Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4F_EV2sl-b3ymnw-s8T7K7SmbpI.roa
File: 4F_EV2sl-b3ymnw-s8T7K7SmbpI.roa (raw, json)
Hash identifier: XtPceXaAqKtwYjiMkOq/TU6rfgjYhm6cw4YERWIjshs=
Subject key identifier: E0:5F:C4:57:6B:25:F9:BD:F2:9A:7C:3E:B3:C4:FB:2B:B4:A6:6E:92
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0194186B180916C1FD44A3F72BDB0269120D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4F_EV2sl-b3ymnw-s8T7K7SmbpI.roa
Signing time: Mon 30 Dec 2024 16:34:19 +0000
ROA not before: Mon 30 Dec 2024 16:34:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215346
IP address blocks: 193.124.15.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:51:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:18:6b:18:09:16:c1:fd:44:a3:f7:2b:db:02:69:12:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 30 16:34:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e05fc4576b25f9bdf29a7c3eb3c4fb2bb4a66e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6f:b3:0c:5d:e8:14:47:1e:8b:63:27:4e:f9:
b5:67:bb:1f:24:60:87:12:a3:1a:d1:8d:f7:c1:86:
fb:23:dd:aa:fd:d2:c5:67:97:a3:06:db:ea:f1:55:
48:e1:74:6e:ef:64:d1:44:a1:fb:88:9e:0c:a8:ba:
a2:d3:74:43:80:af:89:1d:78:39:f7:38:16:ce:59:
25:ab:17:ec:4c:1f:74:04:f2:1c:a9:e3:7b:56:14:
39:91:b6:14:d4:2b:39:13:19:93:ec:d6:fd:fa:05:
ed:d1:a9:91:b9:4d:03:3c:31:5a:6b:d2:df:46:10:
db:e3:ec:48:8a:72:cb:c6:c9:68:51:04:d1:d5:1c:
59:c7:d5:66:62:cb:d0:4c:1a:d1:06:5e:be:2b:33:
9b:47:49:7e:8a:4e:e4:58:ff:aa:9e:59:9b:dc:f7:
93:f6:35:5f:d3:37:fc:de:47:ca:6b:c5:95:4b:61:
bc:8c:70:d1:52:6a:58:c6:28:93:ee:70:1d:de:56:
7f:15:07:0a:f0:95:95:21:ed:64:a0:0f:a5:0b:13:
8a:18:cb:07:48:0f:00:a9:d2:c9:6f:0f:be:b5:7d:
5c:41:39:58:22:5b:1d:9b:43:ce:e7:90:2c:17:b9:
00:35:c0:ba:2c:80:5a:97:02:b9:01:74:62:16:9a:
09:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5F:C4:57:6B:25:F9:BD:F2:9A:7C:3E:B3:C4:FB:2B:B4:A6:6E:92
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4F_EV2sl-b3ymnw-s8T7K7SmbpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.15.0/24
195.133.94.0/24
Signature Algorithm: sha256WithRSAEncryption
68:5f:39:5f:eb:08:f0:fb:77:63:d6:50:4d:cf:b5:6e:4f:0d:
a1:0c:f7:b1:75:83:97:44:03:a2:1c:87:a6:77:32:9e:f4:22:
51:28:a5:ee:d7:79:63:4a:67:e3:5f:2c:96:14:4e:f0:0b:7c:
83:72:15:55:9c:68:81:d2:ac:26:f4:8c:be:c1:df:f1:b3:5d:
e3:7d:dd:e3:20:6f:36:8a:98:75:6b:0b:fc:4a:4c:2c:50:cd:
b9:ae:bf:a2:de:83:87:55:16:b5:37:7e:d5:05:be:c5:02:57:
93:0c:fd:14:96:d4:f0:c9:48:6f:b4:22:70:cc:8f:84:7c:28:
00:c0:bf:c4:59:e5:c5:8c:34:53:16:5d:8d:2a:d6:34:84:c4:
30:99:88:00:ba:8c:84:cd:35:9a:b7:db:e6:39:d3:3f:a7:ba:
e7:ff:bb:2a:38:b9:56:b8:81:99:4e:1d:53:31:2d:a5:c3:9f:
a8:04:6b:dd:37:18:e9:bd:8b:5d:f0:18:f8:9c:2d:d6:f3:af:
e3:1a:dd:94:9c:d8:7b:93:b8:7d:39:d4:9a:2d:61:0d:f0:65:
01:b0:4a:23:83:9b:d3:ee:78:45:b6:ca:1b:e2:d3:ea:eb:e1:
bf:d3:34:01:b2:53:e0:56:7a:3f:d2:af:5e:3c:bb:b3:fb:2a:
76:d7:e7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:16:43 2025 by rpki-client