Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xLcEA8wDy8vvYvFumhFwimaTRvo.roa
File: xLcEA8wDy8vvYvFumhFwimaTRvo.roa (raw, json)
Hash identifier: ENggluhXxsbMmGCVm6xjgx05n0pmUYG/TVN1FNwUUZE=
Subject key identifier: C4:B7:04:03:CC:03:CB:CB:EF:62:F1:6E:9A:11:70:8A:66:93:46:FA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019408B4473DAD92E612AF49A036E152DC38
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xLcEA8wDy8vvYvFumhFwimaTRvo.roa
Signing time: Fri 27 Dec 2024 15:20:19 +0000
ROA not before: Fri 27 Dec 2024 15:20:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214943
IP address blocks: 94.156.177.0/24 maxlen: 24
94.156.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Dec 2024 02:23:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:08:b4:47:3d:ad:92:e6:12:af:49:a0:36:e1:52:dc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 27 15:20:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4b70403cc03cbcbef62f16e9a11708a669346fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:db:6e:de:0e:3d:f4:55:14:21:9a:5a:f9:
7d:00:e0:bb:76:78:a6:5e:71:5f:15:1d:8f:b7:ef:
ea:a4:e6:55:5b:60:97:0d:02:eb:f7:8f:eb:4d:b8:
f6:36:a2:bf:0f:ba:7a:a8:96:f3:ba:f4:ff:26:74:
04:ce:36:07:59:08:14:ff:cf:f5:35:9e:30:7c:c4:
57:e2:73:aa:4c:5e:8b:f4:6c:3b:12:aa:73:c9:b6:
7c:66:5b:84:e0:44:8c:d8:ae:9a:2e:10:ec:38:b5:
25:11:13:2c:33:d1:e8:09:92:9c:d6:30:69:bd:aa:
bf:72:d1:58:50:b3:aa:2e:c9:5a:5a:4d:d0:16:b7:
62:8f:60:34:98:dc:80:53:ab:11:a1:52:13:03:f7:
57:b3:b0:42:75:4c:19:39:cb:ec:b4:e7:18:10:43:
b9:85:35:25:ce:aa:bb:a7:9b:21:c0:26:c6:6d:2f:
3f:54:ab:9b:0a:2d:57:dd:f9:fc:f3:e9:29:3a:09:
e1:fe:b5:d3:b7:96:b0:5e:48:51:cc:bd:ea:fd:0b:
ed:e0:71:24:ef:25:46:72:19:a4:55:4c:f1:b7:f4:
44:d0:43:77:4f:ce:db:19:ae:10:b9:e9:2d:52:eb:
49:10:23:dd:9c:ef:68:14:69:80:d8:1b:89:df:21:
a8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B7:04:03:CC:03:CB:CB:EF:62:F1:6E:9A:11:70:8A:66:93:46:FA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xLcEA8wDy8vvYvFumhFwimaTRvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.177.0/24
94.156.227.0/24
Signature Algorithm: sha256WithRSAEncryption
12:3a:b5:7a:95:be:9c:26:2b:61:20:bb:18:cb:40:1e:8c:f0:
d3:89:4e:de:91:4e:a1:a0:7a:76:8c:6c:92:ba:b5:3c:78:72:
b1:ff:53:b2:53:fb:dd:9a:cc:fb:8d:64:73:ed:62:27:10:33:
18:a6:29:01:d6:ad:f9:c1:74:9c:fb:cd:e8:8a:81:b5:3c:71:
26:ec:7c:69:34:dd:4b:d3:4f:20:e6:d6:3a:7c:c0:b2:56:83:
b2:16:b7:fe:e1:37:51:49:74:f3:2d:f1:e0:e6:49:4e:40:b2:
a7:f6:f2:e5:b6:0b:9c:1a:4c:0f:ab:21:2d:4e:36:8c:af:d6:
29:5c:82:71:d7:45:85:4a:60:6b:6a:d9:51:5b:28:25:7c:8f:
c7:a4:32:c7:c9:9a:69:bb:76:6c:75:6c:04:90:23:93:2b:76:
96:78:98:c6:6d:bd:5b:61:2e:f3:81:62:6e:0a:d9:84:e0:72:
7d:26:3b:0d:5a:ae:8b:01:9e:91:56:c6:1b:0f:66:f8:9a:f2:
b7:12:bd:c9:f4:7b:4b:1c:e5:42:d4:37:e0:9d:70:c8:b6:97:
3c:c6:7a:d1:40:bb:02:30:11:45:d2:fd:61:dd:8d:8a:59:f2:
66:2f:d5:86:de:1f:96:19:e8:ea:38:9d:62:63:2c:1a:02:59:
68:c6:fb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:58:12 2025 by rpki-client