Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/qi8ShiEkLYs7Hu3iAeB3qgvB53w.roa
File: qi8ShiEkLYs7Hu3iAeB3qgvB53w.roa (raw, json)
Hash identifier: P28kGkrH3kXOXEmuXeCzDsSCMSz53vW4CdNzvyXaAdU=
Subject key identifier: AA:2F:12:86:21:24:2D:8B:3B:1E:ED:E2:01:E0:77:AA:0B:C1:E7:7C
Certificate issuer: /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Certificate serial: 019740DE448CBAE79797FE33D58C74B7411A
Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/qi8ShiEkLYs7Hu3iAeB3qgvB53w.roa
Signing time: Thu 05 Jun 2025 16:13:17 +0000
ROA not before: Thu 05 Jun 2025 16:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196618
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Jun 2025 20:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:40:de:44:8c:ba:e7:97:97:fe:33:d5:8c:74:b7:41:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Validity
Not Before: Jun 5 16:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa2f128621242d8b3b1eede201e077aa0bc1e77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d9:e5:9d:68:02:65:c2:3b:cf:3e:7c:16:e2:
33:d2:1e:a5:0b:eb:13:1f:a1:c9:88:6d:e7:cc:e0:
1b:cc:2a:de:d4:24:2d:f4:8e:bc:b2:73:db:9f:30:
22:2f:a8:0c:16:03:ab:e5:19:19:e1:38:9e:cd:e4:
c4:8a:a0:5b:42:1e:8e:35:f0:c7:17:05:ea:02:15:
df:fb:9c:7a:13:86:e9:dd:c0:de:a6:5e:fb:b1:7b:
25:0b:e8:fa:04:33:dd:72:f5:51:a7:49:b5:bf:cb:
8b:2e:2a:d4:31:d3:a9:95:90:bf:d4:14:47:da:40:
f1:69:51:7f:39:bb:25:18:79:5e:20:20:7f:9f:24:
9a:18:ee:54:ac:8c:77:39:9c:83:02:c6:21:7f:38:
36:3d:27:a5:48:38:37:d5:f3:c1:ee:b8:dc:5d:7b:
8a:97:47:7f:6a:f1:fa:d5:25:ec:fc:cc:b0:43:29:
1c:1e:c1:81:53:7d:9a:fe:60:ec:98:33:4a:fc:ef:
33:60:da:67:90:46:77:c2:d1:33:ec:ca:1b:97:3f:
28:98:45:36:37:ba:56:da:eb:3e:be:b8:c6:37:e0:
7c:4b:37:08:d2:4a:6e:03:c7:12:65:b7:c7:56:46:
37:cd:96:73:1b:e2:07:a6:66:26:99:fd:56:b8:21:
3f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2F:12:86:21:24:2D:8B:3B:1E:ED:E2:01:E0:77:AA:0B:C1:E7:7C
X509v3 Authority Key Identifier:
keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/qi8ShiEkLYs7Hu3iAeB3qgvB53w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
61:60:76:d9:d6:42:e8:8f:26:d0:68:13:5c:26:5e:b7:b0:63:
94:97:6e:58:ad:7f:f5:8b:f3:6c:46:b6:53:d0:ad:42:af:9c:
7e:a8:80:f4:81:2b:2f:c6:63:53:ff:ac:d2:b8:9c:91:e9:c4:
85:8b:f1:69:a5:fe:f0:95:3d:f8:db:66:82:15:5e:fe:09:56:
c1:c7:0e:d3:52:e0:97:46:41:72:d8:84:7b:49:31:10:82:23:
a8:d7:02:c2:44:49:3a:3d:c2:e7:e3:55:97:ed:e9:d8:64:2c:
35:19:70:9f:43:74:20:d9:31:57:f4:50:d3:86:6a:6d:c3:c7:
09:6e:ec:e8:9e:8a:20:89:ef:f8:0c:85:3c:1e:7f:47:f3:cb:
e9:99:bb:96:fc:6f:21:a9:e9:e4:18:d5:a0:bd:8e:49:02:71:
8a:d0:bc:ad:7f:ae:4e:c8:77:75:b8:3d:5e:68:0c:83:9b:b7:
a4:88:d4:60:26:1f:68:a8:bc:88:51:e1:46:99:3e:57:23:23:
ae:c7:6f:e1:f0:3e:e8:b9:c2:a4:d3:bf:86:73:01:a0:53:05:
76:69:c7:47:77:dd:ad:61:51:91:77:41:39:c8:17:2d:58:f5:
43:88:08:b8:13:c9:57:77:bd:68:98:02:af:b9:76:87:a8:39:
7e:fc:d8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 17:56:31 2025 by rpki-client