Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/C3HTCbEiFvzbXFueKvGWF_mRXw4.roa
File: C3HTCbEiFvzbXFueKvGWF_mRXw4.roa (raw, json)
Hash identifier: a7uTffEZAuXL+Q8exXoucA2Yn/pHXDuF10YegywE6X0=
Subject key identifier: 0B:71:D3:09:B1:22:16:FC:DB:5C:5B:9E:2A:F1:96:17:F9:91:5F:0E
Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd
Certificate serial: 019425FC3E3EF26EE118A74487B35BE7874B
Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/C3HTCbEiFvzbXFueKvGWF_mRXw4.roa
Signing time: Thu 02 Jan 2025 07:47:55 +0000
ROA not before: Thu 02 Jan 2025 07:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200811
IP address blocks: 87.124.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Apr 2025 14:57:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:3e:3e:f2:6e:e1:18:a7:44:87:b3:5b:e7:87:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd
Validity
Not Before: Jan 2 07:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b71d309b12216fcdb5c5b9e2af19617f9915f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:81:3a:78:7f:ce:a9:a9:72:e4:2b:19:48:17:
81:d0:d4:06:ae:ff:4a:ee:67:2a:a6:74:fe:20:77:
48:23:9c:df:f4:09:2c:e0:c9:ed:13:57:5b:cc:a9:
cc:b4:b5:25:75:1e:37:34:79:2c:04:74:86:4f:fc:
20:76:ac:7f:31:be:fc:f4:61:e2:49:26:34:5e:57:
9a:e0:4b:c1:f8:12:17:1d:20:f8:ff:18:82:92:6f:
83:d6:9a:80:0f:c5:0f:d4:06:e4:02:27:29:82:4c:
bf:d3:43:b0:dd:28:2d:30:96:95:7d:72:c7:71:12:
5b:da:03:70:48:d7:eb:66:84:cb:47:18:88:3f:43:
65:f3:6a:46:20:1f:a6:69:1d:89:42:9f:b2:63:fd:
11:59:00:5c:35:5b:49:b8:56:b6:c0:d4:8a:93:1a:
2d:26:9a:92:99:e9:c3:27:63:8a:2b:65:ba:c8:0b:
a9:69:ae:ad:b3:ef:c8:f2:af:3e:3d:25:3f:ef:bd:
3f:ec:d0:bc:7c:32:36:55:db:46:8d:89:60:2d:33:
20:b7:ae:e5:05:d4:b8:5b:1a:20:4c:51:35:ae:4e:
25:eb:be:6b:2b:93:ce:87:a2:8e:58:b2:5b:e3:f6:
3d:99:ec:d6:bb:22:4a:b8:d1:ba:2f:cf:ee:28:9e:
a5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:71:D3:09:B1:22:16:FC:DB:5C:5B:9E:2A:F1:96:17:F9:91:5F:0E
X509v3 Authority Key Identifier:
keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/C3HTCbEiFvzbXFueKvGWF_mRXw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.124.159.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e4:1d:3f:bd:9c:17:83:2f:b9:4b:24:ef:ea:63:ee:19:4f:
2a:c5:7e:1a:11:e0:eb:b6:ec:66:90:c9:04:37:99:65:44:b2:
be:35:ec:43:77:02:07:02:2f:58:98:ff:49:5b:3f:8f:74:2e:
d4:55:c7:a8:23:99:0a:63:75:10:ad:f4:e7:ea:74:7d:ab:4c:
0f:ad:ec:2c:14:6d:b5:fa:02:9a:25:f4:b7:ac:4e:17:3d:29:
34:d4:0a:e5:df:07:75:fb:68:79:00:42:21:e6:6e:a4:e6:e1:
11:78:84:15:e2:5f:c7:3a:f1:31:da:95:02:07:94:f0:84:3e:
a4:04:63:63:a2:f7:9a:b3:3f:ce:af:11:c6:68:dc:3e:b2:09:
79:8c:f0:28:76:1c:e4:cc:43:fa:93:28:01:5f:ce:94:79:1b:
79:4a:42:55:46:b1:4a:87:8e:73:7e:43:b7:27:57:bc:d2:a1:
ab:26:20:4d:89:0a:dc:1c:91:7e:3f:fd:3f:8c:94:9f:28:ad:
78:1b:35:21:fc:90:1f:5e:7a:ff:7d:cc:df:99:34:4e:8d:83:
42:08:54:2c:10:24:32:a8:5a:cc:66:51:2c:ac:43:26:4f:c9:
d0:0d:9b:de:ce:fb:9c:b6:66:3f:31:f4:78:0d:da:fb:68:1b:
27:da:08:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 06:11:56 2025 by rpki-client