Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/6fuOFlE7acjn_ZeQAXqr8woXHZ4.roa
File: 6fuOFlE7acjn_ZeQAXqr8woXHZ4.roa (raw, json)
Hash identifier: OcFdXMRBXCPy0LBe+KWyBBVBNDoGIs/1ZkKFtGGW4dQ=
Subject key identifier: E9:FB:8E:16:51:3B:69:C8:E7:FD:97:90:01:7A:AB:F3:0A:17:1D:9E
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 018E3934CB4FF910D22C8EAF31B71CEB9511
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/6fuOFlE7acjn_ZeQAXqr8woXHZ4.roa
Signing time: Wed 13 Mar 2024 19:05:44 +0000
ROA not before: Wed 13 Mar 2024 19:05:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8070
IP address blocks: 194.41.16.0/24 maxlen: 24
194.41.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 19:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:39:34:cb:4f:f9:10:d2:2c:8e:af:31:b7:1c:eb:95:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Mar 13 19:05:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9fb8e16513b69c8e7fd9790017aabf30a171d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:21:7f:8b:2e:02:d8:10:2b:c1:74:7f:1a:eb:
40:f9:18:22:ea:8e:8f:1a:0c:8e:ee:c9:4b:68:4d:
9a:8e:10:8c:76:ca:46:44:ed:ec:3d:87:93:32:38:
8e:40:b4:fe:fd:8f:63:df:fa:3c:1a:98:cb:c7:18:
47:a2:fe:a9:9a:52:41:e4:15:2b:8c:35:04:b1:f3:
fc:0d:cf:f8:88:5a:4e:3d:c8:69:8e:1f:29:99:9b:
cb:a3:5a:36:9d:d1:5a:c9:47:5a:f2:68:6e:39:a8:
39:02:26:2d:04:84:3e:d6:46:f2:1d:cb:e9:22:bd:
8e:4a:0f:e6:25:3e:d8:44:aa:9a:20:9c:30:89:c3:
28:d3:09:d0:b1:49:b7:a6:e2:2f:52:33:d3:4e:92:
2b:a3:a8:f2:54:29:fa:47:ff:0d:e5:78:40:cc:13:
79:f4:21:ff:1b:60:a3:b1:bd:fa:9a:c1:10:4c:9b:
16:4a:b3:28:56:6e:db:24:10:5b:2f:4e:10:20:80:
a4:a4:21:c2:77:b7:c6:64:49:c1:77:06:bd:0c:58:
f9:f3:b4:fa:59:f7:a8:d4:be:63:85:6b:3c:99:70:
9c:8c:84:76:d3:7d:10:0e:5d:3c:19:8c:77:fc:b2:
e6:58:cb:c4:a4:b8:2a:09:b2:93:b8:aa:4e:cb:37:
48:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FB:8E:16:51:3B:69:C8:E7:FD:97:90:01:7A:AB:F3:0A:17:1D:9E
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/6fuOFlE7acjn_ZeQAXqr8woXHZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.41.16.0/23
Signature Algorithm: sha256WithRSAEncryption
31:d8:94:e9:6e:31:d4:5d:e7:08:16:83:14:b4:f3:e0:b1:3f:
1f:e5:1f:ae:60:db:19:8d:00:6d:f0:d5:35:29:24:ad:06:5a:
86:bf:96:94:a1:07:8a:c9:c6:75:45:ce:5e:ee:b0:d1:f9:57:
c7:0a:3b:e3:45:d8:48:2b:52:53:00:f1:34:d3:cf:c7:fd:92:
5a:ac:85:e7:03:52:87:e9:fb:fd:c7:98:bf:2b:a0:be:b2:6a:
6d:6d:aa:d4:9e:79:2c:a8:c9:50:28:0d:37:0c:71:15:4f:e6:
80:a3:56:59:1c:65:61:60:3d:f3:6e:24:73:07:f1:d1:03:a3:
77:39:8d:2f:3a:97:a4:17:9f:16:e6:b4:15:69:d5:e3:66:67:
2b:dc:c1:ac:b8:77:32:7a:0d:23:51:ed:e0:bd:c2:d3:b7:af:
36:40:46:fd:41:1d:49:10:8a:ba:7b:42:57:55:c1:f3:65:14:
76:3a:38:55:57:c9:7a:1f:fc:3f:b2:de:2b:0e:7d:ff:1b:ad:
69:35:e2:8e:9c:2d:82:44:64:9b:f3:dd:1f:42:32:c7:2e:3f:
20:52:e4:72:31:cb:be:99:d6:6c:17:1b:10:8b:93:45:d7:c2:
9b:86:06:5b:cf:90:b6:80:42:fe:d8:2a:c3:08:e2:5d:35:92:
f0:94:4c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:51:43 2025 by rpki-client