Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/MzQ5ElvqlWSOzRbBhHJ5PL7obbY.roa
File: MzQ5ElvqlWSOzRbBhHJ5PL7obbY.roa (raw, json)
Hash identifier: N1+9Fs3uxS/en5Zkz7iMdvP3b4ykgNRXjUgxeFUOKws=
Subject key identifier: 33:34:39:12:5B:EA:95:64:8E:CD:16:C1:84:72:79:3C:BE:E8:6D:B6
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 0194F5CAE685E764B5AA5835F23195B1BEAD
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/MzQ5ElvqlWSOzRbBhHJ5PL7obbY.roa
Signing time: Tue 11 Feb 2025 16:15:02 +0000
ROA not before: Tue 11 Feb 2025 16:15:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211904
IP address blocks: 92.114.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 07:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f5:ca:e6:85:e7:64:b5:aa:58:35:f2:31:95:b1:be:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Feb 11 16:15:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=333439125bea95648ecd16c18472793cbee86db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:da:28:ed:53:74:ea:e9:63:17:78:6c:84:
0b:0c:84:9a:00:66:d6:47:2d:46:58:f1:1a:e3:6d:
6a:f2:df:bd:c3:a3:f0:e7:42:de:a3:05:75:1b:18:
88:1c:dc:c7:45:2c:1e:69:29:35:6c:48:52:cc:f7:
70:93:8a:1e:57:36:e4:4d:7b:f1:25:f3:87:b1:19:
6a:e8:b9:b6:4f:d5:86:9c:97:73:e2:85:e2:f7:0c:
af:0d:70:db:52:78:bb:cd:e3:dc:7d:84:a3:15:e3:
6a:23:91:a0:44:ee:38:e8:7a:90:99:ef:64:4c:3d:
cb:9c:6b:c6:4e:aa:49:67:01:8f:62:99:bb:8f:a4:
3f:fe:7e:c6:a9:4a:e4:a5:3c:97:6f:6a:f7:8a:9b:
bb:30:8d:c1:c5:a5:e7:eb:f4:68:95:89:df:c2:0f:
c9:ab:ab:5c:ca:12:fd:42:73:58:c6:99:76:3b:13:
96:56:df:b2:1c:1e:7d:76:fa:84:bf:d9:fb:86:49:
18:0e:17:e2:90:63:e4:0d:d0:3a:0a:ea:0a:2d:c3:
52:d4:ae:de:d4:2c:a1:36:71:2c:03:39:74:49:f4:
fb:61:1b:c6:ea:0c:8f:6e:e3:26:9d:ca:97:06:95:
3d:20:f8:17:30:5a:37:ed:5d:81:7c:8e:6d:f4:39:
f8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:34:39:12:5B:EA:95:64:8E:CD:16:C1:84:72:79:3C:BE:E8:6D:B6
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/MzQ5ElvqlWSOzRbBhHJ5PL7obbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.51.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:76:5a:e5:b6:75:92:05:31:ba:d6:95:1f:19:dc:57:0f:5c:
fe:ab:d3:86:55:0c:82:e7:4e:8d:4f:61:7d:42:1b:e0:46:5d:
79:e8:67:5a:ab:cf:f0:c3:12:b1:f9:6e:2f:f3:42:05:65:4d:
a6:02:6e:e1:b3:44:32:33:b3:7f:39:e1:39:2a:10:59:f3:ac:
ac:1b:75:d1:b8:57:14:b7:dd:e2:9a:bc:25:03:9f:11:e6:07:
ad:9c:db:fd:92:0f:6b:59:c7:2a:9e:d9:c0:b1:d3:0c:fc:77:
9c:43:3c:c4:3d:d4:b1:9a:0b:3c:e7:c4:65:0e:65:86:0e:0e:
d5:17:d3:da:3a:25:62:9a:98:b8:e0:24:b8:0f:a0:07:6b:fc:
fe:f3:97:d8:45:e1:b8:c4:ee:b8:87:a1:bf:f8:8e:14:83:70:
94:7d:5a:16:39:c3:c6:4e:26:7c:66:4c:6b:f1:62:4c:3f:35:
ef:90:9d:4d:ac:93:f3:2e:c9:66:58:d4:0c:f4:10:98:f2:6c:
72:cb:f3:f4:53:8e:5b:84:ad:02:0e:2b:28:5f:4a:4f:e1:e0:
09:80:24:5c:7e:17:1c:9c:e3:e4:ec:4b:4c:47:27:29:90:ab:
b6:a7:e9:b0:69:52:07:db:e4:82:ad:2d:5d:32:64:02:f0:3f:
bd:79:38:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:46:11 2025 by rpki-client