Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/cfNip7AWKFC56gsoZCCAjiirf_0.roa
File: cfNip7AWKFC56gsoZCCAjiirf_0.roa (raw, json)
Hash identifier: rBONIDdfLz+0FfDcCuwdS7xedIdRtoGeGxk86a0bZ8c=
Subject key identifier: 71:F3:62:A7:B0:16:28:50:B9:EA:0B:28:64:20:80:8E:28:AB:7F:FD
Certificate issuer: /CN=daee6df9728cd8af0f34a03ed6ea3151c3bc22c8
Certificate serial: 0196D97A422C7AEA78FFEC50F695BD99F720
Authority key identifier: DA:EE:6D:F9:72:8C:D8:AF:0F:34:A0:3E:D6:EA:31:51:C3:BC:22:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2u5t-XKM2K8PNKA-1uoxUcO8Isg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/cfNip7AWKFC56gsoZCCAjiirf_0.roa
Signing time: Fri 16 May 2025 14:23:10 +0000
ROA not before: Fri 16 May 2025 14:23:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42151
IP address blocks: 195.242.142.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 22 May 2025 09:27:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d9:7a:42:2c:7a:ea:78:ff:ec:50:f6:95:bd:99:f7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daee6df9728cd8af0f34a03ed6ea3151c3bc22c8
Validity
Not Before: May 16 14:23:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71f362a7b0162850b9ea0b286420808e28ab7ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:b3:31:35:e9:3a:e0:4e:d1:83:56:2c:60:
06:9a:b8:76:16:da:49:d4:47:64:9d:a9:65:25:55:
29:b4:61:92:d5:4b:e8:4e:b8:f0:d7:16:b8:52:c9:
98:b3:bc:08:87:36:11:c6:92:45:0a:75:ad:81:2d:
0d:50:c9:64:c4:ab:d5:7a:3b:b6:8d:c7:ed:c5:67:
f6:01:43:c2:e1:be:6d:41:b9:f1:ac:7c:a6:a1:24:
d5:57:55:09:2b:da:7d:f7:d2:96:c7:b2:ba:c3:1b:
75:9b:75:ef:fa:8f:3c:ca:06:ae:9f:64:a3:75:ad:
1c:02:97:7c:ff:ac:60:28:22:28:71:bb:2c:76:4d:
53:5a:98:29:ff:7f:ce:d7:8f:47:71:89:bb:12:f4:
ce:c5:2c:bb:4d:f8:07:f0:a6:dd:91:e0:95:45:f8:
28:b0:df:da:cb:17:60:10:b1:2e:76:15:43:b2:e7:
de:6c:8f:15:e5:1e:bc:d4:be:77:5b:7e:30:11:72:
ae:c5:59:8b:43:78:72:58:20:ee:8c:f7:7b:52:07:
7a:e0:7e:68:8a:74:d3:aa:a2:aa:ec:04:ce:0e:1f:
d9:85:32:d5:1c:cf:5a:50:11:67:ae:95:5b:98:e2:
ee:d8:82:f0:eb:bd:ca:a0:c1:fd:c7:ec:9b:aa:f9:
ea:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F3:62:A7:B0:16:28:50:B9:EA:0B:28:64:20:80:8E:28:AB:7F:FD
X509v3 Authority Key Identifier:
keyid:DA:EE:6D:F9:72:8C:D8:AF:0F:34:A0:3E:D6:EA:31:51:C3:BC:22:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2u5t-XKM2K8PNKA-1uoxUcO8Isg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/cfNip7AWKFC56gsoZCCAjiirf_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.142.0/23
Signature Algorithm: sha256WithRSAEncryption
53:e8:ca:da:29:21:6e:af:48:ce:7d:cb:b9:8d:fa:f6:71:42:
db:01:09:bc:54:90:ac:36:95:03:f3:82:db:39:0b:4a:8a:c8:
17:d0:b0:50:2c:6d:34:2d:77:3a:ef:6b:78:0c:1f:54:86:2c:
63:40:8b:24:dd:ab:22:3a:c3:cd:04:cd:3d:5f:9a:68:4d:6d:
04:7c:ff:90:ac:61:78:ca:0f:58:ea:8b:cc:0b:40:4f:5f:0d:
ec:b3:41:80:42:00:41:a5:11:84:88:f8:99:d2:ae:78:11:3d:
de:93:07:29:0f:aa:0d:04:ab:a4:3c:dc:81:7d:c3:de:8e:b1:
9b:90:28:08:87:af:ac:79:4d:c3:9f:2d:a5:d3:fe:14:4c:aa:
98:77:04:cb:35:35:69:e3:d7:6d:a2:84:c5:4a:6d:60:d0:5f:
f1:8b:55:ed:8d:c1:bc:b0:1e:96:7a:62:bd:71:e0:f6:6b:5f:
18:57:0a:d2:b1:bb:2c:f6:fd:c9:46:fe:f5:83:d7:bc:1f:02:
07:39:da:5b:21:6b:c7:2b:33:85:38:1b:a6:1f:2c:89:6c:55:
c0:7e:d0:4a:7e:9a:e5:5a:68:3b:52:d4:9f:92:bb:72:29:e0:
08:f3:f7:9b:5c:7d:ff:7c:59:e4:ed:69:ff:83:07:04:d2:87:
3d:7f:62:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:38:34 2025 by rpki-client