Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/7PGabuzz9AoBZCrFeCqD89SsDNg.roa
File: 7PGabuzz9AoBZCrFeCqD89SsDNg.roa (raw, json)
Hash identifier: LYnKfHgNc6I2DnLoIF2ONo/66yv5ro5Okt2ovPg7J2Q=
Subject key identifier: EC:F1:9A:6E:EC:F3:F4:0A:01:64:2A:C5:78:2A:83:F3:D4:AC:0C:D8
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 0195BCE885496C4F55E804CB351E89677C38
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/7PGabuzz9AoBZCrFeCqD89SsDNg.roa
Signing time: Sat 22 Mar 2025 08:11:49 +0000
ROA not before: Sat 22 Mar 2025 08:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212335
IP address blocks: 2.58.233.0/24 maxlen: 24
217.147.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Mar 2025 12:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:bc:e8:85:49:6c:4f:55:e8:04:cb:35:1e:89:67:7c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Mar 22 08:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecf19a6eecf3f40a01642ac5782a83f3d4ac0cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a1:31:8b:8f:88:f3:7b:81:08:d2:58:07:f9:
39:81:56:86:ba:82:6e:59:d0:b2:34:a7:04:26:4c:
43:f7:89:d9:3d:a9:31:82:f1:34:12:ff:c0:42:67:
3f:73:c4:cc:5a:b5:8d:aa:aa:ee:c7:44:84:95:09:
53:bb:0a:53:cd:7a:09:6a:45:6a:a4:e0:81:de:94:
ac:d0:df:b4:1d:47:23:6d:5f:dc:26:77:ea:a3:8c:
e8:2f:45:bb:14:8e:b1:3d:38:bf:f1:a8:e4:33:b5:
14:19:e7:73:90:b4:66:90:ad:8a:ed:b8:f0:a7:5e:
07:e6:d2:69:5f:b3:08:1a:9c:6e:9b:a2:49:66:b2:
d7:e8:f3:c5:61:22:a2:76:6d:97:bc:46:a8:40:06:
9c:d6:6d:fa:98:58:99:d5:e3:9d:b7:62:71:20:fb:
b2:51:97:c4:6e:0e:08:ee:64:2d:a8:7f:82:6e:ba:
9e:ef:fa:5a:5e:71:51:4d:32:8c:e8:5c:7a:d7:24:
30:4a:0a:2a:78:da:2e:65:18:e7:56:92:cf:87:d6:
2b:cb:12:6d:4f:57:11:61:e0:ee:65:44:fe:a6:f7:
0b:fa:01:58:e5:20:42:5d:fe:17:ba:e8:31:ce:8a:
94:e0:1b:d2:0d:39:34:1a:a3:7b:e2:50:8d:90:14:
50:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F1:9A:6E:EC:F3:F4:0A:01:64:2A:C5:78:2A:83:F3:D4:AC:0C:D8
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/7PGabuzz9AoBZCrFeCqD89SsDNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.233.0/24
217.147.12.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:7c:5b:8f:b7:61:ea:fe:d4:a2:9f:1c:9f:87:df:d1:ca:e9:
b8:05:5f:0f:22:2c:d1:bf:75:80:3f:d4:03:3d:2c:e4:22:93:
cd:71:db:26:3f:6a:ab:e8:c3:94:6c:79:c1:e1:f1:5f:90:84:
46:1b:b3:83:9b:e8:7c:b0:54:32:d0:a2:02:c4:aa:87:38:25:
2d:68:c2:7f:3f:f8:8f:b1:fc:b5:57:39:e0:e5:c8:c2:c5:5c:
27:72:6b:0b:03:2b:30:6f:7d:9c:43:76:53:9b:61:dc:8a:ba:
ed:d5:89:17:82:0f:5b:af:40:9b:4f:0f:60:67:ca:0d:5f:10:
38:9a:f4:a9:8d:64:4b:e1:35:f9:37:e8:71:a5:e8:26:f6:b3:
8a:52:60:fa:e8:9e:ae:23:1d:2f:fd:3b:ba:2c:58:b8:dd:10:
02:a0:ea:6f:65:b8:85:81:df:a3:50:6e:d4:3e:a9:8a:89:a1:
4d:58:2a:96:8e:3d:c4:cf:c1:5f:cd:65:f2:20:4a:2e:20:25:
f1:56:9f:f5:8a:d4:37:0c:4c:0a:db:0d:60:02:7b:80:d6:16:
e0:67:ac:d8:54:64:a0:99:48:83:b1:14:8d:46:6b:a3:36:72:
a7:9f:74:2e:49:2b:46:b9:83:dc:ae:19:7a:b8:aa:08:cc:ec:
2d:75:0c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:02:30 2025 by rpki-client