Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k0GINJPot2OjMFUjUtB5aZtCPW4.roa
File: k0GINJPot2OjMFUjUtB5aZtCPW4.roa (raw, json)
Hash identifier: 5wNFV4kkKv1CdO4JY2c7gywKc9YMZPrv5HCCFgjoW30=
Subject key identifier: 93:41:88:34:93:E8:B7:63:A3:30:55:23:52:D0:79:69:9B:42:3D:6E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282457FBB49399014839A8BAB32E1907
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k0GINJPot2OjMFUjUtB5aZtCPW4.roa
Signing time: Thu 02 Jan 2025 17:50:57 +0000
ROA not before: Thu 02 Jan 2025 17:50:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6939
IP address blocks: 94.156.114.0/24 maxlen: 24
94.156.118.0/24 maxlen: 24
94.156.120.0/24 maxlen: 24
94.156.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Jan 2025 08:51:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:57:fb:b4:93:99:01:48:39:a8:ba:b3:2e:19:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:50:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9341883493e8b763a330552352d079699b423d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e5:e9:68:e2:46:69:2c:ba:4a:e8:a1:f8:76:
88:a5:70:d5:99:04:a0:e2:de:87:07:c9:9a:48:f8:
09:dd:f4:aa:e5:2d:9a:09:ae:e0:93:ab:c7:88:bb:
34:56:e6:88:4d:82:46:02:0f:f2:e3:d6:5d:a9:e4:
76:3c:ad:7b:0e:fa:1f:db:f3:25:24:39:92:35:5f:
12:07:27:63:04:83:9d:09:62:7b:55:21:ab:15:0d:
42:31:ab:99:45:a8:89:df:fe:f2:af:e2:04:e5:45:
7a:b1:56:18:f8:2c:87:e7:66:d0:7c:2c:06:14:f6:
37:70:55:7f:dc:18:83:ba:3c:1f:07:3d:1d:b9:92:
33:fa:b5:71:99:f5:e2:50:a8:b2:7a:e4:36:74:3f:
24:da:0d:03:40:b8:3b:2d:0e:af:30:28:3c:80:72:
ac:43:66:8a:37:6d:f5:8a:cd:83:21:17:e2:89:c9:
74:d0:14:3f:c5:a1:9e:b6:0b:eb:92:e8:47:83:ae:
72:2d:db:11:55:1f:1c:65:da:c6:60:ce:35:b0:dc:
c5:30:62:f0:3b:6d:69:d8:89:c6:66:76:2c:aa:73:
d0:a7:fa:a3:aa:3f:bf:a9:89:82:4a:37:50:0b:e5:
cb:33:8b:36:80:74:8f:c7:93:01:3e:fc:a7:30:de:
84:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:41:88:34:93:E8:B7:63:A3:30:55:23:52:D0:79:69:9B:42:3D:6E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k0GINJPot2OjMFUjUtB5aZtCPW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.114.0/24
94.156.118.0/24
94.156.120.0/23
Signature Algorithm: sha256WithRSAEncryption
46:92:08:f1:97:3e:a2:52:7b:24:7f:c0:d8:2a:61:41:6f:dd:
df:c2:d7:15:4d:2a:9a:2e:20:a9:f3:a1:5f:71:93:cc:89:1a:
d7:26:87:39:5a:9c:5e:63:a2:6c:99:12:b0:5b:3a:b9:0d:45:
cd:8b:95:82:1a:ee:21:17:95:d6:af:9a:ed:03:55:e0:33:e0:
de:24:d7:78:88:42:f2:15:22:74:b8:62:04:77:a2:eb:3b:02:
cf:5c:01:0b:14:80:cd:d0:22:45:a1:28:60:5c:49:51:69:2c:
77:fb:b9:da:f3:41:82:d5:93:15:36:b4:b5:19:c1:a1:59:9e:
cf:e0:03:ca:b9:88:d3:64:78:83:9d:b6:a1:a9:5a:da:31:a0:
4f:f2:b5:86:1e:b7:6b:ca:55:23:54:a3:3b:10:6b:53:a3:45:
5d:c4:41:6f:a9:fb:f9:90:46:9f:df:40:0f:b1:7c:49:2b:2c:
45:ec:26:ce:56:42:ac:3e:6d:47:6b:c1:c9:e9:52:11:74:f3:
26:a1:98:f4:70:e3:a1:c2:77:b5:ef:b4:84:40:84:47:50:ab:
4c:be:a0:80:1e:27:57:19:e8:18:35:b9:85:de:99:4f:07:01:
be:43:2b:8d:ef:22:08:f9:11:90:25:0d:52:9b:c4:da:22:d3:
53:01:03:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:08:17 2025 by rpki-client