Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/AfLAu3329XDwVBD4K7MHNAk8iCM.roa
File: AfLAu3329XDwVBD4K7MHNAk8iCM.roa (raw, json)
Hash identifier: +0JyM0Waq88zM+5i/lKfv7QZD1XTrZ1cs3NAnJTZ4Bo=
Subject key identifier: 01:F2:C0:BB:7D:F6:F5:70:F0:54:10:F8:2B:B3:07:34:09:3C:88:23
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 0193FE3530BF5858A6EB54E9C88A619A52D7
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/AfLAu3329XDwVBD4K7MHNAk8iCM.roa
Signing time: Wed 25 Dec 2024 14:25:18 +0000
ROA not before: Wed 25 Dec 2024 14:25:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211056
IP address blocks: 89.47.201.0/24 maxlen: 24
89.47.202.0/24 maxlen: 24
92.114.50.0/24 maxlen: 24
2a01:5500:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:fe:35:30:bf:58:58:a6:eb:54:e9:c8:8a:61:9a:52:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Dec 25 14:25:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01f2c0bb7df6f570f05410f82bb30734093c8823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:95:04:d0:f5:5c:51:fb:84:a5:1c:72:03:8d:
9f:35:82:82:5e:ad:79:31:2b:9b:a1:5c:47:dd:e7:
52:49:44:ad:2b:28:8a:f8:6b:5c:0e:37:d7:bd:c1:
e9:b6:a3:83:14:e0:87:5b:b0:bb:15:84:8c:53:65:
b5:53:40:be:11:bb:77:30:d2:76:41:9e:65:07:99:
07:1f:16:e3:b6:1a:a5:12:4a:d0:7c:78:08:f2:26:
54:b3:6f:ee:b8:68:48:43:aa:ba:ff:aa:ae:bb:b0:
98:33:64:a4:aa:5d:d3:db:41:85:bd:1a:d2:35:6f:
bc:db:66:bf:fc:5f:50:47:35:ee:58:37:c0:cf:c7:
9f:08:9e:98:2d:d6:d8:64:73:c2:26:90:c9:4a:1b:
1e:9b:41:28:1f:34:9e:52:0e:9d:9a:e8:11:a4:00:
78:f6:f7:8d:90:5d:b4:76:71:f7:1b:98:6b:45:0e:
94:83:ad:43:25:32:2d:ce:db:3d:de:14:11:4d:eb:
78:fd:a7:7e:cc:c7:55:61:ff:e7:6a:9a:8e:f4:13:
c6:2d:23:b8:ac:50:87:81:ab:c2:86:b9:99:8e:60:
90:af:2b:58:4f:f9:5b:19:13:0c:f6:01:f1:b5:dc:
0a:a6:f2:01:85:26:32:f2:d6:7b:82:dc:6f:20:9e:
ba:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F2:C0:BB:7D:F6:F5:70:F0:54:10:F8:2B:B3:07:34:09:3C:88:23
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/AfLAu3329XDwVBD4K7MHNAk8iCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.201.0-89.47.202.255
92.114.50.0/24
IPv6:
2a01:5500:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
71:fb:59:df:d5:9e:81:26:7d:40:cf:bc:86:63:f6:6e:af:13:
34:a7:04:e9:69:a1:43:57:59:d1:0f:43:ad:b8:9d:a5:63:d8:
7f:8c:91:1d:b1:d8:75:9b:3d:65:ad:2b:02:35:ea:8a:69:24:
0d:f0:31:70:24:2b:18:d2:f0:d6:99:4e:50:45:f5:2a:32:02:
33:6b:11:e9:6c:71:01:2e:dc:24:5c:2f:f1:71:fd:c8:43:ae:
0f:e5:9a:d5:63:99:8e:a2:ae:59:31:a1:ea:a3:42:14:58:69:
d3:83:d4:9f:78:dd:60:f2:5f:cc:fe:fd:3b:d4:9c:0c:03:ea:
ba:ba:2f:b6:4b:ba:34:90:a0:a5:51:4e:f3:eb:f2:9f:35:57:
3d:9a:51:0e:16:f2:20:a5:b3:8b:06:dc:ca:ee:66:00:a0:e7:
03:af:64:7b:5c:0d:ff:b0:5d:df:7b:93:5e:0f:9b:41:d4:cb:
3d:3e:42:6d:25:73:b0:36:60:53:6a:6f:8b:5b:c6:0d:ff:dc:
85:eb:cc:ea:1b:3c:c0:fb:ea:fb:9e:f8:fe:d2:60:d3:80:6b:
4a:33:70:f2:52:d9:65:20:bf:aa:73:66:a4:8e:09:24:78:93:
71:fa:f8:8a:28:c7:eb:42:1c:e0:b1:9e:59:03:89:5e:d0:4c:
7a:aa:c0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:37:38 2025 by rpki-client