Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/2eGlalnfpX9_XXmv4pp78Ue_jKg.roa
File: 2eGlalnfpX9_XXmv4pp78Ue_jKg.roa (raw, json)
Hash identifier: yekZDR29Z9LfS1BtW1RFjl8JNcfaw/RzHdRR0ZwnDT0=
Subject key identifier: D9:E1:A5:6A:59:DF:A5:7F:7F:5D:79:AF:E2:9A:7B:F1:47:BF:8C:A8
Certificate issuer: /CN=2874e46bf636ea63e5d12362f551b80b27714780
Certificate serial: 0193D0480A9536AB0CA13CE43B4604E75D0F
Authority key identifier: 28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/2eGlalnfpX9_XXmv4pp78Ue_jKg.roa
Signing time: Mon 16 Dec 2024 16:23:22 +0000
ROA not before: Mon 16 Dec 2024 16:23:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203875
IP address blocks: 37.16.107.0/24 maxlen: 24
2a00:4cc5::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d0:48:0a:95:36:ab:0c:a1:3c:e4:3b:46:04:e7:5d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2874e46bf636ea63e5d12362f551b80b27714780
Validity
Not Before: Dec 16 16:23:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9e1a56a59dfa57f7f5d79afe29a7bf147bf8ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:0f:a2:1d:ea:c9:dd:8a:5e:21:24:b5:49:
2b:86:63:8e:3d:18:95:d2:9d:e8:44:24:5d:35:7d:
87:fe:96:f2:ff:93:ec:2f:7c:f6:80:44:cc:5b:fe:
34:bc:2c:53:b9:a4:4d:bf:a4:75:e0:10:4e:0e:92:
1f:b4:96:1e:bc:9b:73:55:42:0b:16:20:29:ed:a8:
8d:8a:e2:4d:b8:6b:82:3c:40:a5:3b:77:72:33:d1:
62:e8:c6:19:51:14:77:2d:7f:65:06:63:2e:6e:9f:
88:8d:ae:69:96:9a:89:82:b0:ce:5a:66:ae:ef:06:
ad:bd:9e:20:28:43:6f:60:e2:f6:44:c4:3e:48:c3:
27:25:22:2c:f0:e0:32:68:51:b6:6d:55:e6:9b:be:
83:dc:c2:df:9d:6b:f1:df:70:7a:63:10:13:10:43:
7a:1c:05:45:15:d3:5b:09:7c:30:3a:cd:85:f1:a1:
bc:dd:9f:55:88:dc:38:79:39:15:e0:3b:bf:eb:14:
bf:33:d1:65:f3:7a:4b:4f:43:84:75:b0:f3:40:31:
3f:a2:1f:3f:bb:a5:40:1e:1c:04:9f:a5:1a:cf:01:
dd:eb:64:bd:be:7a:87:1b:d5:e0:78:cf:4f:9c:c1:
b9:d8:96:b2:6a:26:83:f6:cb:10:af:d1:e5:20:ff:
68:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E1:A5:6A:59:DF:A5:7F:7F:5D:79:AF:E2:9A:7B:F1:47:BF:8C:A8
X509v3 Authority Key Identifier:
keyid:28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/2eGlalnfpX9_XXmv4pp78Ue_jKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.107.0/24
IPv6:
2a00:4cc5::/32
Signature Algorithm: sha256WithRSAEncryption
27:86:5b:dc:42:8f:c6:fc:7c:9a:89:3f:6b:d7:a3:53:5f:9c:
cd:bf:96:84:27:98:ba:3f:50:89:f4:45:b3:b0:62:7c:9c:5a:
9f:23:1d:5d:09:39:60:38:06:f3:1d:ec:5b:24:48:5f:d0:82:
c6:9c:06:e0:bd:5b:9c:b1:d4:9d:1c:f9:d8:39:f3:43:18:bf:
59:3d:13:9e:ed:c3:3d:e8:0c:41:ba:ab:32:7b:c7:81:cd:b8:
e3:8d:27:ed:5c:c9:e8:bd:ab:a4:1d:40:d0:a7:e2:86:b1:5b:
51:10:dc:9d:89:db:88:b2:e3:74:aa:24:3d:87:34:60:19:5f:
46:6d:8c:b2:14:56:d0:04:86:d9:0f:16:ec:aa:f1:e2:cc:c6:
94:3a:87:92:d9:24:3b:46:ee:a5:a7:f3:91:32:85:c3:6d:d7:
ea:fa:fc:00:ed:9f:bc:ce:6b:9e:3b:9d:55:7b:89:de:82:f2:
16:41:4d:70:77:ee:ab:32:dd:54:55:3a:d4:ca:7a:15:59:31:
ca:54:d9:08:7b:d1:16:37:08:84:03:17:3b:54:0c:42:12:0e:
98:a6:dc:ad:bc:93:be:ae:9b:1c:7b:23:cd:df:c0:e3:21:eb:
ee:6b:44:00:78:61:51:e6:35:b4:66:1c:5b:78:7f:2e:a7:b0:
08:96:a1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:14:32 2025 by rpki-client