Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cFv2InYRH4fmpC8jPIilQL_8gCw.roa
File: cFv2InYRH4fmpC8jPIilQL_8gCw.roa (raw, json)
Hash identifier: XbztZDIaVITq+hCPfhQJyP/TTTZThyGvVaQZitLv3uE=
Subject key identifier: 70:5B:F6:22:76:11:1F:87:E6:A4:2F:23:3C:88:A5:40:BF:FC:80:2C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0194C75A2C123BFB68B289EC9B638564BF9B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cFv2InYRH4fmpC8jPIilQL_8gCw.roa
Signing time: Sun 02 Feb 2025 15:49:22 +0000
ROA not before: Sun 02 Feb 2025 15:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215224
IP address blocks: 194.87.53.0/24 maxlen: 24
212.192.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 17:19:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c7:5a:2c:12:3b:fb:68:b2:89:ec:9b:63:85:64:bf:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 2 15:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=705bf62276111f87e6a42f233c88a540bffc802c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:08:66:8a:f7:0c:81:c7:c3:c4:4d:05:91:a3:
0b:1b:83:47:4f:fc:00:f5:f6:5c:0d:c9:aa:91:da:
6a:d2:e0:ed:f9:95:d9:44:9e:b1:f4:67:79:ae:ac:
28:2c:84:0a:ef:18:e2:c5:c5:b4:c8:4e:0a:4b:a2:
a1:c4:60:a1:cd:4b:a1:a4:65:64:e5:42:ac:a7:ca:
56:77:ea:a0:47:92:7d:64:f7:c4:b9:ab:cb:58:a8:
14:cb:95:fc:e3:a9:39:e1:09:8b:7b:f0:91:46:b5:
e3:20:bf:4b:4a:7c:72:53:2d:10:10:8a:89:54:bc:
07:7b:3b:c1:45:79:3f:dc:40:56:82:42:42:91:59:
3c:ab:74:ff:92:13:4b:7e:60:c5:35:29:56:e9:de:
4e:5d:1d:30:c3:50:62:01:0e:91:3d:63:f1:6c:d2:
ca:21:63:c1:06:a3:b9:bb:b5:ef:43:13:25:04:7d:
6c:2c:90:b3:27:e6:7b:d8:22:58:56:af:0e:99:25:
a3:1c:14:60:5a:d4:85:9a:10:d0:95:72:6b:57:a3:
7f:69:8b:33:e1:bf:8b:b6:e6:3d:2d:56:f8:5d:dc:
94:67:35:ea:bb:38:85:8a:47:2b:4a:4b:8c:26:47:
e5:33:10:40:e9:2e:79:7d:53:ed:a5:87:ce:3e:83:
0d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5B:F6:22:76:11:1F:87:E6:A4:2F:23:3C:88:A5:40:BF:FC:80:2C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cFv2InYRH4fmpC8jPIilQL_8gCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.53.0/24
212.192.247.0/24
Signature Algorithm: sha256WithRSAEncryption
92:42:12:ba:bd:23:dc:97:d0:1c:00:15:c2:45:b9:21:e0:39:
59:ec:ee:48:17:c6:a1:16:0e:0e:31:e6:88:5b:33:26:3a:d2:
f8:46:8c:36:ae:27:21:b4:13:11:2d:ff:5f:32:da:d7:d0:12:
7b:ff:48:aa:db:91:aa:7d:c8:86:5d:cc:76:ea:ca:f0:38:61:
2e:b6:46:99:9c:1b:6c:94:e5:ed:b3:0a:f1:25:95:63:9e:50:
8e:84:cd:75:a4:65:cd:0e:ba:42:14:5f:1b:24:8c:3f:61:8d:
72:75:bf:c4:3a:c9:7c:47:32:6f:67:96:0d:ea:2c:76:28:cb:
71:2e:26:97:98:fd:5f:f8:6e:b0:7d:6a:7c:92:01:5c:fd:de:
ab:ec:9f:c5:07:52:06:ec:66:a8:40:4f:01:e9:37:7b:de:17:
10:41:eb:2f:f5:cd:2a:64:cb:9f:00:0a:72:b5:2c:6e:cd:a3:
2e:76:d4:73:69:88:cf:b7:17:90:53:d1:61:49:63:b8:49:5f:
4d:c9:36:5e:c9:dc:7b:75:c2:61:14:d2:d7:e4:67:c7:76:47:
c7:5f:5b:1b:49:53:77:d6:2c:a3:44:b4:87:c0:64:58:5e:e1:
51:e2:14:f4:49:b4:18:97:0e:fc:f6:96:92:15:68:3d:74:4f:
51:77:66:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:40:28 2025 by rpki-client