Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/f6BBX4jqz8pxNdHS03Uf7LbzKeU.roa
File: f6BBX4jqz8pxNdHS03Uf7LbzKeU.roa (raw, json)
Hash identifier: 4OCwsaW6NFV+KlcRadm7JMCWNGX3DZ+zaT+fnbvf/IA=
Subject key identifier: 7F:A0:41:5F:88:EA:CF:CA:71:35:D1:D2:D3:75:1F:EC:B6:F3:29:E5
Certificate issuer: /CN=e69e45a4481456148e2e00349d87aa57c56b24a0
Certificate serial: 018CC72570226F04C70ECF6B178F679026C6
Authority key identifier: E6:9E:45:A4:48:14:56:14:8E:2E:00:34:9D:87:AA:57:C5:6B:24:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/f6BBX4jqz8pxNdHS03Uf7LbzKeU.roa
Signing time: Mon 01 Jan 2024 22:29:28 +0000
ROA not before: Mon 01 Jan 2024 22:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213009
IP address blocks: 194.150.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:70:22:6f:04:c7:0e:cf:6b:17:8f:67:90:26:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69e45a4481456148e2e00349d87aa57c56b24a0
Validity
Not Before: Jan 1 22:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fa0415f88eacfca7135d1d2d3751fecb6f329e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fd:26:cf:f0:98:76:ec:c4:45:c9:13:0d:d4:
e1:c5:5a:d6:fe:d6:41:83:c5:0f:76:d6:01:a2:dd:
1b:ee:88:76:a3:73:ec:0c:86:f3:5c:3a:0a:ab:3a:
a8:4f:fe:fc:b8:6c:fc:bd:0c:3a:ac:af:73:1d:02:
17:d8:83:84:72:f8:5a:20:7a:48:cd:11:6e:b0:e9:
ac:4f:26:b4:9d:3f:2e:f8:c5:cc:78:5f:6d:50:1c:
c1:65:93:f8:e8:3a:1e:f5:e9:58:99:37:4c:dc:3d:
de:82:f3:3a:7b:2b:fe:ea:0c:e3:54:ca:51:2a:47:
c7:47:e3:44:2c:3e:f9:7b:08:3f:d5:2f:6d:15:ff:
1d:1a:fd:79:4e:db:57:d0:61:f9:0c:39:a1:99:3e:
45:ce:2b:31:3a:d7:9f:a3:55:08:de:32:4c:2d:d5:
09:5a:db:fe:94:e0:56:e9:c4:05:86:44:56:9b:df:
4f:57:74:bf:9c:c3:5b:03:1d:0e:55:81:98:9b:f7:
93:c6:c1:6f:01:1d:52:34:fa:57:b0:a4:52:17:e4:
26:16:58:dd:c3:4d:18:d5:70:54:25:60:bb:49:8c:
98:af:9c:5e:d6:fe:9e:fe:7d:bd:50:5f:2a:d0:95:
dc:1b:c2:ed:77:a0:83:f0:37:41:ad:a8:27:76:26:
b1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A0:41:5F:88:EA:CF:CA:71:35:D1:D2:D3:75:1F:EC:B6:F3:29:E5
X509v3 Authority Key Identifier:
keyid:E6:9E:45:A4:48:14:56:14:8E:2E:00:34:9D:87:AA:57:C5:6B:24:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/f6BBX4jqz8pxNdHS03Uf7LbzKeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/5p5FpEgUVhSOLgA0nYeqV8VrJKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.107.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:fa:c2:69:b6:4c:65:56:0e:20:39:51:1e:65:f8:e1:98:f7:
46:8f:97:a6:71:b8:ea:5e:f8:c6:a9:29:e0:95:35:b6:1e:2a:
2f:64:9f:b8:6c:c8:d3:db:42:e9:21:28:b5:d9:9f:df:6b:da:
01:6b:2b:17:a7:b4:80:e9:77:80:5a:c1:39:0a:60:cc:07:6c:
d7:f0:a1:46:b9:7c:3d:ad:8b:b2:3e:83:65:03:a0:e2:41:b3:
5d:52:0a:37:a1:2b:72:4f:4c:9f:1f:1d:bf:86:0b:32:fd:f4:
17:cb:a2:f1:f3:2d:cb:46:83:b4:27:3b:05:26:a1:ee:01:99:
db:39:54:cc:04:d8:84:cd:f8:01:ba:2d:a0:a5:90:b5:22:e6:
99:d4:75:8c:38:52:37:9e:09:6b:5c:a3:2f:8b:33:e8:98:43:
94:52:03:d3:4d:e4:b4:3f:5e:e0:67:48:d0:e4:b8:7b:11:55:
ee:8d:4a:52:26:3d:17:23:60:ca:47:f0:14:57:ab:ec:a0:5e:
0a:ed:d6:93:8a:b5:b9:d0:4e:a2:b3:27:46:cb:a3:1f:d0:35:
d2:88:fb:5d:98:a4:64:57:5e:fe:c7:bc:fc:01:1c:5e:9f:07:
cf:9b:8e:71:ad:2a:54:97:b4:a8:c5:75:2d:74:c9:d9:85:07:
e3:36:40:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:43:50 2025 by rpki-client