Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/IM6XK6vDacJr9x7mg0Pu-B81uoI.roa
File: IM6XK6vDacJr9x7mg0Pu-B81uoI.roa (raw, json)
Hash identifier: Bj3IgKUFLaQG7Gjlq8dc7Ey3vVv8PwT6J1xBBZDWvUQ=
Subject key identifier: 20:CE:97:2B:AB:C3:69:C2:6B:F7:1E:E6:83:43:EE:F8:1F:35:BA:82
Certificate issuer: /CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Certificate serial: 019422FC281D89DB0400B07995787B4537F7
Authority key identifier: 98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/IM6XK6vDacJr9x7mg0Pu-B81uoI.roa
Signing time: Wed 01 Jan 2025 17:48:58 +0000
ROA not before: Wed 01 Jan 2025 17:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208164
IP address blocks: 194.153.133.0/24 maxlen: 24
2a0f:2880:400::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 19 Feb 2025 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:28:1d:89:db:04:00:b0:79:95:78:7b:45:37:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Validity
Not Before: Jan 1 17:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20ce972babc369c26bf71ee68343eef81f35ba82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b9:09:06:9f:8f:ca:cd:1a:4e:f4:d4:22:69:
d4:ef:1f:ff:88:ff:fa:1b:25:7f:06:35:33:8c:34:
99:ac:1e:f0:4c:7b:8f:be:3f:7f:e7:eb:c6:1a:ef:
23:0f:47:7a:df:76:32:03:a4:eb:10:c4:a4:68:d6:
58:cc:ca:90:49:67:0c:e2:3f:6b:75:6c:5f:f0:c9:
62:6f:33:87:86:63:97:fd:f6:4c:af:79:94:15:a6:
b2:a8:93:ab:2d:fa:1d:b6:ef:5f:bf:8a:e7:9d:3d:
b5:2e:85:0e:3a:37:e5:90:9c:b1:6e:13:8e:a7:c7:
a4:31:12:c7:b1:be:6f:5c:66:36:17:ed:87:70:30:
52:61:e6:24:95:e1:6a:6f:93:e8:85:88:dd:fb:0f:
9e:d2:e6:c0:fe:fc:36:c1:f8:66:a3:06:51:4a:89:
2a:80:9f:e7:e5:56:6e:be:3d:ab:9a:54:0d:d4:5e:
af:a9:63:0d:66:70:e3:80:0a:6b:50:0b:70:ed:9e:
6e:d8:84:a9:9e:b6:f7:29:e9:bb:b1:0c:49:37:a4:
8f:8d:e9:a7:87:7c:94:c7:42:77:61:6f:8f:9d:b3:
08:4c:9f:ea:3d:29:ed:ec:d8:3e:3a:9b:c8:a9:0d:
5c:14:2e:bc:64:dc:08:1b:d7:72:90:26:10:2b:8f:
71:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CE:97:2B:AB:C3:69:C2:6B:F7:1E:E6:83:43:EE:F8:1F:35:BA:82
X509v3 Authority Key Identifier:
keyid:98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/IM6XK6vDacJr9x7mg0Pu-B81uoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.133.0/24
IPv6:
2a0f:2880:400::/40
Signature Algorithm: sha256WithRSAEncryption
56:9d:64:59:ae:fa:29:39:52:ce:3f:76:da:a5:3b:9d:d4:4f:
78:35:9e:2a:8f:1e:01:2c:78:43:2d:b0:5d:ee:c2:3c:71:38:
30:c6:a5:47:db:89:c5:dd:0f:53:de:4e:4a:37:48:31:ee:c4:
37:e1:5b:f2:4e:1c:0e:be:fd:33:25:ff:a0:df:8e:b3:9a:13:
53:4b:52:45:fe:38:4f:fd:f2:52:78:a5:d1:23:8b:5a:f8:53:
58:e1:86:ea:c9:cd:2b:5e:6a:16:3d:7b:2b:ba:15:86:4d:f1:
96:93:c1:3a:7d:39:e8:c1:72:f1:ce:de:1f:c3:44:2b:4a:30:
4c:52:43:05:70:23:19:1d:78:c4:bd:e4:6d:a0:12:94:4b:c2:
d5:dd:b4:54:56:e4:b0:4e:95:0f:80:64:43:c6:fd:04:1c:4b:
aa:1b:3f:a7:34:8e:e9:e2:38:94:3d:c4:76:84:2f:95:a7:6e:
8d:93:5b:ce:aa:3e:9e:90:79:d1:19:b3:2b:66:04:61:b0:5a:
69:29:4f:58:81:a1:73:4e:4f:41:ab:5b:a3:3e:a3:b0:5f:6a:
99:ba:8c:74:c4:f9:40:a0:a6:62:f6:fb:7f:f5:05:32:1b:ee:
67:3a:ce:11:d1:05:4d:dd:36:d9:23:8b:5f:8f:b3:2c:ed:8c:
bf:72:ff:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:15:45 2025 by rpki-client