Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/cUy03cmoxBs9ecpiellnnYh2J-M.roa
File: cUy03cmoxBs9ecpiellnnYh2J-M.roa (raw, json)
Hash identifier: bEqWwChXKGXBAw6cx6XKa48Fq3Fd9yCHk3Z3feWr0pk=
Subject key identifier: 71:4C:B4:DD:C9:A8:C4:1B:3D:79:CA:62:7A:59:67:9D:88:76:27:E3
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 01953F49E6BA845B387178AA8A7D4722BAA4
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/cUy03cmoxBs9ecpiellnnYh2J-M.roa
Signing time: Tue 25 Feb 2025 22:46:02 +0000
ROA not before: Tue 25 Feb 2025 22:46:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136787
IP address blocks: 176.96.88.0/24 maxlen: 24
176.96.90.0/24 maxlen: 24
176.96.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Feb 2025 23:41:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3f:49:e6:ba:84:5b:38:71:78:aa:8a:7d:47:22:ba:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Feb 25 22:46:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=714cb4ddc9a8c41b3d79ca627a59679d887627e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:75:38:46:bf:68:b1:8f:bc:a0:fa:e7:36:be:
99:04:c6:d5:44:73:67:87:75:53:61:66:9f:12:32:
f5:1e:f0:0f:04:b3:2d:af:8f:23:51:d4:b4:07:84:
d8:fd:df:dc:98:39:98:ac:8d:b1:4e:a4:9f:3d:b3:
4d:1a:b8:0d:90:d5:fa:23:33:fe:31:78:a6:1a:0c:
01:89:06:8f:b2:5b:54:a4:58:29:ed:79:01:99:38:
56:e1:25:6e:58:8e:43:27:b1:f1:de:07:b9:44:68:
46:f2:d1:b4:67:83:a4:20:d4:5c:24:12:8f:ba:32:
10:f2:ad:6a:57:f8:72:28:01:e9:ae:c4:90:e4:3c:
60:d5:2c:4e:46:a6:12:29:4c:5a:dd:03:21:cd:3f:
c6:a3:4e:e7:58:bd:31:d0:8d:3a:91:d7:c0:76:02:
01:ca:76:fd:6a:ea:ae:a2:5f:15:59:db:91:0c:0a:
d1:7e:04:ed:5d:29:a5:35:53:cf:87:81:03:14:01:
91:4e:4d:66:39:6e:48:63:96:8d:19:28:6a:a7:08:
11:85:df:e1:ea:58:23:73:6d:d3:bf:52:41:02:05:
53:af:e8:28:9b:d4:4c:51:07:b6:1e:0b:56:7e:cb:
2a:4b:49:87:2f:eb:c5:c6:1f:f7:7f:51:a2:31:4c:
90:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4C:B4:DD:C9:A8:C4:1B:3D:79:CA:62:7A:59:67:9D:88:76:27:E3
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/cUy03cmoxBs9ecpiellnnYh2J-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.96.88.0/24
176.96.90.0/23
Signature Algorithm: sha256WithRSAEncryption
29:41:89:22:bc:19:3a:87:cd:11:6e:d6:fe:c6:49:24:2c:b8:
32:d2:8f:f2:34:e1:79:ed:3a:7b:1e:19:c1:d9:36:2f:ad:9a:
22:1b:97:10:c8:3b:ed:c5:56:94:d7:b4:e3:1f:c8:57:2e:e5:
ee:b3:67:ba:e0:30:1f:1e:2e:03:e8:83:7c:ee:83:d4:00:4b:
85:ec:1e:46:9a:2b:9a:99:77:51:98:79:7b:b1:69:9f:be:51:
ea:d8:21:f4:94:fb:4c:ef:67:d1:b0:ae:0a:ff:64:eb:d6:4a:
03:6f:54:71:44:1e:72:7d:e9:7f:ef:3e:bc:19:57:1e:37:de:
e1:e3:1d:2a:6e:de:c8:8a:f1:5f:b4:c2:72:ae:d7:cc:ef:67:
b6:ae:a8:93:be:d4:c0:39:9f:66:dd:ae:9c:48:f4:c3:5d:fe:
e2:7f:62:9f:8a:5b:98:b5:f8:53:79:53:b8:97:88:9f:06:d5:
23:57:a7:49:c2:6e:ca:4a:d3:a6:d1:7e:d4:a6:83:b8:73:d0:
67:b0:30:5c:5b:5d:78:89:96:ac:33:e6:7e:96:84:07:d2:ec:
ea:3d:28:84:7e:54:49:76:b6:d6:2e:f2:36:15:07:aa:3c:8c:
bb:d2:eb:df:13:94:c5:ea:c0:68:81:4f:a2:a2:97:f3:32:1d:
31:bd:71:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:32:56 2025 by rpki-client