Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/tBeFluyAxp-RH8mr4ZL8y7dywnk.roa
File: tBeFluyAxp-RH8mr4ZL8y7dywnk.roa (raw, json)
Hash identifier: +Aj+PE7iHqo4VF/lTtVtViLcPTeHPKqSU1T/M7KFgVU=
Subject key identifier: B4:17:85:96:EC:80:C6:9F:91:1F:C9:AB:E1:92:FC:CB:B7:72:C2:79
Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial: 01944039D314B495470798B47569DCFCA95F
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/tBeFluyAxp-RH8mr4ZL8y7dywnk.roa
Signing time: Tue 07 Jan 2025 10:05:18 +0000
ROA not before: Tue 07 Jan 2025 10:05:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216192
IP address blocks: 188.125.174.0/24 maxlen: 24
194.177.14.0/24 maxlen: 24
2a13:f6c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 07 Jan 2025 17:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:40:39:d3:14:b4:95:47:07:98:b4:75:69:dc:fc:a9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Validity
Not Before: Jan 7 10:05:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4178596ec80c69f911fc9abe192fccbb772c279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:9c:c9:87:4a:a9:ee:a9:e9:5a:8c:28:c2:
0d:a9:56:da:6e:af:7f:82:ee:bd:e9:a8:87:dd:88:
52:e7:4d:d1:1d:68:de:a4:4b:14:ce:54:19:17:e1:
41:38:e4:be:8c:9e:c5:70:d4:4b:e3:69:6c:9e:40:
d5:88:56:9e:29:76:81:13:ef:08:3d:8c:76:34:89:
33:ff:d0:44:ab:06:2b:9a:c9:64:f3:2d:d2:2f:af:
6d:53:1a:25:08:35:b1:77:e2:23:6d:a5:44:95:14:
6b:b3:7f:dd:6b:c7:1a:55:9a:97:45:f5:84:e0:4c:
04:ac:75:10:18:5a:02:e8:3e:0f:5a:1e:40:5f:e7:
3e:98:05:6f:37:ec:8f:36:61:87:db:eb:df:f6:de:
c1:d1:c3:d5:de:36:bb:eb:53:00:c9:87:ee:41:2e:
60:d2:7a:cd:0e:47:6e:a3:ef:d4:3f:9e:e1:db:f0:
64:15:58:ce:d9:e6:1f:8b:4e:15:e6:31:44:95:70:
db:a3:8c:7b:00:4e:97:e0:1d:0e:95:fc:57:10:7c:
25:a4:84:e8:17:36:e1:77:41:9a:b3:91:c3:f0:29:
08:92:06:15:b4:af:74:a2:31:18:cc:bd:31:b8:56:
86:5e:80:3e:f4:d9:44:04:d6:ea:de:5a:25:c4:c7:
7f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:17:85:96:EC:80:C6:9F:91:1F:C9:AB:E1:92:FC:CB:B7:72:C2:79
X509v3 Authority Key Identifier:
keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/tBeFluyAxp-RH8mr4ZL8y7dywnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.174.0/24
194.177.14.0/24
IPv6:
2a13:f6c0::/29
Signature Algorithm: sha256WithRSAEncryption
86:00:f5:ab:dc:11:04:82:d5:fd:60:09:2f:fe:bb:d2:86:5d:
27:dd:4c:20:9c:bc:89:2f:b8:c8:be:36:34:d2:32:49:9f:b1:
df:c2:47:72:3d:cb:af:fb:93:b9:31:76:c2:4f:ae:dd:93:ec:
70:ae:01:29:7d:1e:7b:64:e9:63:99:34:37:7c:c2:e8:f5:2a:
e6:4d:5e:1d:73:b5:1b:90:29:ec:f4:92:ee:ce:cf:aa:c9:45:
33:09:99:81:e9:c4:78:56:a3:37:13:85:6e:33:d8:4c:88:f0:
83:5e:25:de:ce:64:68:72:c5:5f:3c:c7:6c:88:32:8c:1e:7e:
b6:be:b5:97:94:0f:81:ef:80:e5:75:63:7c:9e:aa:f8:c0:f8:
93:85:c1:cd:1e:f7:47:dc:8d:cd:12:e7:8d:4d:4d:36:b1:c2:
bd:9b:2b:71:db:34:72:d5:aa:3f:0c:db:5d:94:58:eb:d0:60:
dd:25:86:58:ee:fd:b3:50:28:25:69:a0:fb:f0:9a:83:03:1b:
99:d7:14:2d:69:d8:22:25:5d:07:ee:85:4f:a3:0b:1f:6f:67:
7e:03:bb:5f:7b:5d:78:a5:c5:6a:4a:42:a2:82:0e:a2:3d:12:
13:9e:a2:9b:02:3a:d1:a6:dc:a0:26:d9:89:a9:4c:74:84:26:
19:3c:0e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:46:53 2025 by rpki-client