Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/WTne8ecWtxBCSvhXT1q3ISDY56A.roa
File: WTne8ecWtxBCSvhXT1q3ISDY56A.roa (raw, json)
Hash identifier: 6DKT1voGrxKK/U9jYKdThrn58jPSASdsU3dm5HhjFCQ=
Subject key identifier: 59:39:DE:F1:E7:16:B7:10:42:4A:F8:57:4F:5A:B7:21:20:D8:E7:A0
Certificate issuer: /CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Certificate serial: 019447666051730180ACAEC089A0CE409777
Authority key identifier: 79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/WTne8ecWtxBCSvhXT1q3ISDY56A.roa
Signing time: Wed 08 Jan 2025 19:31:19 +0000
ROA not before: Wed 08 Jan 2025 19:31:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215238
IP address blocks: 194.187.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 Jan 2025 20:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:47:66:60:51:73:01:80:ac:ae:c0:89:a0:ce:40:97:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Validity
Not Before: Jan 8 19:31:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5939def1e716b710424af8574f5ab72120d8e7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a9:f8:52:85:95:e3:1a:bc:fc:6d:37:60:69:
30:d1:4d:bb:5d:ba:86:41:97:40:90:38:a7:48:e2:
06:b2:d8:8a:a6:7d:02:49:9d:f8:ec:49:2a:22:28:
37:ca:f2:94:ac:c8:bf:d4:fe:6d:90:ac:1c:3d:9e:
66:62:a5:0a:e4:44:72:47:59:25:bf:1b:29:07:a1:
66:b7:6c:2e:e5:a0:e9:4a:16:6e:bf:a0:82:08:73:
ee:87:6a:22:be:6a:d9:6d:eb:95:c3:2d:80:94:f9:
c0:07:2a:d1:56:56:71:ff:82:fe:98:c3:30:4a:3e:
60:43:89:8e:5f:0c:ae:00:ec:c0:e3:ac:e3:56:11:
a0:9d:5e:31:6a:6d:5a:2f:78:ec:5c:dd:67:7e:90:
23:98:5e:fc:a6:b2:47:84:64:e6:87:e8:06:aa:e7:
78:06:3a:a3:63:dd:65:9c:f8:50:5d:63:40:31:4a:
95:66:35:69:8c:5d:e7:64:36:0c:d6:cb:70:0f:b7:
00:09:b2:75:0e:87:17:6a:07:e8:18:3c:34:3d:9c:
92:01:50:74:09:55:ce:04:49:38:74:9d:4b:10:de:
98:77:2f:7c:14:71:2d:32:8c:fe:57:fa:5b:48:34:
6c:c0:76:62:cf:78:2b:3f:53:68:df:fa:43:b7:19:
e3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:39:DE:F1:E7:16:B7:10:42:4A:F8:57:4F:5A:B7:21:20:D8:E7:A0
X509v3 Authority Key Identifier:
keyid:79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/WTne8ecWtxBCSvhXT1q3ISDY56A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.208.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:b0:d6:fb:28:39:ab:bc:c7:4d:66:be:6b:88:b0:12:f3:cf:
96:73:88:d1:d4:e3:67:44:55:43:74:5d:76:21:25:36:2d:b8:
f7:4c:fd:eb:7c:71:71:09:37:0b:10:de:15:93:38:44:e9:8e:
71:0a:df:a8:ad:e3:d5:00:92:43:3e:9a:ed:e2:14:e1:0a:a9:
d5:9a:42:b7:01:e5:15:6b:fd:93:1a:29:d3:4a:78:03:ac:32:
8a:96:6a:d9:f2:be:50:28:a5:b1:88:95:72:00:a1:76:c7:36:
15:23:0e:3e:28:2f:33:bd:67:e5:d4:ab:28:ef:ea:79:4b:ee:
a1:51:cb:bc:7a:96:5a:00:69:75:78:81:b9:52:3c:b6:11:12:
80:7a:6e:fd:78:62:5b:1c:dd:ca:c8:19:39:a9:74:37:c8:42:
60:2f:58:73:83:9f:ce:7e:32:ac:bf:a6:9b:97:b9:4d:5a:57:
84:a0:3a:c2:a1:76:ba:cc:c7:79:6d:91:a9:19:e2:68:f4:c7:
85:89:d5:f5:51:71:8e:fd:19:7e:2c:b7:45:b4:95:80:df:fa:
85:2f:fe:e1:3f:77:ff:73:f2:8e:64:87:2e:f5:f1:a6:94:f7:
50:a7:dc:b0:53:d1:08:71:7f:53:07:02:b0:cf:16:fb:9d:52:
b7:10:86:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 11:13:21 2025 by rpki-client