Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/3KjSH3AGDRN8RJAllxJ6ZlR4cEo.roa
File: 3KjSH3AGDRN8RJAllxJ6ZlR4cEo.roa (raw, json)
Hash identifier: m2MdHZ7bkc2FRJbcDOGMSbTcyvQnX6D77QlLzMPmqSc=
Subject key identifier: DC:A8:D2:1F:70:06:0D:13:7C:44:90:25:97:12:7A:66:54:78:70:4A
Certificate issuer: /CN=475a06cad7bd0c3db9f8a381f1eb9cd6c75aab28
Certificate serial: 0194F4C6E341FE5DFF568DBAC7237087C69A
Authority key identifier: 47:5A:06:CA:D7:BD:0C:3D:B9:F8:A3:81:F1:EB:9C:D6:C7:5A:AB:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R1oGyte9DD25-KOB8euc1sdaqyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/3KjSH3AGDRN8RJAllxJ6ZlR4cEo.roa
Signing time: Tue 11 Feb 2025 11:31:02 +0000
ROA not before: Tue 11 Feb 2025 11:31:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8270
IP address blocks: 193.34.142.0/24 maxlen: 24
193.34.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 15:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f4:c6:e3:41:fe:5d:ff:56:8d:ba:c7:23:70:87:c6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=475a06cad7bd0c3db9f8a381f1eb9cd6c75aab28
Validity
Not Before: Feb 11 11:31:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dca8d21f70060d137c44902597127a665478704a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c3:77:bd:7b:b3:aa:c3:08:6b:8b:c8:a8:a5:
11:7a:1b:08:2c:45:37:c9:87:90:aa:eb:f5:c8:a5:
9e:34:5f:f7:66:d3:49:05:5f:e7:b5:66:4e:2c:df:
63:20:31:b6:f0:2e:69:5a:60:6b:f7:da:65:87:44:
e6:04:35:14:11:f9:05:19:4c:d9:d5:35:c8:42:8e:
a5:18:30:01:93:32:21:91:33:b5:d2:66:32:a7:98:
68:8c:e3:f6:cc:1c:a9:76:b4:7b:c2:47:ff:6d:c3:
8c:5e:b5:94:14:88:cb:32:d0:3d:fe:54:59:fd:eb:
e5:13:60:05:61:83:8c:0f:71:48:a1:bb:12:34:68:
48:99:b9:b6:ec:50:43:d3:a6:f4:8a:09:17:9f:82:
6c:db:4d:22:de:8c:2f:d8:6d:c8:0b:c7:c0:67:58:
2e:e8:34:be:15:bc:a3:4c:3b:3d:3e:53:43:54:22:
e7:9e:f3:0a:0f:61:59:7b:4f:4d:c8:8d:98:e1:d8:
ab:b5:ef:0f:ec:4d:91:3c:22:6c:69:a3:63:76:72:
ba:29:c7:28:49:e2:81:6f:aa:c7:89:69:80:f8:25:
4d:81:0a:24:7f:0f:52:67:af:3a:0f:29:45:1d:7c:
cf:ff:0b:9c:39:fc:dd:e4:de:35:3f:27:66:fc:20:
78:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A8:D2:1F:70:06:0D:13:7C:44:90:25:97:12:7A:66:54:78:70:4A
X509v3 Authority Key Identifier:
keyid:47:5A:06:CA:D7:BD:0C:3D:B9:F8:A3:81:F1:EB:9C:D6:C7:5A:AB:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R1oGyte9DD25-KOB8euc1sdaqyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/3KjSH3AGDRN8RJAllxJ6ZlR4cEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.142.0/23
Signature Algorithm: sha256WithRSAEncryption
44:97:66:82:f5:4f:53:64:01:2a:eb:53:db:d0:57:76:c2:27:
32:27:d7:ec:b7:44:fd:ec:28:77:c2:65:91:aa:1a:89:7a:8c:
9e:dd:2d:a0:10:a9:e6:87:70:1d:a5:f0:00:45:d1:87:9f:ac:
96:d6:90:f0:32:0f:9a:25:6d:94:88:a7:86:d3:12:52:de:ca:
34:8f:67:d4:00:c8:08:01:c1:de:da:35:5b:f7:ae:ee:87:4b:
05:d3:5c:75:22:61:ea:43:1e:b4:5f:05:34:a6:d7:e3:ce:57:
6e:a2:29:1c:37:db:08:5f:77:c1:c9:43:e8:73:06:29:3c:e1:
e2:0c:be:bd:ea:71:fe:b5:7b:34:b4:4e:99:d7:5b:12:07:d9:
c9:d5:1e:78:d7:f9:c7:4a:f9:34:9c:fc:a5:db:a0:e5:66:aa:
9f:44:40:6c:e1:8b:6a:e1:c4:39:93:98:01:6d:11:d2:6c:c4:
e9:ff:96:b7:c5:bc:2f:e6:61:cd:3e:a2:99:fb:e4:18:20:cf:
d0:27:c6:b9:a5:46:94:54:56:b4:db:2c:c3:bd:45:a2:f6:ac:
cd:d9:e3:8d:da:f9:53:c3:7c:31:5c:9e:75:b2:15:78:2e:1c:
a0:6d:13:9e:04:3f:86:66:e1:d1:1b:6e:a5:c5:ea:a1:c4:b0:
f3:ea:d7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:02:33 2025 by rpki-client