Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Se6keXNtH0S4Ny4tVGXZ0kOy08c.roa
File: Se6keXNtH0S4Ny4tVGXZ0kOy08c.roa (raw, json)
Hash identifier: M+PASitLzkoM4BcxtXp2PJ/VnQQWuoSx2geczJ7b+ow=
Subject key identifier: 49:EE:A4:79:73:6D:1F:44:B8:37:2E:2D:54:65:D9:D2:43:B2:D3:C7
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0194F5E57331A5F1DD20EEB7EF8940435BDF
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Se6keXNtH0S4Ny4tVGXZ0kOy08c.roa
Signing time: Tue 11 Feb 2025 16:44:02 +0000
ROA not before: Tue 11 Feb 2025 16:44:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 14.102.226.0/23 maxlen: 24
14.102.231.0/24 maxlen: 24
14.102.232.0/24 maxlen: 24
77.111.96.0/22 maxlen: 22
85.208.10.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
194.36.32.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 17:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f5:e5:73:31:a5:f1:dd:20:ee:b7:ef:89:40:43:5b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Feb 11 16:44:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49eea479736d1f44b8372e2d5465d9d243b2d3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:fb:6b:22:6c:c5:04:e1:9c:4c:a5:e5:44:
12:91:d2:b6:96:a6:97:89:90:a2:96:40:4f:29:7c:
fc:58:c4:1a:cd:fb:4b:e2:84:f8:8d:1e:9f:5d:0c:
15:1b:c1:2b:f6:35:e4:8f:04:7b:68:2e:04:0d:7b:
b4:35:20:f9:47:9b:ba:ed:a7:4d:c4:71:b7:d2:91:
40:5e:5d:2b:0a:b9:78:af:37:12:90:d5:ca:a2:b2:
bd:1c:05:7f:24:6e:9d:9d:75:6a:c4:54:e2:1b:13:
ba:28:a0:12:3a:c6:0f:c3:8d:2f:08:6c:be:44:fa:
41:c4:48:5c:f1:4e:50:07:75:fe:15:66:30:44:b4:
a4:89:81:72:ea:58:47:7c:f6:6c:a0:d1:aa:7e:1d:
09:3f:4f:1b:55:9f:f0:2c:ca:f9:14:96:fa:1a:24:
b6:ab:ab:1e:3f:2a:d4:4b:c7:25:ef:44:04:78:ab:
7b:f0:c8:9b:cd:8b:66:08:fd:83:5b:32:72:46:74:
12:28:8a:8d:0f:f4:22:a2:b8:cc:17:66:03:52:85:
2a:83:ca:0f:45:10:59:dd:88:25:aa:96:dd:a3:db:
76:61:a0:fd:89:33:84:6d:df:e5:39:84:7a:88:75:
19:c5:f2:01:d5:44:4f:dd:8b:09:ad:e2:5d:47:0b:
94:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EE:A4:79:73:6D:1F:44:B8:37:2E:2D:54:65:D9:D2:43:B2:D3:C7
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Se6keXNtH0S4Ny4tVGXZ0kOy08c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/23
14.102.231.0-14.102.232.255
77.111.96.0/22
85.208.10.0/24
94.229.212.0/24
194.36.32.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:4f:c0:8c:0d:e0:d6:87:95:27:cb:57:64:a5:d0:af:76:43:
66:9a:95:a1:3a:82:37:aa:d3:0b:fb:e7:59:c7:e1:4c:ce:82:
a2:72:d4:a8:b1:45:9c:da:bc:af:e3:e7:98:0f:1d:dc:b8:bc:
40:51:d1:d3:98:78:77:9c:52:a6:3d:4b:41:33:14:8d:60:35:
95:d3:a4:19:44:65:d0:8b:cd:19:04:42:ad:e6:9e:17:74:d6:
68:96:d9:88:cd:2a:b1:99:b7:e3:64:ae:21:ee:ba:bf:17:42:
c1:68:78:45:5a:7d:2e:90:29:50:2f:9d:9d:02:55:2a:45:d0:
d5:79:07:8a:6c:17:d0:fc:50:65:53:e6:65:d3:84:18:5c:64:
6a:2b:45:4e:6f:87:e3:34:a2:af:f0:51:2b:0c:3b:f6:ac:d9:
8a:db:26:e3:d4:ba:5f:8d:41:e8:19:8c:53:d9:65:fe:b2:d3:
70:e4:c6:59:18:94:1a:bd:e3:55:6b:04:d8:e1:67:15:a9:81:
01:21:83:59:4f:c5:79:27:3a:75:c9:10:c5:85:4e:a8:28:f9:
43:a9:71:77:5b:5c:16:3d:7f:bc:1b:20:83:5f:85:f3:a3:1a:
21:3f:08:b7:a4:03:22:06:ef:36:06:7c:f7:b7:0b:2d:9b:ea:
55:30:b2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:10:05 2025 by rpki-client