Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/sZWPaxj3o7dJqiBJGcQ_ZlSOI-c.roa
File: sZWPaxj3o7dJqiBJGcQ_ZlSOI-c.roa (raw, json)
Hash identifier: zxeVB7p+B0lDUYrg+Lk8IkAt7uYVlmrkLo2Dsl8E/1k=
Subject key identifier: B1:95:8F:6B:18:F7:A3:B7:49:AA:20:49:19:C4:3F:66:54:8E:23:E7
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 018D7F635FCEEF8521D66DB7C0D5344166D4
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/sZWPaxj3o7dJqiBJGcQ_ZlSOI-c.roa
Signing time: Tue 06 Feb 2024 17:07:15 +0000
ROA not before: Tue 06 Feb 2024 17:07:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197927
IP address blocks: 130.255.174.0/24 maxlen: 24
146.19.85.0/24 maxlen: 24
193.42.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Nov 2024 14:57:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:63:5f:ce:ef:85:21:d6:6d:b7:c0:d5:34:41:66:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Feb 6 17:07:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1958f6b18f7a3b749aa204919c43f66548e23e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6b:7b:28:81:b7:03:17:82:ce:e5:33:59:77:
db:97:20:8c:16:71:57:0d:fe:19:a7:8c:bb:d3:16:
26:d2:10:eb:65:0c:2a:3d:1f:29:72:34:ac:48:17:
08:c6:a5:69:d8:a2:d9:10:28:af:0c:fb:43:6e:05:
29:3a:3c:3d:f2:60:74:fc:24:3a:f7:54:17:2d:30:
d5:64:f1:a9:17:74:5d:79:9b:5a:a1:2b:25:09:3e:
33:dc:22:3e:7d:99:b5:35:fb:98:96:92:aa:73:17:
8b:a0:b1:34:44:0a:0c:54:0e:24:40:50:d6:db:2b:
8c:4c:05:6d:c1:a3:29:34:95:b6:af:17:6f:4e:9c:
57:66:e0:0f:d0:37:7a:f8:6a:e9:46:b1:20:b4:58:
af:bd:0d:82:4d:42:0c:14:4c:2c:17:0a:e4:95:f3:
e4:c6:03:ce:fb:05:71:cf:41:f9:21:a9:7a:5a:a7:
00:e2:fb:46:51:03:87:1a:7e:fe:11:d9:e9:3b:bf:
34:82:a1:80:12:3d:42:45:0c:3a:5d:77:55:39:8c:
27:94:33:42:07:ad:2a:c6:c0:88:56:b5:b3:c2:11:
af:66:a6:ad:66:10:bf:02:a0:ef:d2:8e:b4:0d:b7:
09:a5:35:79:8d:a8:b4:8b:96:73:31:73:8d:9c:6c:
91:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:95:8F:6B:18:F7:A3:B7:49:AA:20:49:19:C4:3F:66:54:8E:23:E7
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/sZWPaxj3o7dJqiBJGcQ_ZlSOI-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.174.0/24
146.19.85.0/24
193.42.214.0/24
Signature Algorithm: sha256WithRSAEncryption
15:2c:ce:bf:92:f4:8c:2d:54:e9:cd:62:86:6e:0b:fe:fc:9f:
19:4a:73:b0:03:0c:f4:cc:4a:a3:92:95:d1:3d:0c:45:c6:7d:
68:c6:f3:3d:4f:06:5c:a0:ab:17:f0:07:50:fe:76:49:7f:44:
d8:40:a4:8e:f2:b8:5a:c6:11:30:70:02:25:2c:72:a5:e7:a3:
d3:d3:24:f6:7f:17:8e:02:a7:96:5e:82:45:7b:e7:c0:b7:9a:
ca:a3:9a:34:15:7f:17:2a:de:17:e7:5c:54:d4:4c:29:0a:bf:
db:e5:d3:95:26:83:37:00:c4:46:fc:d3:01:b9:45:a5:a5:e1:
af:f9:76:44:34:eb:42:20:bc:d2:22:df:5d:18:91:5b:0c:5a:
ac:32:28:b2:c9:6d:cf:44:0a:86:e2:ff:04:dd:8b:5a:36:39:
78:af:4c:87:6c:62:1e:64:a7:9a:84:a5:d9:bd:dc:61:60:f7:
85:18:9e:5f:0f:cd:8e:5f:ef:41:a8:b0:95:e7:5a:39:0f:bd:
32:48:a8:06:68:71:8e:8d:8b:94:64:4d:27:ec:c3:82:d9:84:
31:a5:06:9f:8f:e1:e9:6b:4a:85:30:d1:98:bd:17:f2:35:cc:
39:1f:6a:2e:4c:98:5d:0a:82:24:08:43:a5:d3:17:ba:92:ae:
6b:9e:2b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:30 2025 by rpki-client