Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1kNbpKPIe_mI8uuHdqQLYDybcCU.roa
File: 1kNbpKPIe_mI8uuHdqQLYDybcCU.roa (raw, json)
Hash identifier: Np+kgKtYu6KopNliHNY86N2MUlSIJPvoAyaCcOiF1gY=
Subject key identifier: D6:43:5B:A4:A3:C8:7B:F9:88:F2:EB:87:76:A4:0B:60:3C:9B:70:25
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282475B5195D02DA8E128A54F5FC9919
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1kNbpKPIe_mI8uuHdqQLYDybcCU.roa
Signing time: Thu 02 Jan 2025 17:51:05 +0000
ROA not before: Thu 02 Jan 2025 17:51:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39521
IP address blocks: 194.31.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Jan 2025 08:34:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:75:b5:19:5d:02:da:8e:12:8a:54:f5:fc:99:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6435ba4a3c87bf988f2eb8776a40b603c9b7025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:bb:20:3c:8d:d6:56:0d:58:98:35:c0:95:
ab:ff:80:06:db:9f:e8:4a:21:c5:38:36:1f:14:47:
07:66:dd:dc:f4:6e:40:7f:89:f0:7a:c1:56:76:4e:
d7:d1:d1:e7:9c:6d:db:00:48:80:c4:c4:9b:d6:61:
a0:08:c9:c5:b9:0d:60:c8:15:f4:3e:04:d8:04:54:
f1:0e:ee:ba:8d:ca:3d:b5:a9:7a:7d:f1:5b:04:06:
85:81:b8:cd:83:fd:6c:c2:98:02:44:08:05:c6:b2:
6f:7e:f1:21:66:6e:06:57:8e:ae:99:98:44:ac:e0:
c3:60:af:93:25:ee:20:00:c7:ac:de:32:79:9d:ec:
7d:b4:62:37:5e:2a:bc:d0:ab:ef:29:e2:f7:9e:92:
fc:a1:22:f4:8c:61:11:dc:02:e5:83:58:bb:84:e8:
ab:d9:74:97:19:d3:60:8d:26:fb:77:1f:28:c3:7b:
8a:a3:01:69:41:ae:55:43:ff:91:f3:14:cc:dc:47:
d2:b2:47:26:39:14:4b:a8:82:4d:d4:01:6c:3c:60:
95:94:31:93:53:85:67:52:af:e1:cc:b2:d2:c8:7e:
ab:3f:46:e7:48:be:d4:8e:c3:0a:0d:1f:cf:63:24:
da:79:d7:e5:c7:9a:b0:e3:c0:9d:b3:e1:bc:12:46:
aa:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:43:5B:A4:A3:C8:7B:F9:88:F2:EB:87:76:A4:0B:60:3C:9B:70:25
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1kNbpKPIe_mI8uuHdqQLYDybcCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.222.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:69:f5:34:6f:a7:e7:f4:17:96:bf:24:95:9c:f4:5d:f8:ea:
2d:9c:bd:aa:05:1a:86:ad:a9:44:9f:ef:94:63:df:38:92:7a:
9b:c1:bc:75:a0:cd:d9:ca:1d:af:22:5e:de:12:91:f9:51:09:
d4:7e:f7:3d:db:25:e0:bd:89:46:e9:3e:98:ce:07:66:d0:13:
42:18:6a:ac:89:00:40:44:01:b4:09:af:ca:d0:d5:9f:35:82:
ff:16:1e:42:5c:4b:66:8d:a3:0b:7b:b2:bb:9b:a0:f6:c8:13:
38:37:0e:61:b7:f2:dd:bb:4f:98:b0:6a:e1:f2:5d:29:cd:2e:
67:61:73:d2:6c:ba:0f:1c:0d:44:1d:29:24:c5:44:26:77:12:
7c:5a:bc:e0:81:5e:63:10:4e:f7:02:62:50:26:8f:2f:3c:2c:
ea:80:d5:d1:fb:b9:92:08:14:de:b7:73:07:cd:17:54:43:45:
2b:bd:98:60:a9:ce:26:8b:bb:ac:a0:cd:7d:20:bb:45:58:c3:
29:d9:d5:5b:80:12:69:ec:46:b3:ef:10:93:3f:ff:ce:4e:1c:
dd:56:b7:68:20:45:dd:55:a6:d8:49:b6:06:77:0b:12:ce:f1:
6d:33:bc:a7:cc:de:b7:22:52:de:2f:d7:12:1c:ba:f0:6e:f8:
ed:cf:da:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:11:33 2025 by rpki-client