Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/6GA6IfQU3NTXdDc6BqndjsWnDh8.roa
File: 6GA6IfQU3NTXdDc6BqndjsWnDh8.roa (raw, json)
Hash identifier: k6D26zfkpuFfLFNTzGu4Y+ANjEm0MM5DrZyIg7epp/U=
Subject key identifier: E8:60:3A:21:F4:14:DC:D4:D7:74:37:3A:06:A9:DD:8E:C5:A7:0E:1F
Certificate issuer: /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Certificate serial: 019528A8737E1159D6FD3E4D66A070603229
Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/6GA6IfQU3NTXdDc6BqndjsWnDh8.roa
Signing time: Fri 21 Feb 2025 13:18:03 +0000
ROA not before: Fri 21 Feb 2025 13:18:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200277
IP address blocks: 193.169.194.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 11 Mar 2025 09:35:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:28:a8:73:7e:11:59:d6:fd:3e:4d:66:a0:70:60:32:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Validity
Not Before: Feb 21 13:18:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8603a21f414dcd4d774373a06a9dd8ec5a70e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f0:b1:51:c9:3c:78:2e:bf:ff:b4:f9:5c:7a:
b1:07:e4:c6:0a:85:b2:7e:ba:41:95:37:a7:e2:29:
f0:cc:b9:2d:c0:2d:34:cb:95:4d:7a:28:f1:ae:c4:
01:d8:ee:95:28:a8:04:45:85:64:68:0d:17:90:69:
89:7a:5e:07:84:a5:a7:48:eb:db:43:48:ff:cb:f1:
56:b3:4a:8b:43:f9:a9:fb:ee:95:d5:d9:f8:67:f0:
21:5f:f3:c8:e7:d6:24:94:b5:f6:e7:e0:be:85:ce:
0a:b3:12:ea:90:9b:9c:1a:68:48:79:42:b7:a9:65:
81:c3:70:08:62:99:f7:5a:e8:16:14:48:dd:b5:eb:
55:d1:fa:15:80:dd:3e:2f:13:57:f4:d7:64:69:57:
34:26:ff:c6:a2:5e:9b:e8:32:2b:af:17:5b:31:cd:
74:52:5a:75:c1:4a:7b:95:94:c0:a8:13:29:63:91:
9f:bc:18:90:b9:62:0a:be:83:1d:f5:fd:7b:70:d1:
21:aa:b7:7c:e0:b3:7e:52:b0:bd:78:13:3b:d9:e2:
6c:e6:6a:af:3c:43:95:a2:0a:bf:7f:76:05:14:28:
87:05:75:52:72:b5:d2:5b:6f:0e:6b:3b:24:f9:d0:
d9:cc:38:3e:d2:10:9d:41:44:be:c1:f0:86:ca:21:
43:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:60:3A:21:F4:14:DC:D4:D7:74:37:3A:06:A9:DD:8E:C5:A7:0E:1F
X509v3 Authority Key Identifier:
keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/6GA6IfQU3NTXdDc6BqndjsWnDh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.194.0/23
Signature Algorithm: sha256WithRSAEncryption
44:73:b0:7e:f7:25:e3:c1:03:5f:bf:91:bc:97:cd:f6:57:69:
e5:9b:ab:09:05:88:18:98:3a:7d:a8:3c:c4:c8:40:9d:4b:ad:
15:df:f9:48:54:ee:1b:27:8b:94:a2:80:dd:09:8a:78:58:d4:
5c:c8:03:7a:61:a3:e5:c7:ab:7d:07:42:ca:27:60:35:0a:77:
66:20:80:29:f1:c1:9e:3a:c9:71:49:89:f8:b6:74:8e:58:60:
31:c8:c4:dd:a8:53:06:71:11:2a:79:42:35:36:68:ab:1d:d6:
aa:77:a6:b8:93:29:d2:39:9d:11:61:7b:c4:63:9b:db:83:d6:
80:25:46:cc:5f:fd:c6:2c:cd:81:4e:3b:1b:c6:c3:5f:fb:d3:
cf:10:6a:6d:db:3e:55:5d:b1:8d:41:8f:a6:aa:32:aa:34:53:
68:20:e9:bb:1c:23:a5:5e:76:be:d5:10:9c:cb:23:35:c5:86:
d6:74:60:75:56:b0:de:34:d1:f2:5c:7c:80:aa:88:56:ea:5f:
95:31:98:39:fa:40:2a:29:1a:c6:dc:b2:fa:e9:3c:1a:8a:03:
49:43:1d:16:c7:6a:16:71:0f:6d:1b:8d:01:4d:3e:18:00:a6:
8e:e3:12:8b:f4:a2:0c:e2:bf:0f:0e:2f:90:9b:60:0e:68:9c:
0c:35:c2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 08:25:17 2025 by rpki-client