Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/vJrm0N8cQ_sGEDAn3qdXTGrylvs.roa
File: vJrm0N8cQ_sGEDAn3qdXTGrylvs.roa (raw, json)
Hash identifier: XzRmm2HrHOPW+SyB05FgNMQIJtwXtjkKyIX6XBlbVy0=
Subject key identifier: BC:9A:E6:D0:DF:1C:43:FB:06:10:30:27:DE:A7:57:4C:6A:F2:96:FB
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01967B5F139A784487F9328A6AC4F052A9E3
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/vJrm0N8cQ_sGEDAn3qdXTGrylvs.roa
Signing time: Mon 28 Apr 2025 07:49:10 +0000
ROA not before: Mon 28 Apr 2025 07:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 195.114.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 May 2025 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:5f:13:9a:78:44:87:f9:32:8a:6a:c4:f0:52:a9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Apr 28 07:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc9ae6d0df1c43fb06103027dea7574c6af296fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:3b:47:5f:43:20:25:da:3e:89:77:ad:98:
53:8f:eb:56:03:6f:61:ee:38:ee:c8:bc:ce:76:5b:
76:5f:6a:e9:5c:66:65:2a:d0:5e:20:43:f5:95:5f:
42:cc:62:89:ac:80:84:b0:80:2f:2a:29:16:b5:ec:
eb:d9:66:8c:4a:e1:4d:f9:23:8b:ca:5b:96:4f:92:
38:0e:7c:d6:f4:ad:63:90:d6:c1:c9:ce:03:da:df:
b9:68:86:4e:48:4a:f5:b8:98:af:bd:ff:b8:ac:b1:
8f:fa:2f:a4:f3:08:c8:9a:5e:de:74:6b:35:84:b8:
7d:5a:d4:0e:58:b4:07:6d:69:82:b8:29:8e:ee:c5:
5b:d5:1d:3a:84:e2:9e:78:b1:00:27:aa:bf:20:05:
d7:b0:3c:50:7c:49:0f:f9:00:7e:f1:78:cb:6d:ae:
d2:e3:00:41:06:dc:2d:ea:0e:c5:77:64:2b:49:c7:
8b:0d:03:44:ef:46:d0:5a:a6:38:0c:f8:9e:0c:f5:
19:05:c6:0b:fc:68:1e:0c:0b:3c:c6:1a:52:11:a6:
8e:3b:06:4e:b5:e6:d3:96:6e:1b:0e:c2:ad:fa:70:
ba:9a:2a:eb:c8:96:eb:e8:d2:b0:73:51:1b:af:94:
d3:60:3c:b8:ee:b2:fd:6f:45:dd:fa:d3:be:61:4d:
88:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9A:E6:D0:DF:1C:43:FB:06:10:30:27:DE:A7:57:4C:6A:F2:96:FB
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/vJrm0N8cQ_sGEDAn3qdXTGrylvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.198.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ca:db:41:ab:17:ea:f5:dd:9b:bb:43:f6:09:56:f1:d9:0a:
2e:e0:5a:49:fd:14:9d:ba:60:9d:85:25:ac:a0:74:ae:71:26:
4b:0c:1f:14:9b:4b:6b:d4:c8:c9:82:98:3c:c8:e3:3d:17:d0:
4e:a2:21:ca:4b:bf:f6:11:73:62:bb:95:66:83:01:3e:4d:46:
ed:51:72:b7:94:ff:69:04:5c:16:5b:30:8b:23:1e:f0:c0:2f:
5e:f0:e1:42:96:26:59:6a:ce:4e:bd:c5:71:2e:b0:f6:de:1f:
c1:d7:11:45:ea:88:3a:68:33:a6:73:4c:2d:11:e0:b9:ea:e0:
ec:a9:80:6c:b3:ff:9e:09:ed:70:d4:f9:8e:44:2a:b9:21:92:
4e:c5:fb:1c:dc:92:10:af:2e:4e:3f:08:6a:d1:a1:69:d5:d8:
52:34:af:35:3a:73:23:43:ff:29:cb:86:45:5a:f2:6c:48:60:
2c:7e:c1:65:a1:e0:f4:d7:ff:be:2f:17:7e:76:c2:90:ee:9c:
e7:7d:35:34:07:8a:a2:5e:7a:02:11:de:ef:c0:26:07:0f:36:
a9:d8:d9:aa:42:8a:97:aa:74:09:53:93:22:b6:1e:19:9d:23:
54:58:bf:93:bb:a4:bb:5a:bc:3f:e1:f3:f3:25:d0:11:a2:54:
6a:da:a3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:44:35 2025 by rpki-client