Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/Bv-KN4TVwRGSSqiGHnFgmIzK1JQ.roa
File: Bv-KN4TVwRGSSqiGHnFgmIzK1JQ.roa (raw, json)
Hash identifier: na3JMFrtilfXNdEKfjNmntXKX9jOnMlfFRxozjitUCQ=
Subject key identifier: 06:FF:8A:37:84:D5:C1:11:92:4A:A8:86:1E:71:60:98:8C:CA:D4:94
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 01956A65EE602F4AD64971A96CE6A38553BF
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/Bv-KN4TVwRGSSqiGHnFgmIzK1JQ.roa
Signing time: Thu 06 Mar 2025 07:40:19 +0000
ROA not before: Thu 06 Mar 2025 07:40:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 194.59.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Mar 2025 15:06:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6a:65:ee:60:2f:4a:d6:49:71:a9:6c:e6:a3:85:53:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Mar 6 07:40:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06ff8a3784d5c111924aa8861e7160988ccad494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:31:72:1f:a1:51:bd:1d:24:1a:65:8d:05:3e:
f2:d2:70:ba:5a:83:16:5a:d1:50:06:0a:3d:78:27:
04:6a:00:78:de:f2:00:30:91:66:f9:fe:7a:01:d6:
86:d2:d0:b1:bb:1b:8c:db:a5:c6:61:30:bb:e8:e4:
25:db:57:3b:a9:9b:02:57:1a:c8:49:0b:a7:c4:79:
aa:b8:c1:db:d8:62:d4:f5:9d:0c:1e:0a:ca:1b:d9:
16:d3:0c:96:a8:05:82:89:9d:ad:f5:09:7a:fb:1e:
eb:7f:da:d7:2b:f4:c5:b8:84:20:06:df:c9:f0:eb:
98:c5:81:34:27:b5:6b:e8:b0:27:94:e1:10:6a:5b:
34:9a:2e:b4:58:01:88:0d:f4:38:3c:85:6c:85:c0:
54:b8:3f:84:26:80:78:5a:56:c5:cb:8f:17:51:d3:
21:21:e3:46:91:12:5a:22:ab:30:70:36:8b:f9:9b:
86:e4:14:84:d8:c4:eb:9a:6d:45:51:49:1b:98:e2:
2e:c2:ef:9e:38:40:b0:8c:3c:8f:a9:c2:f5:62:50:
54:8d:7d:6c:86:0a:32:f3:0e:66:31:30:03:4a:b9:
91:27:2b:d5:26:6d:c6:5f:f4:a4:99:83:e5:fe:dc:
e1:5a:a9:16:1b:bd:99:db:b8:39:a8:bb:61:e2:eb:
37:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FF:8A:37:84:D5:C1:11:92:4A:A8:86:1E:71:60:98:8C:CA:D4:94
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/Bv-KN4TVwRGSSqiGHnFgmIzK1JQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.6.0/24
Signature Algorithm: sha256WithRSAEncryption
81:3f:e6:e1:32:bb:86:29:bc:80:02:56:b6:0f:56:81:bc:62:
c8:d9:91:31:8e:39:e4:e8:ef:a2:6d:1b:fb:1b:07:cd:93:df:
6a:4c:34:5d:6e:8a:41:69:75:24:81:92:3c:0d:b9:b7:5d:c3:
98:e9:be:54:88:4f:bd:7f:b3:e5:11:c5:9f:37:62:21:9a:b9:
8f:ec:44:91:73:2c:20:14:72:ca:f8:06:b5:53:e3:c4:08:d2:
df:24:4a:72:2f:30:5e:59:f9:ec:c3:8a:aa:8d:38:b0:ff:5a:
09:c5:2c:ea:60:ee:bf:15:81:1f:bb:9f:7a:d7:b0:65:14:fd:
bc:b6:8d:ec:ad:6e:07:89:59:c3:a2:52:a4:5b:9d:87:24:99:
0a:38:a9:17:e5:50:71:10:a1:19:9a:95:9c:20:9a:41:1f:ce:
8d:d2:5a:73:83:19:f4:8a:e3:31:22:88:6f:c0:27:cd:b6:ba:
9d:32:d5:ec:ec:f1:6d:df:f3:19:d6:9b:32:49:e9:03:4f:31:
1a:d9:a8:ff:78:15:2a:81:42:b2:d3:e0:ea:3b:c2:ff:33:27:
ed:12:4b:3a:ee:23:13:01:02:ab:2f:b1:82:69:ae:fb:94:9a:
0d:26:30:8a:5a:96:e2:bf:e9:d0:e0:9b:70:d2:ca:28:f1:f5:
33:a5:19:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:33:44 2025 by rpki-client