Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/C5ytHPm1S4raDEL5QjSVXhYbx2c.roa
File: C5ytHPm1S4raDEL5QjSVXhYbx2c.roa (raw, json)
Hash identifier: 2UgMSdKUuSoEPLDmWrsrS7Qd/8aEIlYbIg6ojsYL6j8=
Subject key identifier: 0B:9C:AD:1C:F9:B5:4B:8A:DA:0C:42:F9:42:34:95:5E:16:1B:C7:67
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01942827EACB52CE5AA31BBA4DD53A914EEF
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/C5ytHPm1S4raDEL5QjSVXhYbx2c.roa
Signing time: Thu 02 Jan 2025 17:54:52 +0000
ROA not before: Thu 02 Jan 2025 17:54:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6939
IP address blocks: 188.95.67.0/24 maxlen: 24
194.41.112.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 17 Jan 2025 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:ea:cb:52:ce:5a:a3:1b:ba:4d:d5:3a:91:4e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 2 17:54:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b9cad1cf9b54b8ada0c42f94234955e161bc767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:05:f9:9d:35:2e:07:69:3a:8a:d9:14:22:
4c:5a:a5:e7:ad:77:9b:e9:89:54:65:28:a5:1a:f3:
f1:ab:00:8b:b5:06:08:44:17:12:c8:6d:55:8e:fa:
9d:d4:ca:6d:3e:42:df:e7:b7:f0:11:05:74:47:8a:
38:04:56:5f:c7:c3:a7:e2:3e:9d:5e:65:57:e8:42:
d6:12:5f:85:73:90:36:89:b1:a7:6b:c8:69:8a:ba:
5a:97:75:f2:b2:fe:bf:a6:a0:a8:3c:cd:2a:71:78:
1b:75:fe:fa:4e:80:46:43:fe:89:3c:1c:79:d5:0c:
d1:63:83:b6:38:ce:34:9f:57:ed:e5:c3:7e:17:b1:
f9:59:62:20:16:d6:48:3b:a7:5f:f1:08:f6:d5:52:
83:22:c5:fc:20:cb:f0:9d:ac:2b:7e:41:34:94:cf:
4b:eb:92:8b:6a:46:39:cb:7c:4c:f3:32:51:84:c7:
aa:34:2c:4f:04:93:19:23:5c:1f:35:5d:94:ec:8c:
07:60:66:38:c1:30:cb:0e:d6:fd:1f:e8:f0:f7:2b:
ab:8b:02:53:41:3b:ca:d2:29:9f:a5:ed:d2:58:ea:
32:72:31:32:68:12:03:53:ec:83:1e:b6:23:5b:61:
aa:ae:1b:ee:ee:92:0a:fd:63:6c:18:06:06:a2:ac:
c7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9C:AD:1C:F9:B5:4B:8A:DA:0C:42:F9:42:34:95:5E:16:1B:C7:67
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/C5ytHPm1S4raDEL5QjSVXhYbx2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.67.0/24
194.41.112.0/22
Signature Algorithm: sha256WithRSAEncryption
15:c1:e1:5f:d9:b1:67:70:d4:1d:a8:36:74:9e:59:16:bd:b8:
9b:3c:3c:ee:2f:c0:c4:c5:8b:b1:06:18:03:ff:55:9d:44:a6:
aa:bf:eb:84:5f:b5:25:4b:e2:21:c5:87:92:63:46:f6:36:aa:
4a:5c:a1:5f:ba:28:e1:0c:f6:c3:9c:f7:96:60:1d:9d:32:98:
d3:44:c6:19:c0:3b:db:30:49:ed:f5:59:cd:5c:a4:3e:ff:8a:
c4:76:71:5a:5e:d3:70:36:84:ba:b3:1c:81:0a:18:d5:9a:13:
ec:e7:f7:12:41:2e:a5:9f:d4:d8:e3:37:d6:7f:35:6f:8a:a7:
6b:26:a9:90:fd:96:e4:b5:c2:85:0f:eb:0c:1a:f3:e5:99:e5:
8f:27:c3:0b:5d:de:2c:78:f8:35:53:1e:62:97:db:3c:46:66:
ef:da:f7:3e:a7:eb:34:e6:94:6a:ea:76:23:78:62:30:8d:96:
1f:d0:21:8c:31:7b:a6:d0:87:8d:9c:e6:da:49:50:83:9d:f8:
fd:ae:1c:27:ab:96:29:af:c2:20:15:d4:62:12:31:b8:7d:35:
7f:ba:60:33:fe:72:02:66:fb:d4:fb:54:f3:59:dc:38:41:73:
85:8b:92:ad:f5:86:bc:64:63:03:3e:78:ae:94:0e:47:34:34:
92:09:7b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:45:51 2025 by rpki-client