Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/aKFDqMLEPj-XqNQfe1OLpl-Hc9w.roa
File: aKFDqMLEPj-XqNQfe1OLpl-Hc9w.roa (raw, json)
Hash identifier: BURUYvooiZKlmyAlk82EKC9CDiseF4Q+W6QG5nSNxA4=
Subject key identifier: 68:A1:43:A8:C2:C4:3E:3F:97:A8:D4:1F:7B:53:8B:A6:5F:87:73:DC
Certificate issuer: /CN=380099a81b346f9abcaf26056f5b77094d1cf113
Certificate serial: 0194122F54065AFAB2924054EA515117D558
Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/aKFDqMLEPj-XqNQfe1OLpl-Hc9w.roa
Signing time: Sun 29 Dec 2024 11:31:19 +0000
ROA not before: Sun 29 Dec 2024 11:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56791
IP address blocks: 94.243.224.0/21 maxlen: 22
94.243.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:12:2f:54:06:5a:fa:b2:92:40:54:ea:51:51:17:d5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113
Validity
Not Before: Dec 29 11:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68a143a8c2c43e3f97a8d41f7b538ba65f8773dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a8:16:cd:3c:6f:7e:2f:c5:25:62:33:c4:11:
3c:19:d9:6c:ed:12:3c:6e:6d:b8:24:fa:a1:35:4f:
27:4b:28:4c:b4:4a:77:7e:78:35:b8:4e:c6:9d:48:
41:81:5a:21:c4:5c:77:a0:33:c7:e0:0a:5e:33:ea:
93:5e:eb:2a:7a:83:68:1c:a0:5a:67:97:8f:73:d9:
40:2e:b0:ef:f6:28:7d:b8:13:35:5c:6e:88:04:19:
ba:76:f8:6c:7b:9c:72:59:5a:19:a7:b9:5c:ed:e7:
f7:42:8b:42:ce:f2:be:34:6f:44:bc:99:a1:d0:c6:
11:40:d8:92:17:b6:7d:7e:a0:1f:6e:0e:1a:68:bb:
00:d7:62:0e:5b:a7:d4:ce:fd:2e:1a:36:a0:7e:0e:
f4:ad:4a:c7:f0:2a:2b:89:28:ee:5e:bf:00:7a:fc:
63:54:47:25:2f:3a:cf:62:36:30:80:12:ec:dc:49:
44:b7:16:19:ba:e9:15:89:22:c0:3c:62:e2:a0:8f:
62:26:02:e3:05:1e:b9:99:7d:89:ba:44:b7:75:68:
64:71:f0:7b:01:56:91:90:bf:33:27:0c:c4:01:08:
72:1c:89:57:c0:b1:2c:24:53:95:d5:11:12:e1:98:
e6:42:1b:ae:c6:27:9f:61:82:ad:b7:44:00:b9:3b:
5b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A1:43:A8:C2:C4:3E:3F:97:A8:D4:1F:7B:53:8B:A6:5F:87:73:DC
X509v3 Authority Key Identifier:
keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/aKFDqMLEPj-XqNQfe1OLpl-Hc9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.243.224.0-94.243.235.255
Signature Algorithm: sha256WithRSAEncryption
23:b5:b1:3c:49:00:f2:0b:df:3b:70:0b:24:34:6d:65:ee:3f:
ce:fd:c3:bd:86:14:99:d7:5b:2d:3c:a4:36:3e:bc:6d:f5:7e:
a2:44:e0:cb:be:83:ae:49:e9:e6:5d:ac:b3:39:1c:0e:d2:a5:
81:a7:41:59:73:61:96:8e:f2:83:71:62:f2:65:61:b3:fe:68:
3f:18:16:ae:78:d1:f6:5d:26:2d:25:69:b1:c4:a4:7b:18:21:
5f:02:12:06:7e:02:a1:c1:33:b1:e4:7a:31:e3:40:5e:18:c5:
68:0a:e2:3c:bc:10:e8:a6:ad:d4:7d:c0:40:df:f0:82:1c:e2:
d3:51:0b:e5:af:ee:98:3a:44:76:06:4d:69:18:df:e8:90:1d:
82:c1:22:d3:04:1e:6c:66:83:23:0d:ee:01:62:f4:23:ee:1e:
80:55:71:b3:38:89:97:1b:3b:19:02:18:bb:cb:4d:02:bf:bd:
2b:e2:67:70:25:5a:90:b6:e6:ab:46:69:10:26:11:a5:fe:7d:
67:1e:31:37:df:ae:7b:58:80:ba:1d:bf:36:be:34:2f:d8:66:
03:3f:89:df:39:50:7f:ef:99:65:d8:00:3e:30:11:56:93:10:
2e:1a:f6:21:d2:5e:7d:16:e9:da:2f:9c:62:aa:ae:d6:ec:93:
3f:63:16:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:57:04 2025 by rpki-client