Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/92TDFhc-bjwtefqzsJsj0go0AIQ.roa
File: 92TDFhc-bjwtefqzsJsj0go0AIQ.roa (raw, json)
Hash identifier: COOUhpRSuGhJEiUmUZGYw/JXfp7HBw2Mi7MqbFyEK1I=
Subject key identifier: F7:64:C3:16:17:3E:6E:3C:2D:79:FA:B3:B0:9B:23:D2:0A:34:00:84
Certificate issuer: /CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606
Certificate serial: 0196D43D02BA327BC3AC65469601B64A2B72
Authority key identifier: 7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/92TDFhc-bjwtefqzsJsj0go0AIQ.roa
Signing time: Thu 15 May 2025 13:58:10 +0000
ROA not before: Thu 15 May 2025 13:58:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209897
IP address blocks: 193.149.240.0/20 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 May 2025 14:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:3d:02:ba:32:7b:c3:ac:65:46:96:01:b6:4a:2b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606
Validity
Not Before: May 15 13:58:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f764c316173e6e3c2d79fab3b09b23d20a340084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9a:c1:02:e4:b4:77:73:c7:ec:7f:54:64:37:
67:63:83:a3:38:2e:09:ee:32:6c:4b:27:07:f8:bf:
59:d5:57:fa:ed:02:3a:92:54:21:fe:79:f3:95:59:
33:a0:07:0e:ac:22:f6:e6:39:61:c4:cb:37:3d:6c:
0e:30:8d:7e:3f:0d:24:dd:a0:99:f1:71:d2:de:66:
17:d1:4f:2c:61:4c:da:3e:de:0a:eb:b8:d7:38:cc:
f9:34:45:c7:d0:ac:de:1b:f9:fa:f3:a7:b5:24:ce:
46:e4:b7:4b:64:a3:54:73:27:fd:79:0d:44:21:0f:
65:97:f2:3a:55:a6:d1:cc:0f:d5:d3:36:bb:d4:8f:
83:25:ce:77:82:bd:d7:60:43:23:27:3b:b9:e8:f1:
a6:c3:ad:e5:22:35:fb:e4:92:4d:82:95:14:f4:1e:
33:cf:d8:78:87:86:95:23:48:bc:9d:99:61:9b:e8:
15:1b:46:63:1c:bd:f1:81:1d:2e:8d:41:36:7a:7d:
ed:a5:a2:82:12:a8:e0:ae:23:f4:2b:6b:9b:5e:8a:
be:94:f8:64:f6:6a:a3:1e:ad:96:94:13:39:2b:50:
1e:f6:b5:54:4b:a6:6b:52:04:7d:6b:3d:68:0b:61:
0d:40:ff:f3:b4:19:ae:c8:73:13:cc:8d:ef:80:c8:
c9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:64:C3:16:17:3E:6E:3C:2D:79:FA:B3:B0:9B:23:D2:0A:34:00:84
X509v3 Authority Key Identifier:
keyid:7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/92TDFhc-bjwtefqzsJsj0go0AIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.149.240.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:31:b5:41:d0:d4:4f:5c:21:c7:83:01:c7:d5:ab:8e:2e:35:
fb:e1:13:eb:06:4e:b8:43:fd:ee:ef:5a:33:db:50:75:bc:7a:
72:95:8c:af:0e:9a:f0:50:ba:b5:65:14:6d:5e:1b:5e:d9:b8:
f3:75:84:16:36:f5:66:46:41:14:10:f4:20:4d:99:37:c0:6d:
e5:a8:61:40:b5:02:df:d8:a6:66:43:7d:89:bd:93:86:21:a3:
77:bb:1b:3d:b0:8e:c5:6b:52:cf:e3:42:8f:d1:1b:df:b6:0b:
25:b1:d2:2c:e2:3e:3d:3c:91:7d:df:b6:0e:09:0a:0a:49:15:
4a:20:53:57:06:d5:eb:d7:9e:7b:11:b7:fd:f6:b7:c8:9c:96:
ae:6d:27:cb:bc:c2:99:66:14:b0:96:e7:78:4a:5e:5d:d3:af:
ab:0e:c5:50:d3:04:b3:77:db:22:e8:45:ae:df:dc:de:2d:f2:
54:e7:a2:72:74:3c:be:a2:50:f4:9a:08:e5:0f:c2:56:36:a8:
6b:d5:8f:46:8a:ad:8d:93:95:b2:e5:26:2b:6b:b9:8f:ee:d7:
37:20:57:d7:ee:4b:ce:24:e0:b5:c7:6f:62:55:56:cb:90:e8:
9e:b4:f5:c6:c7:ad:be:0c:0e:85:20:8f:6d:62:18:e2:25:5d:
39:5c:1e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:04:16 2025 by rpki-client