Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/wiYzsjUHBoFDTAUV4-NsiZxerM4.roa
File: wiYzsjUHBoFDTAUV4-NsiZxerM4.roa (raw, json)
Hash identifier: zXyEKo9i/zxSUuQwDuOSqU58LlPxkyV+OyzpHePFkS0=
Subject key identifier: C2:26:33:B2:35:07:06:81:43:4C:05:15:E3:E3:6C:89:9C:5E:AC:CE
Certificate issuer: /CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
Certificate serial: 0194B76FD300CD1B2EACDCD96E93A841C2FD
Authority key identifier: 7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/wiYzsjUHBoFDTAUV4-NsiZxerM4.roa
Signing time: Thu 30 Jan 2025 13:39:06 +0000
ROA not before: Thu 30 Jan 2025 13:39:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44949
IP address blocks: 195.160.203.0/24 maxlen: 24
2a07:ec80:230::/48 maxlen: 48
2a07:ec80:231::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 03 Feb 2025 07:49:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:6f:d3:00:cd:1b:2e:ac:dc:d9:6e:93:a8:41:c2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
Validity
Not Before: Jan 30 13:39:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c22633b235070681434c0515e3e36c899c5eacce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:d8:4b:e4:b2:ff:8d:86:3c:29:59:86:d5:
ae:5a:65:67:e7:76:63:ec:d3:4b:8b:da:38:ec:4f:
5f:ea:ca:ea:ab:51:b7:ca:bf:0c:53:df:cf:dc:69:
a5:71:46:5f:64:51:83:e1:7e:6f:84:ab:3b:cc:50:
5f:59:25:ec:44:9b:2b:96:2a:95:b5:86:dc:2a:93:
7a:c4:e0:e6:92:2b:20:ef:15:42:0c:f8:30:4f:a9:
6a:c4:39:c6:54:03:6e:38:48:90:c3:37:9f:ec:e1:
3b:0b:be:a4:93:08:be:53:a9:a6:a7:8f:64:66:4c:
15:38:72:7a:6f:2f:99:96:f0:34:1e:66:85:14:48:
1f:34:8a:f4:50:27:72:5a:0f:97:46:ca:9c:58:f1:
7c:f9:2d:8d:ea:9f:fa:66:4c:33:6a:b7:d1:0b:b1:
cb:71:f3:11:69:9f:fd:b7:d4:2c:6d:fa:78:46:66:
2f:52:49:95:1b:f9:aa:81:ca:6a:9c:21:1c:3c:36:
68:a8:fe:3b:5b:d4:92:62:b9:cc:eb:c8:62:34:dd:
ea:37:cd:30:f0:a8:cf:df:96:ea:ec:72:73:b4:66:
8a:da:80:ac:11:e4:59:65:ce:99:74:7a:8e:b4:00:
75:f6:6c:18:01:19:d1:8d:fa:7d:d5:05:f7:3e:c3:
2a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:26:33:B2:35:07:06:81:43:4C:05:15:E3:E3:6C:89:9C:5E:AC:CE
X509v3 Authority Key Identifier:
keyid:7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/wiYzsjUHBoFDTAUV4-NsiZxerM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.160.203.0/24
IPv6:
2a07:ec80:230::/47
Signature Algorithm: sha256WithRSAEncryption
61:2d:b2:3d:3b:0d:b6:74:76:d3:d4:37:4a:35:48:74:d6:8f:
10:3a:24:84:69:95:b8:f0:61:b8:8f:2e:02:7b:14:82:62:50:
06:1d:84:5f:76:b8:d3:5d:10:fc:b3:af:25:79:3a:f8:a6:72:
38:be:e0:f1:6a:28:b4:5c:f5:c0:33:65:ef:e2:ca:72:0b:b3:
93:47:64:8c:83:49:a3:4d:0c:d2:18:82:c8:14:72:80:45:a2:
d8:40:66:0b:f7:e9:9b:11:4a:5b:d6:ed:c5:d1:45:c6:92:3f:
22:c1:31:a9:35:b4:42:17:f9:94:95:a5:ff:6b:4f:71:3b:cf:
aa:ec:01:da:e9:1a:fc:6c:fd:3f:4a:fe:d6:50:8b:29:8f:37:
b8:42:7d:ca:1d:f3:fd:e5:6d:c8:ab:bb:1c:8d:dc:9b:f9:c2:
4c:5f:0d:c3:81:c8:bc:c4:fb:37:2e:8c:a1:69:fb:c9:6e:ff:
59:08:e6:ba:4f:16:1b:79:ca:3d:e1:d2:f9:fd:07:85:41:d0:
7f:f7:93:ee:f7:36:62:d9:16:08:25:1f:a7:9a:06:7f:2f:ef:
71:0b:f5:b2:97:02:83:55:9c:e2:f5:71:c1:85:ec:e3:15:e2:
07:c4:f6:46:05:e5:97:95:ea:58:b7:92:9a:3d:78:ba:78:f6:
17:56:ac:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:56:24 2025 by rpki-client