Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/uEmfMDAf7ndLhvyEumt6iyeInuk.roa
File: uEmfMDAf7ndLhvyEumt6iyeInuk.roa (raw, json)
Hash identifier: cWvTSGjdUJf9j1h6XvUS9k6glAbDowTB0xsZoL31rwA=
Subject key identifier: B8:49:9F:30:30:1F:EE:77:4B:86:FC:84:BA:6B:7A:8B:27:88:9E:E9
Certificate issuer: /CN=a6a8f3436fd83e8af610f216808996e90acac75d
Certificate serial: 0195CE7C571E3700A1C5F2544A9EBEDFCD75
Authority key identifier: A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/uEmfMDAf7ndLhvyEumt6iyeInuk.roa
Signing time: Tue 25 Mar 2025 18:06:50 +0000
ROA not before: Tue 25 Mar 2025 18:06:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216068
IP address blocks: 195.10.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Mar 2025 18:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ce:7c:57:1e:37:00:a1:c5:f2:54:4a:9e:be:df:cd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a8f3436fd83e8af610f216808996e90acac75d
Validity
Not Before: Mar 25 18:06:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8499f30301fee774b86fc84ba6b7a8b27889ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2c:06:dd:07:c0:cf:e3:75:bf:66:dd:37:5d:
6a:4f:b7:60:ed:39:5a:16:90:99:74:15:ed:16:a4:
35:5c:27:64:ed:97:99:48:a9:19:c0:2c:c4:7f:63:
22:20:95:51:e2:48:49:58:dd:17:f6:a9:49:18:38:
bf:99:54:9e:16:ca:d6:03:d8:24:1d:02:3f:3f:e9:
b2:31:2f:16:f2:06:eb:7f:f9:a1:d0:59:3e:b0:ab:
93:7f:3c:97:07:12:24:73:54:40:e7:4d:ec:9c:e9:
a0:58:ae:95:f4:22:09:e6:99:1e:64:f4:b3:95:37:
b9:12:21:c5:fb:5e:99:c5:04:36:48:95:19:25:be:
46:2f:2f:11:89:41:f9:67:f2:e0:dd:5c:d7:78:6c:
7d:23:9c:93:52:f6:06:9e:b3:8f:33:d3:97:62:5a:
7d:4e:86:ae:62:c5:e4:ac:a1:3e:10:91:18:28:fd:
49:8c:18:70:f9:13:6f:4d:6e:cd:22:72:92:f8:44:
71:2c:c5:74:ab:1e:b4:0c:70:87:1d:e8:90:7a:09:
f7:a6:7f:aa:37:c0:77:46:8d:02:ac:ca:a6:f0:17:
34:60:a7:3d:14:2d:32:a5:be:9c:7c:e0:e3:67:d3:
ed:fa:78:9b:f9:bb:d4:8a:41:ae:6b:c1:2c:e5:fa:
5d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:49:9F:30:30:1F:EE:77:4B:86:FC:84:BA:6B:7A:8B:27:88:9E:E9
X509v3 Authority Key Identifier:
keyid:A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/uEmfMDAf7ndLhvyEumt6iyeInuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.193.0/24
Signature Algorithm: sha256WithRSAEncryption
45:22:74:3e:13:30:58:02:f6:75:fa:90:19:1d:b6:e4:e4:76:
d7:25:c5:bb:29:6a:84:44:1c:e1:68:82:2a:51:83:95:33:ce:
46:ac:7e:c0:c6:c3:fb:fe:5d:d2:de:85:12:9b:3e:3d:c2:af:
e9:b5:44:9f:4e:86:27:fd:99:eb:26:bd:c3:c8:8d:f1:16:e2:
e0:de:78:87:38:12:55:d1:7a:26:1f:bd:5f:76:8f:80:09:78:
e5:9a:25:60:8c:cc:fb:3e:c4:5a:dd:17:e8:f7:1a:60:89:3d:
da:25:24:e2:6d:50:aa:64:bc:05:4a:85:ee:8a:01:9f:e2:44:
b8:ff:11:7c:76:ac:8b:d6:f1:92:c0:d1:fe:be:ba:43:53:00:
f0:e9:13:91:bd:02:91:f3:33:cd:af:56:58:57:a7:83:ad:b9:
f5:63:58:69:e3:0e:5d:8b:90:e3:24:77:27:9b:18:aa:0d:b7:
f2:62:f3:dc:a8:b9:09:1a:fc:24:d6:14:01:25:4d:b9:87:a6:
59:5a:59:80:cd:fd:a2:03:2e:ac:b8:b7:3d:60:2c:37:ec:b3:
3f:23:25:31:27:73:5a:f5:ce:2d:7e:f3:5b:2c:23:ba:48:06:
ca:a2:a3:2f:eb:d8:af:2e:21:53:66:b0:35:95:19:8e:c7:9a:
d0:ce:4d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:38:32 2025 by rpki-client