Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/nUzgVlV2H1__F09LIjOZtQyIBc8.roa
File: nUzgVlV2H1__F09LIjOZtQyIBc8.roa (raw, json)
Hash identifier: bZb4daIA6vwwSLVrICRDDW3Xj2O/cdWHjKAVHc4h4r0=
Subject key identifier: 9D:4C:E0:56:55:76:1F:5F:FF:17:4F:4B:22:33:99:B5:0C:88:05:CF
Certificate issuer: /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial: 0195A5EA97EE00D9BF9698B611E94E0BD536
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/nUzgVlV2H1__F09LIjOZtQyIBc8.roa
Signing time: Mon 17 Mar 2025 21:02:49 +0000
ROA not before: Mon 17 Mar 2025 21:02:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 194.179.192.0/19 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 14:55:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a5:ea:97:ee:00:d9:bf:96:98:b6:11:e9:4e:0b:d5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Validity
Not Before: Mar 17 21:02:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d4ce05655761f5fff174f4b223399b50c8805cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e5:e1:3f:b2:6d:ab:8f:50:ef:ec:9c:e6:0b:
51:0e:c4:54:74:62:70:a4:0e:8e:9e:10:39:df:24:
6a:db:68:f1:6a:14:33:61:0a:e7:1f:a8:01:a7:d3:
6c:eb:5f:e0:67:2e:46:14:0a:17:f7:d2:0b:24:c8:
20:07:6a:da:02:24:83:41:c5:51:f4:d4:34:81:40:
61:db:8f:4b:08:4a:58:c8:ea:10:18:a2:3a:c4:ac:
fd:b8:a0:f2:4a:5c:74:7e:99:d7:7a:67:3c:01:35:
46:3d:67:c2:88:a1:c7:43:31:9a:9e:90:34:d7:2b:
99:f1:c0:83:0c:1a:d4:90:2e:26:dc:59:5c:4a:33:
a9:30:82:9f:c1:8c:2c:2a:96:9b:a7:67:6f:29:3c:
24:93:44:02:f3:9b:a3:8b:e5:4d:d3:90:16:1a:3f:
6a:36:2d:b3:fb:c2:07:91:70:dc:91:73:42:19:ca:
de:20:a4:9e:d8:d1:09:e3:f8:86:89:4d:5d:a1:1f:
13:17:40:99:5a:58:cb:94:2d:cf:67:a3:d5:e7:38:
f9:3b:00:bf:75:e3:d8:79:1a:38:7e:41:c9:c4:cd:
57:9a:3e:29:0f:6b:ae:58:53:da:ec:bb:d4:28:24:
9e:66:c3:8a:c9:22:e6:c0:fc:a1:6d:7a:92:c7:10:
93:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4C:E0:56:55:76:1F:5F:FF:17:4F:4B:22:33:99:B5:0C:88:05:CF
X509v3 Authority Key Identifier:
keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/nUzgVlV2H1__F09LIjOZtQyIBc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.179.192.0/19
Signature Algorithm: sha256WithRSAEncryption
d0:07:41:50:f1:f3:8e:37:69:4a:a5:eb:dd:a4:5d:6b:f9:53:
f6:03:56:09:1f:c8:09:de:a7:a9:2e:62:58:27:d5:c5:a3:7d:
c9:3e:ee:d1:e2:f8:a6:de:07:91:5c:2e:4a:67:69:36:23:94:
02:5a:70:95:fa:6e:12:b8:5c:3f:9b:8c:de:65:24:ea:ef:08:
a7:3e:4a:7d:5c:e0:f2:d7:7f:a3:d3:62:9f:05:53:dc:4a:e1:
e9:ca:09:b4:16:94:1d:da:42:f3:9c:b9:7c:b6:b7:6a:1e:80:
da:02:fc:20:be:95:f0:d6:8a:30:18:48:f5:05:19:8c:59:0f:
6d:9e:b2:63:37:1d:dc:3e:f5:08:2b:a4:7d:fc:e6:e9:07:25:
b9:e6:da:93:96:9a:fa:63:56:07:6e:d8:1a:5c:ad:67:f4:76:
d9:ea:ed:c1:51:ab:0d:70:6b:38:22:f3:5f:a0:d4:ca:e5:d9:
43:b7:84:65:45:c9:80:23:7c:41:60:c4:da:89:1d:02:ac:33:
62:d0:6d:51:57:c5:26:87:45:50:37:5b:1c:7f:9c:e7:35:66:
6f:9d:b0:14:19:21:44:2c:c2:df:d2:09:42:69:15:86:65:ec:
28:db:88:06:26:5f:53:84:e3:ba:25:af:dc:24:0c:8f:0e:fd:
10:16:c4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:39:20 2025 by rpki-client