Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/amxw4XgFIvzx5JvhpXzrqLIgrXg.roa
File: amxw4XgFIvzx5JvhpXzrqLIgrXg.roa (raw, json)
Hash identifier: 29VGYlj8oDifJLuDFNrxCz9EVPYyrDjP88M4Odhg3+g=
Subject key identifier: 6A:6C:70:E1:78:05:22:FC:F1:E4:9B:E1:A5:7C:EB:A8:B2:20:AD:78
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01941F8C8AC46C93D4BBF07A886DF847DE83
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/amxw4XgFIvzx5JvhpXzrqLIgrXg.roa
Signing time: Wed 01 Jan 2025 01:48:11 +0000
ROA not before: Wed 01 Jan 2025 01:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214922
IP address blocks: 188.212.97.0/24 maxlen: 24
188.212.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Jan 2025 12:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8a:c4:6c:93:d4:bb:f0:7a:88:6d:f8:47:de:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jan 1 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a6c70e1780522fcf1e49be1a57ceba8b220ad78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:04:f6:99:d3:0e:06:7b:a3:e2:7b:fc:da:99:
87:d5:12:a5:97:db:08:10:68:ea:b6:c4:1c:e5:32:
40:42:4e:09:12:36:78:f5:34:cb:83:00:79:8f:e9:
5b:cb:07:62:af:f6:11:25:58:9b:93:9c:14:94:ce:
7d:c9:ea:a9:d1:6f:57:7b:be:0e:c8:21:74:0b:c7:
0c:b9:6d:46:04:00:f7:4e:4a:75:95:17:e3:90:14:
04:8e:b7:d3:dc:1a:93:23:ce:6e:e2:91:5f:6c:a4:
99:37:b2:75:02:a4:02:93:21:36:d7:33:bb:c5:92:
17:31:13:4b:59:6d:62:63:5d:ac:c7:23:02:5c:25:
fb:58:1d:0d:56:00:f6:46:5f:87:d5:ee:06:a1:d5:
7f:9f:fe:8f:4a:43:4c:91:92:65:59:12:48:5b:eb:
0e:a5:66:84:8c:13:43:8f:2f:61:58:61:3b:a0:c7:
62:ce:a9:d3:77:78:e5:67:e5:fb:61:36:2d:d5:d1:
7c:ab:51:fd:bf:f7:80:10:10:c7:c0:be:45:7c:51:
a4:22:d4:69:28:db:bc:20:ef:e2:ae:de:53:44:99:
4c:d0:20:ae:b7:89:dc:ee:74:58:06:c2:37:4c:97:
eb:9e:69:96:48:40:f7:c7:0e:0b:c9:6c:ab:29:c5:
f7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6C:70:E1:78:05:22:FC:F1:E4:9B:E1:A5:7C:EB:A8:B2:20:AD:78
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/amxw4XgFIvzx5JvhpXzrqLIgrXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.212.97.0-188.212.98.255
Signature Algorithm: sha256WithRSAEncryption
62:2e:d5:2e:ec:c0:65:89:d4:80:22:f2:25:7b:c6:ec:a1:5a:
e9:9b:d8:18:d7:3b:c3:81:c3:d1:e8:bf:bd:0c:55:7e:08:b6:
d3:e9:fd:af:65:9d:e6:c4:46:c9:1d:72:f4:ff:2d:52:c0:8d:
3d:56:d1:a9:ea:37:7f:26:40:e9:a8:9c:94:dc:7d:4e:8c:19:
2d:3d:87:2d:0c:bc:90:fa:94:e7:9f:83:56:13:d9:fd:7a:79:
b7:72:be:38:cc:5d:46:d6:e2:99:56:7f:95:9c:c6:4d:ac:3a:
1f:9a:66:d6:e3:09:b1:dc:f0:48:8d:cf:d0:f3:3d:c8:1d:3c:
f8:fb:24:7d:da:0b:cd:e3:d5:9a:99:69:af:be:82:58:69:8b:
42:68:b2:0b:e5:97:ca:b3:44:41:ec:10:70:c8:57:da:68:54:
4a:ba:ea:7e:1c:2f:dc:aa:52:cf:1d:f7:a6:e3:92:19:9d:0b:
13:68:32:a5:ca:24:74:84:8b:19:17:84:44:f5:ee:00:9e:9a:
e8:86:5b:3f:2e:bb:1f:08:66:59:b9:52:20:70:5a:4c:a2:b9:
d6:cb:fb:8d:53:8e:f5:d0:52:0d:ec:65:84:be:70:b3:6c:e1:
77:e2:41:77:08:76:c4:19:3c:31:34:8f:e8:eb:c7:04:f7:39:
58:fb:46:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:23:40 2025 by rpki-client