:a6:c4:7c:49:92:
70:b0:7f:01:ce:8a:bc:1f:e1:57:ae:d7:79:e8:46:
fd:12:ad:a5:3e:49:3f:a5:4b:27:54:b2:26:3b:6f:
24:db:54:34:52:77:0c:8a:5b:7a:fb:2b:a1:8d:8d:
16:98:4c:41:21:32:c9:f0:34:14:15:c8:df:f9:5f:
7b:4e:89:0d:8e:04:7c:76:28:6d:eb:ff:88:d8:a4:
66:38:d3:26:63:7c:a6:16:44:10:53:3d:43:4a:c2:
42:17:0d:74:92:b9:ae:52:6b:7d:29:5f:40:8d:4a:
98:8e:32:a9:37:71:32:d8:c0:54:6a:41:43:4c:19:
12:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:60:63:6F:3C:0C:88:9E:D1:04:5D:B3:BF:CB:A3:6D:D2:1D:D3:58
X509v3 Authority Key Identifier:
keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/amBjbzwMiJ7RBF2zv8ujbdId01g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.37.92.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:d6:6b:4d:a2:f2:c2:69:75:50:01:3c:f9:eb:75:db:f8:35:
22:09:34:e2:a9:bf:a4:82:2a:12:ac:0f:44:5b:5a:5b:0b:b8:
1e:37:d9:ea:8b:b8:9f:0c:5d:b6:84:91:17:3e:50:b3:8b:5d:
c1:71:61:dd:5c:6d:11:bb:b8:04:bf:0d:7c:33:b4:69:7a:1c:
ba:14:e3:40:c2:98:9a:c6:41:e9:a0:c9:e4:1f:d4:0e:49:c9:
71:ff:31:90:68:a2:4a:c5:53:30:05:39:46:ac:09:05:53:d2:
c8:27:c8:e9:33:85:d8:93:61:60:f2:8c:52:d7:5a:d3:ab:66:
a7:91:77:05:3d:6b:d0:ee:e1:3d:3c:f0:e0:0c:f4:37:96:80:
ec:7b:6b:1b:65:db:b0:8a:62:b5:9f:e4:9e:36:63:fc:2a:ef:
9e:8f:f0:6a:13:3d:9d:0e:cf:53:d1:35:56:5a:6c:18:ab:9f:
08:56:72:5e:34:d2:1e:cc:f8:5e:bb:b2:05:ea:cb:f9:25:2a:
5f:63:60:91:c3:a1:56:86:8e:14:d5:0e:5e:23:20:db:e4:13:
0c:b3:79:08:a9:21:9c:62:1f:81:5e:7e:f5:da:84:e4:44:f0:
49:e2:cd:e0:bf:c4:43:d5:ee:03:7e:98:89:c9:f1:5f:d5:da:
1a:e0:21:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:09:45 2025 by rpki-client