Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/FzqGvTlTJKX6QrlueflDE448H8c.roa
File: FzqGvTlTJKX6QrlueflDE448H8c.roa (raw, json)
Hash identifier: zPaoeMoUTbgSFWJ/tW14XNUkrVV6TKzs1ABpqcOIgsk=
Subject key identifier: 17:3A:86:BD:39:53:24:A5:FA:42:B9:6E:79:F9:43:13:8E:3C:1F:C7
Certificate issuer: /CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Certificate serial: 019424458141589411E1DD23C914A1F68F54
Authority key identifier: B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/FzqGvTlTJKX6QrlueflDE448H8c.roa
Signing time: Wed 01 Jan 2025 23:48:42 +0000
ROA not before: Wed 01 Jan 2025 23:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60550
IP address blocks: 194.124.204.0/22 maxlen: 24
195.180.152.0/22 maxlen: 24
2a13:b240::/29 maxlen: 36
Validation: Failed, certificate revoked on Thu 16 Jan 2025 13:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:81:41:58:94:11:e1:dd:23:c9:14:a1:f6:8f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Validity
Not Before: Jan 1 23:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=173a86bd395324a5fa42b96e79f943138e3c1fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:f4:bc:ae:0e:fa:cc:4a:76:7a:72:a9:ba:
08:cd:53:a1:0a:8b:95:95:18:65:ca:24:e5:5a:f7:
e0:85:78:61:49:8d:8a:15:d6:22:1f:b3:6f:cf:2d:
8d:82:03:a8:10:22:6a:63:e2:15:c3:fe:75:03:fa:
e9:44:a9:a2:6e:d2:6c:84:62:83:a6:55:77:04:90:
df:3e:78:54:89:9f:bf:0b:87:a9:d9:e3:eb:66:ec:
18:ca:34:e8:dc:5a:0f:58:42:6a:17:f3:64:d4:cf:
49:3e:c0:0a:6b:38:a9:c4:70:8d:61:9c:97:f2:ea:
e2:56:3f:fb:a4:49:cb:93:9a:91:18:e9:7e:30:35:
b3:8e:26:85:38:8c:6c:cc:71:12:6d:1d:97:86:35:
1b:aa:fd:e9:63:34:96:e1:0e:d4:76:de:57:1f:ec:
67:c4:1f:5b:ee:f0:4a:49:34:4b:3e:da:4f:ef:83:
4e:f9:4f:f4:94:22:ad:2f:46:aa:79:5d:4f:ee:6e:
50:b2:58:88:8f:a8:5b:ce:61:69:d4:06:8e:4c:34:
50:d5:28:65:c5:ae:cd:4b:72:ff:7f:e9:70:ce:d0:
4f:c4:a1:39:3e:7f:9a:ea:72:31:e5:43:97:f6:1a:
50:94:34:12:ad:5c:7a:07:f3:7f:da:31:85:43:34:
a4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3A:86:BD:39:53:24:A5:FA:42:B9:6E:79:F9:43:13:8E:3C:1F:C7
X509v3 Authority Key Identifier:
keyid:B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/FzqGvTlTJKX6QrlueflDE448H8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.204.0/22
195.180.152.0/22
IPv6:
2a13:b240::/29
Signature Algorithm: sha256WithRSAEncryption
ad:d3:89:03:c7:1f:1f:a6:74:f2:ee:b5:32:c1:4e:d3:06:f3:
32:6e:f2:cd:24:98:0f:05:34:5b:1a:a0:05:f3:cf:2d:91:5c:
14:42:ca:45:3e:48:96:14:e4:bb:94:c9:8c:02:d5:9d:ea:41:
a2:56:c0:d7:89:4e:99:f7:00:7f:3d:5b:40:33:fe:61:b1:35:
0b:3d:6e:09:2c:42:3a:ca:9f:a9:2e:f2:05:89:cf:e1:5f:93:
d9:df:6f:f4:b2:95:c5:c5:3d:02:ca:72:21:30:6f:84:4c:53:
15:96:e7:d1:0d:2d:48:8c:5b:6d:e6:97:86:23:23:b7:2f:b4:
b5:ee:c5:0d:6c:3e:35:d5:a0:af:09:c6:34:52:23:86:3b:6b:
2b:ed:c4:fc:b2:c8:a2:b8:0f:5a:22:7b:eb:7b:db:9e:93:dd:
b0:16:04:2c:d4:0a:f0:d9:f1:cd:7c:f2:4a:72:76:3e:4a:c0:
f1:8a:15:9a:88:2d:9b:56:8b:6f:11:b7:0a:f2:55:c3:07:a6:
f9:00:12:6e:81:f2:c6:2d:77:b1:c7:cc:d1:b9:62:27:42:e9:
b7:6c:0f:8a:b2:9b:4b:26:62:e1:e3:6f:db:87:90:e0:c6:b8:
fc:07:db:34:8e:7d:80:44:e2:f5:26:a6:1e:51:99:75:ec:1a:
e4:2f:62:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:08:54 2025 by rpki-client