Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HO7UdY9_c_4gwf5-1ifq7XL2Qs4.roa
File: HO7UdY9_c_4gwf5-1ifq7XL2Qs4.roa (raw, json)
Hash identifier: M+6nwfOzpach78RlKL8SbsnpfAIhn6wk5ZqG/Zt7PJ0=
Subject key identifier: 1C:EE:D4:75:8F:7F:73:FE:20:C1:FE:7E:D6:27:EA:ED:72:F6:42:CE
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 01955C00F0530B183F819DE1B01F1B71DEE0
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HO7UdY9_c_4gwf5-1ifq7XL2Qs4.roa
Signing time: Mon 03 Mar 2025 12:35:20 +0000
ROA not before: Mon 03 Mar 2025 12:35:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 194.59.6.0/24 maxlen: 24
194.116.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Mar 2025 07:40:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5c:00:f0:53:0b:18:3f:81:9d:e1:b0:1f:1b:71:de:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Mar 3 12:35:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ceed4758f7f73fe20c1fe7ed627eaed72f642ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0a:87:5e:45:97:5d:05:af:97:1c:ae:a4:f9:
06:7c:99:b6:fa:25:d2:c6:d5:71:ef:f3:52:87:b2:
6f:7b:b9:9e:57:15:e8:77:c1:82:00:30:b5:3f:a6:
e4:8e:e5:85:25:c5:18:8a:ed:9d:bc:79:7c:53:3c:
c5:22:b5:d8:a5:2e:90:91:21:d3:c9:89:48:43:58:
25:9d:21:03:61:40:bd:bb:a3:51:48:e0:57:2c:bd:
09:33:c9:18:77:f6:af:8f:b3:19:90:f0:97:c7:35:
96:2a:11:97:51:b1:e7:07:77:fc:66:92:b6:7d:b3:
c6:ca:12:07:af:9e:bb:23:d9:e5:50:c5:71:11:5c:
4f:9d:b1:52:9a:46:4c:5f:37:0d:b7:d7:e1:79:0d:
eb:77:e2:05:91:3e:12:95:29:af:70:47:51:ce:9e:
12:8e:5f:2b:5a:35:b2:b4:ab:66:ac:07:9d:9c:c9:
9f:fe:75:1a:a0:98:fb:28:f0:14:84:dd:1a:7c:56:
0e:b7:c0:ad:9e:30:6f:ef:7a:88:e6:ad:da:71:f4:
e2:ea:ca:b7:db:a5:60:c1:2d:eb:3f:35:d6:85:19:
55:e0:fb:1d:d4:8f:98:22:6c:fc:55:66:84:a7:df:
43:bd:96:71:44:37:2f:28:4c:59:48:72:21:56:7f:
ae:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EE:D4:75:8F:7F:73:FE:20:C1:FE:7E:D6:27:EA:ED:72:F6:42:CE
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HO7UdY9_c_4gwf5-1ifq7XL2Qs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.6.0/24
194.116.234.0/24
Signature Algorithm: sha256WithRSAEncryption
02:ca:c6:44:88:35:42:9a:dc:65:b0:65:d0:fb:b3:de:2d:bf:
3f:e3:bc:a4:bc:47:0c:8a:e0:d6:8d:73:93:61:00:1e:52:ac:
76:4c:ed:af:6c:c0:36:d5:0d:2d:d5:71:44:29:6d:e5:3e:bc:
36:ee:64:72:2e:1b:a0:fa:b3:1e:6d:8b:c9:91:74:58:36:32:
74:16:3b:65:b0:b2:f8:d6:15:4f:8b:ce:0f:56:3a:28:23:5f:
bf:30:3e:1f:ed:67:15:6a:54:67:0a:4e:9f:5a:94:5c:5e:11:
c4:5c:e5:f2:ee:7f:ce:a0:a3:3e:c8:10:14:66:b1:16:61:5a:
25:b5:3e:e9:36:e5:6f:22:77:a9:4f:18:0d:b8:45:2c:15:d0:
45:a7:60:ed:bf:92:e0:ab:8f:05:4c:d5:de:46:3e:49:76:c7:
74:67:1e:99:3d:7c:79:81:f7:c4:41:d9:d4:41:20:d0:12:15:
fc:a6:84:c8:9e:94:23:7d:9e:bd:03:02:9a:5f:47:12:94:e0:
e7:95:ce:dc:fe:2c:66:c3:27:66:59:2c:bd:e7:4c:55:25:3d:
6d:11:64:d6:b3:97:d3:e8:f4:94:3f:f6:d1:12:78:d8:e1:10:
42:6d:ca:31:d2:02:a2:b3:f5:7e:fc:7b:88:35:df:6d:be:5e:
a4:06:3c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:39 2025 by rpki-client