Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/eEK-ey-gH5g8rZw8J4wYmRm03LY.roa
File: eEK-ey-gH5g8rZw8J4wYmRm03LY.roa (raw, json)
Hash identifier: /Em/UPQbZkkXZuCtWTqwNR/g1ns/mg/qMpS2t6GHGKo=
Subject key identifier: 78:42:BE:7B:2F:A0:1F:98:3C:AD:9C:3C:27:8C:18:99:19:B4:DC:B6
Certificate issuer: /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial: 01948EA9E56787CC06470F8CF4D913F5B779
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/eEK-ey-gH5g8rZw8J4wYmRm03LY.roa
Signing time: Wed 22 Jan 2025 15:38:06 +0000
ROA not before: Wed 22 Jan 2025 15:38:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212269
IP address blocks: 194.37.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Jan 2025 22:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:a9:e5:67:87:cc:06:47:0f:8c:f4:d9:13:f5:b7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Validity
Not Before: Jan 22 15:38:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7842be7b2fa01f983cad9c3c278c189919b4dcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:b7:9d:2f:7f:6e:81:70:b7:b5:e5:fb:7c:
6d:f9:7a:02:8b:49:37:e4:51:94:1c:9b:4b:0e:fe:
05:3d:39:f3:a7:1d:a4:08:f3:70:79:d7:65:03:3e:
92:04:6f:5b:ca:95:49:f0:56:c6:37:f0:a7:51:21:
3d:44:1a:31:de:7c:75:f1:9f:bf:55:cc:6c:5a:79:
8f:cc:4c:5c:55:40:1d:e2:eb:e0:fc:7d:27:6e:82:
85:b7:5b:8b:bf:4c:2a:b2:be:ba:ec:35:3a:8a:94:
18:0a:11:c3:35:d3:b5:7c:b0:b1:1a:55:ef:33:9f:
ab:31:d4:51:b0:dd:d9:90:6a:1b:9a:d5:42:8b:61:
79:ee:37:a1:af:4e:34:52:93:fd:78:53:db:79:8a:
39:f0:96:69:de:92:64:38:45:e9:4e:c6:02:5a:ec:
cf:68:58:1b:18:a1:64:dc:1b:b6:dd:23:c0:08:8c:
1a:91:8a:34:4a:a0:ff:cc:10:29:a4:a1:f1:ae:03:
a5:1c:95:43:50:3d:6d:15:b2:8e:7d:56:2f:c5:2e:
92:40:2e:7b:b7:1e:08:12:d1:37:b4:34:fa:79:87:
d3:32:50:f0:c8:09:b5:c4:e0:cc:16:2a:26:42:86:
96:2e:d0:95:92:0c:be:07:a3:90:20:67:bc:f2:c3:
72:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:42:BE:7B:2F:A0:1F:98:3C:AD:9C:3C:27:8C:18:99:19:B4:DC:B6
X509v3 Authority Key Identifier:
keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/eEK-ey-gH5g8rZw8J4wYmRm03LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.37.92.0/24
Signature Algorithm: sha256WithRSAEncryption
99:1b:65:2a:6f:26:9d:62:36:b9:9a:f0:39:de:eb:21:7a:d8:
57:fe:c2:8e:e8:da:fd:fc:5b:88:4a:e0:e9:8f:17:68:ed:4f:
b6:f8:48:b2:b0:72:82:e6:4f:1f:6d:62:11:28:fe:03:41:ec:
62:13:ca:99:7d:31:3b:69:ce:dc:b2:bf:9a:49:00:20:95:af:
19:eb:ba:b3:63:48:35:74:ea:5e:41:d6:cb:13:7f:c4:54:80:
53:70:22:85:b1:99:dc:ac:4d:2d:09:b1:5d:ed:99:98:dd:af:
59:5a:f4:fb:da:53:f3:37:8d:4f:b3:a6:8c:a8:8e:29:1c:ff:
74:75:db:29:4a:c4:b5:28:e7:e3:5b:0c:b0:38:7f:79:7d:f2:
81:f8:9e:5f:df:fe:b9:ed:be:a1:e4:d7:e8:47:e4:f1:b0:8b:
64:ac:01:40:40:03:d1:ac:08:61:32:3d:df:e9:a1:78:04:a8:
af:1c:e2:56:bf:8e:8f:7b:b6:d7:9a:95:3a:0c:71:b5:12:3b:
d5:8e:df:83:58:c3:4f:97:8c:8c:2c:8d:06:3f:0e:d9:42:2a:
47:dc:63:82:37:6b:28:4d:93:ce:9a:bf:a7:32:b7:63:39:db:
b8:55:d7:11:3c:0e:31:f1:86:df:4f:74:84:75:f1:4b:af:da:
50:74:bb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:48:58 2025 by rpki-client