Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/mCjXygALuW99YSflgVpo7ohVzvo.roa
File: mCjXygALuW99YSflgVpo7ohVzvo.roa (raw, json)
Hash identifier: I9u60mi06rWOCQAWOOf7fsqpiafVZVITF7YcPoNDkR0=
Subject key identifier: 98:28:D7:CA:00:0B:B9:6F:7D:61:27:E5:81:5A:68:EE:88:55:CE:FA
Certificate issuer: /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial: 0195223B3E601AB487EEE9F3AAE028DE3CE6
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/mCjXygALuW99YSflgVpo7ohVzvo.roa
Signing time: Thu 20 Feb 2025 07:21:02 +0000
ROA not before: Thu 20 Feb 2025 07:21:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 194.179.192.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Mar 2025 21:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:22:3b:3e:60:1a:b4:87:ee:e9:f3:aa:e0:28:de:3c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Validity
Not Before: Feb 20 07:21:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9828d7ca000bb96f7d6127e5815a68ee8855cefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:05:2a:b0:dd:6f:b8:7a:12:2c:91:15:0c:76:
d4:3e:6c:57:7b:ea:c9:2b:6c:c9:92:6a:73:4b:e0:
5f:d6:f8:53:0b:e6:4f:9e:a0:38:f7:c8:80:95:31:
f7:92:63:0d:dd:3b:12:ab:81:44:ed:b3:77:a7:80:
48:ba:8b:aa:ca:11:db:8f:81:6d:92:2f:40:7b:2b:
99:b9:11:4e:70:b1:70:5c:cd:40:58:af:10:41:30:
76:e4:1a:88:b5:5f:75:d0:70:f0:c0:7a:f3:3d:2b:
6f:1d:35:34:78:3b:d8:bd:e2:f1:41:a6:b4:a8:fa:
35:67:e4:3f:7d:29:95:5b:54:ae:61:dd:4c:c9:1c:
7c:8d:dd:69:86:f0:11:40:a8:32:e0:33:b4:54:72:
0c:f4:c7:1e:b1:fd:7c:92:14:ec:c9:79:c2:d8:09:
55:ba:e8:84:5c:fd:13:0e:29:43:cc:89:59:43:d9:
09:9e:e5:50:d8:70:b5:66:5c:8a:6e:32:3b:86:6d:
6d:7b:2c:64:9d:cc:dd:23:5b:bf:0e:b1:88:a3:2c:
46:34:cf:ae:89:5d:51:01:6d:90:9e:90:2f:fb:76:
ee:d5:9f:47:98:33:76:dc:f9:6a:3b:bc:7f:83:9e:
25:fb:24:52:de:bb:09:54:ba:27:c8:93:9f:75:f3:
c1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:28:D7:CA:00:0B:B9:6F:7D:61:27:E5:81:5A:68:EE:88:55:CE:FA
X509v3 Authority Key Identifier:
keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/mCjXygALuW99YSflgVpo7ohVzvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.179.192.0/19
Signature Algorithm: sha256WithRSAEncryption
4e:d1:b6:bd:15:99:aa:33:75:a7:d1:b0:c8:5e:f1:aa:ca:65:
af:74:d6:4f:4a:78:d3:c2:1c:13:c5:8d:6f:3b:59:a6:2a:d7:
98:33:66:c6:9b:aa:b6:66:52:38:0c:b7:7a:d9:51:51:9a:1e:
84:d7:c7:13:b3:c4:f8:21:74:f6:c1:d7:0d:07:a6:b4:b1:f6:
35:45:4b:7b:0c:61:76:b1:73:8b:9e:f6:9e:e1:8e:10:e2:06:
a5:63:99:99:22:a7:4f:e9:48:b8:0f:d5:97:76:8b:ea:ef:4d:
8d:25:f0:02:50:ae:d8:88:83:94:ef:e0:6f:33:87:e3:d4:f2:
fe:67:38:72:87:23:b6:09:88:a8:4a:23:76:71:51:7f:8a:05:
85:f7:62:65:36:4e:b0:d3:cc:7e:63:99:fa:e6:a5:56:24:24:
f7:2e:58:9d:9a:1e:3d:0f:56:d9:06:dc:fc:37:63:36:e1:a3:
07:e0:58:43:f4:5c:6f:cb:cd:d1:a3:e5:72:15:13:43:89:f0:
9c:7f:f1:7f:5c:30:f2:1e:be:4d:da:9b:dd:90:c7:dd:16:48:
97:70:97:09:7f:13:83:6b:57:d4:a2:9f:37:47:2b:17:43:37:
c0:66:a3:00:2b:31:b5:95:48:bc:d2:0b:8a:36:d0:af:47:0a:
1e:32:b1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:40:57 2025 by rpki-client