Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/9ndFgrcWMceOwGe_bzHy8l7SCfA.roa
File: 9ndFgrcWMceOwGe_bzHy8l7SCfA.roa (raw, json)
Hash identifier: JP7kkZfz0ULaVy34DKeyaiyMPCM9MfoW2V1o24kThKU=
Subject key identifier: F6:77:45:82:B7:16:31:C7:8E:C0:67:BF:6F:31:F2:F2:5E:D2:09:F0
Certificate issuer: /CN=718b138ba935234f11ca1025d667f133f07d55fd
Certificate serial: 018DC0CC778BE5300D22F23F34F311C41C27
Authority key identifier: 71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/9ndFgrcWMceOwGe_bzHy8l7SCfA.roa
Signing time: Mon 19 Feb 2024 09:57:21 +0000
ROA not before: Mon 19 Feb 2024 09:57:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202282
IP address blocks: 194.62.184.0/22 maxlen: 22
2a07:e400::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 19 Feb 2024 10:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c0:cc:77:8b:e5:30:0d:22:f2:3f:34:f3:11:c4:1c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718b138ba935234f11ca1025d667f133f07d55fd
Validity
Not Before: Feb 19 09:57:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6774582b71631c78ec067bf6f31f2f25ed209f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4c:a5:8a:5a:5b:ae:2f:07:71:04:62:67:f6:
85:ce:6a:17:21:87:d2:49:ce:9b:07:e9:22:e0:ac:
e1:90:83:50:62:01:ac:9d:6d:5a:d4:a6:e5:80:55:
ce:5d:69:35:e4:09:90:5e:24:ae:43:14:71:16:ba:
3c:e2:10:b5:3c:84:c3:07:fc:eb:20:79:fd:c4:94:
3f:76:a1:e2:63:b6:7f:09:0d:7c:07:27:d8:a9:29:
20:d8:e6:ae:6f:6c:9c:ea:b6:c1:a3:e4:12:5a:4f:
e2:92:f0:85:a5:d5:bd:63:5b:81:95:25:87:a6:92:
c9:69:d6:78:c4:9f:91:2c:81:59:1d:a1:05:5d:03:
c8:3c:91:88:15:f2:01:92:46:a2:6b:43:14:69:23:
2f:63:2a:08:e3:95:78:87:0a:10:a0:75:12:24:8d:
da:41:04:68:34:b3:0f:e4:43:15:a6:1e:5d:97:bd:
6f:35:35:76:75:15:70:38:2a:70:5a:78:66:2a:63:
79:44:f5:85:d6:06:14:16:70:84:88:a6:dc:35:2a:
64:c3:aa:53:ba:52:a0:18:c0:8b:84:dc:f6:23:26:
1c:7a:05:a4:d3:ba:4c:3a:cb:cc:8a:d1:94:de:62:
4d:1a:53:9d:5a:b0:92:9d:56:66:f9:c7:85:8e:82:
10:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:77:45:82:B7:16:31:C7:8E:C0:67:BF:6F:31:F2:F2:5E:D2:09:F0
X509v3 Authority Key Identifier:
keyid:71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/9ndFgrcWMceOwGe_bzHy8l7SCfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.184.0/22
IPv6:
2a07:e400::/29
Signature Algorithm: sha256WithRSAEncryption
af:18:4e:32:a6:a2:e2:31:90:d6:9a:0d:fb:de:bc:34:63:cb:
c1:7a:72:cc:c1:7a:b6:cb:bf:44:b2:5e:ea:cd:a6:1c:be:12:
c7:b3:1b:44:72:37:fa:7e:f1:6e:82:31:58:21:4a:79:3b:81:
04:c3:ed:34:d3:6d:e0:48:29:dc:d6:e7:37:ec:ec:6e:67:3c:
7e:75:1f:12:8c:45:c0:73:01:a8:6d:d4:3b:10:da:94:c1:47:
59:d1:ea:c3:c1:c4:7b:78:1c:76:7b:49:e9:d2:63:d9:bd:53:
5c:cf:8d:25:da:19:dc:c3:85:49:5b:22:fe:2d:0f:bb:6a:25:
74:90:81:33:7e:62:3b:9e:b3:d7:d8:ef:22:75:fe:75:76:c0:
fd:cd:d2:e9:28:6b:3c:3e:2e:23:45:d2:b0:27:ce:c0:96:88:
7b:b9:9c:9b:0b:70:d1:83:1b:32:72:6b:be:01:92:65:f5:42:
47:22:ca:05:f3:48:27:cf:ec:46:7d:6d:23:61:82:1a:24:7c:
91:58:67:ec:35:88:e7:47:9f:ef:e1:24:5f:34:10:2e:26:b2:
f3:06:7a:a7:23:9b:ea:16:e1:68:ed:22:02:9b:50:47:ab:54:
23:92:81:2c:00:56:cc:3a:cd:ae:47:4c:e0:a3:27:5c:89:ab:
83:41:2c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:20:21 2025 by rpki-client