Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/Okpfs4zRlj8wxGND8nGXWrj0Aok.roa
File: Okpfs4zRlj8wxGND8nGXWrj0Aok.roa (raw, json)
Hash identifier: I9gdRDsUX6rz8FxcQ3REVXEz2giS6ecgOgSwzbiPIoA=
Subject key identifier: 3A:4A:5F:B3:8C:D1:96:3F:30:C4:63:43:F2:71:97:5A:B8:F4:02:89
Certificate issuer: /CN=a53d8fea2298ff3542a6dc0890b108c922183635
Certificate serial: 0194F64FA63871F0EF6F749DA2F9469BABA2
Authority key identifier: A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/Okpfs4zRlj8wxGND8nGXWrj0Aok.roa
Signing time: Tue 11 Feb 2025 18:40:02 +0000
ROA not before: Tue 11 Feb 2025 18:40:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56814
IP address blocks: 193.163.3.0/24 maxlen: 24
193.243.172.0/23 maxlen: 23
194.110.52.0/23 maxlen: 23
2a09:6880::/29 maxlen: 29
2a09:6880::/30 maxlen: 30
Validation: Failed, certificate revoked on Wed 12 Feb 2025 10:36:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f6:4f:a6:38:71:f0:ef:6f:74:9d:a2:f9:46:9b:ab:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53d8fea2298ff3542a6dc0890b108c922183635
Validity
Not Before: Feb 11 18:40:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a4a5fb38cd1963f30c46343f271975ab8f40289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:04:19:e7:8e:cf:5e:66:e8:fa:30:78:e9:02:
ae:9a:a2:55:f9:53:eb:49:8f:3a:02:e0:c7:22:41:
84:3c:6b:24:5c:3a:5d:1a:a4:fe:5b:2d:34:00:d6:
f5:ab:bc:c2:2d:20:59:87:4d:3c:70:6a:f4:72:89:
a8:35:c5:80:e5:e0:ab:da:6a:6e:51:0d:00:83:ba:
ba:fe:f1:b3:6e:0a:e2:fa:d0:fe:70:c8:28:2c:21:
6d:42:a9:58:33:f4:3f:2b:ee:57:fa:20:7e:d1:23:
d0:be:8f:f3:39:96:83:08:8e:e7:09:29:eb:36:d2:
86:aa:72:6c:04:71:f9:3e:1d:23:7e:8b:8b:12:fd:
42:21:4e:24:aa:a4:d6:ce:95:23:0e:2a:28:f6:66:
5b:ef:55:52:6c:ec:06:7c:f7:e5:1c:c7:2c:c7:30:
9b:dc:4e:7b:9a:d9:a2:a5:cf:9a:45:1d:62:a7:b4:
ae:a9:1d:1a:41:1b:35:65:99:0a:73:c7:aa:9a:1c:
23:a5:31:8e:54:06:44:9a:2b:d0:04:67:ab:56:0f:
35:24:5a:bb:d5:5b:30:88:9a:ab:76:15:45:d5:b5:
57:bd:62:fa:81:26:cd:27:26:96:df:e7:6f:3c:cc:
f0:5d:11:4a:85:dc:4c:74:53:15:24:bc:86:8b:2d:
5b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4A:5F:B3:8C:D1:96:3F:30:C4:63:43:F2:71:97:5A:B8:F4:02:89
X509v3 Authority Key Identifier:
keyid:A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/Okpfs4zRlj8wxGND8nGXWrj0Aok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.3.0/24
193.243.172.0/23
194.110.52.0/23
IPv6:
2a09:6880::/29
Signature Algorithm: sha256WithRSAEncryption
18:7f:ba:26:4c:87:33:48:ed:7d:70:64:07:a4:c4:b2:c1:5c:
4b:8f:81:83:a2:aa:44:0e:21:f3:41:6b:38:5f:e0:37:da:2b:
f6:2e:47:cd:fb:1d:01:1c:a1:e1:bc:1b:85:92:7a:63:75:f1:
29:37:92:dc:60:8f:0b:bd:e4:46:2c:73:bc:bf:be:ff:73:d1:
1f:76:69:f3:28:4b:a2:ed:c8:79:68:ff:c8:55:93:9e:66:4f:
19:0b:f9:98:be:a1:48:aa:26:19:40:75:8c:ac:a8:27:6f:17:
00:3a:18:00:40:e8:27:3c:ca:9d:12:2a:6b:c9:f0:3e:0b:4a:
2b:18:9d:ba:74:d4:ac:da:95:84:fb:bb:90:14:02:31:8d:0c:
44:90:2b:04:e2:ec:e2:d4:2f:25:66:a5:7f:cb:93:48:1c:64:
99:59:d6:7b:80:d1:bb:e4:b9:41:ca:cc:85:48:bd:1e:39:1e:
e3:a7:2f:58:6f:47:bb:3c:d1:20:f2:20:31:88:f7:9f:1a:f9:
37:5b:4f:9d:88:c9:19:ca:3d:0c:2e:83:90:4d:ad:43:4b:13:
17:30:a8:31:10:00:f7:35:33:3e:72:18:cc:a6:9f:09:5a:7a:
10:0f:77:d0:dc:38:26:3d:26:70:ec:b7:0d:6a:77:01:dd:43:
1b:d2:bd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:07:23 2025 by rpki-client