Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/KcXROJFQaPnx5VmnUPXRJaazNXE.roa
File: KcXROJFQaPnx5VmnUPXRJaazNXE.roa (raw, json)
Hash identifier: yRjrcX9q+XUsKYK7cK71wSlo2G8t5wC6t1n3cbXV4sw=
Subject key identifier: 29:C5:D1:38:91:50:68:F9:F1:E5:59:A7:50:F5:D1:25:A6:B3:35:71
Certificate issuer: /CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Certificate serial: 0194228DEC9A90A01F61E1585902BF25EBE0
Authority key identifier: 9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/KcXROJFQaPnx5VmnUPXRJaazNXE.roa
Signing time: Wed 01 Jan 2025 15:48:34 +0000
ROA not before: Wed 01 Jan 2025 15:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7117502
IP address blocks: 195.96.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Jan 2025 06:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ec:9a:90:a0:1f:61:e1:58:59:02:bf:25:eb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Validity
Not Before: Jan 1 15:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29c5d138915068f9f1e559a750f5d125a6b33571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:47:32:a9:72:04:5a:b1:ea:3b:b3:e6:38:4f:
30:e8:a6:df:fa:c8:70:68:f2:d0:ec:fe:1b:44:36:
6e:62:97:49:ec:9b:0f:98:52:4d:c8:62:7c:76:a1:
fe:e1:e7:34:0d:e4:8f:23:06:b6:10:39:d4:54:fd:
0d:6e:91:3c:16:46:90:5c:0f:32:60:7b:df:74:e9:
2d:98:f9:b2:da:87:69:33:5d:80:0e:8d:f3:c5:ae:
38:8c:21:84:d6:da:e7:5f:c9:b9:ab:f9:cc:78:54:
a0:a6:b2:b8:9b:24:22:4b:01:c1:e6:67:f2:be:7c:
31:ef:59:0f:62:45:20:7c:0e:01:f4:f9:76:6d:74:
65:75:a5:8b:bb:f2:3c:ac:2f:ac:b5:a9:63:33:c0:
86:64:97:f0:9f:3b:d0:1f:af:59:94:c2:69:f8:d2:
8a:7a:5c:09:72:54:b0:d8:33:f2:7f:15:83:35:1c:
b5:3a:cf:6b:26:09:20:dc:e8:e2:2f:2a:0a:2a:1f:
cf:2f:24:18:ae:ef:ea:42:2f:7e:7f:be:7a:6a:af:
85:35:13:8a:9e:7b:31:e1:a2:fe:7e:4b:1a:59:41:
4f:99:41:8f:9c:fa:d3:a9:b2:4a:65:07:03:0f:e7:
ef:e9:62:37:0f:72:22:08:14:79:0f:bd:45:9e:98:
9e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C5:D1:38:91:50:68:F9:F1:E5:59:A7:50:F5:D1:25:A6:B3:35:71
X509v3 Authority Key Identifier:
keyid:9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/KcXROJFQaPnx5VmnUPXRJaazNXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.138.0/24
Signature Algorithm: sha256WithRSAEncryption
25:b0:02:8e:0b:d2:c2:0d:16:8a:25:1e:5b:78:68:c9:97:7b:
84:43:0d:b6:4e:39:bb:37:ba:28:e1:c9:5d:c6:e0:da:49:1b:
0a:a5:bb:e1:78:69:23:5c:97:36:62:ea:dc:dc:1b:43:9b:37:
e5:d6:03:37:73:ae:e3:c0:e4:06:ee:77:6a:4a:2f:1c:49:53:
7e:b1:58:7b:4a:b9:ac:a3:8e:e5:9f:58:e6:bd:00:45:26:1e:
97:9f:f9:dc:10:1a:61:43:0c:11:d8:49:82:8a:28:12:b6:c8:
0c:56:43:20:cb:e3:78:c0:74:22:6f:96:16:0a:4d:ef:38:41:
1a:e9:7c:d6:a6:08:19:ff:7d:43:35:56:5f:fe:ba:6a:ab:02:
b7:03:ce:c6:e2:c8:40:82:60:44:f0:8c:a3:61:61:65:03:f0:
27:89:60:d0:4c:4d:c9:5f:b2:09:57:d6:93:10:9d:bc:1b:3b:
23:cd:b0:70:8b:92:c1:18:dd:6e:3f:c3:81:32:13:72:56:8e:
09:85:b3:71:c5:b5:8f:c9:23:e0:98:0b:6f:81:bb:c7:c8:bc:
5f:8a:2e:bf:4e:e1:32:5d:18:37:24:e4:c5:3a:6c:0d:b9:22:
ae:17:f3:57:66:6a:ee:39:2f:b1:02:d1:23:c8:3d:13:48:d4:
16:f8:b6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:27:37 2025 by rpki-client