Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/rmOgiVveOBaK3luvUgtTQwhtxWs.roa
File: rmOgiVveOBaK3luvUgtTQwhtxWs.roa (raw, json)
Hash identifier: V0f3IJAxUUQqzwtP8h12sAuXbBPYcG2TT2Oi7l3b3IQ=
Subject key identifier: AE:63:A0:89:5B:DE:38:16:8A:DE:5B:AF:52:0B:53:43:08:6D:C5:6B
Certificate issuer: /CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Certificate serial: 0194FE1F299E1C91590ED3345EAAF5762D8A
Authority key identifier: 24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/rmOgiVveOBaK3luvUgtTQwhtxWs.roa
Signing time: Thu 13 Feb 2025 07:04:02 +0000
ROA not before: Thu 13 Feb 2025 07:04:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 83.142.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 10:58:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fe:1f:29:9e:1c:91:59:0e:d3:34:5e:aa:f5:76:2d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Validity
Not Before: Feb 13 07:04:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae63a0895bde38168ade5baf520b5343086dc56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ac:a7:fd:dd:ae:38:cd:ee:eb:84:a7:62:01:
c2:92:36:a4:ba:62:18:67:d6:32:41:87:93:40:91:
5f:cd:1c:7f:22:14:89:b0:d0:15:3b:6f:5a:a8:1e:
88:ab:06:aa:26:50:32:b3:7c:0b:ca:da:1f:1d:3d:
77:ba:93:bf:66:76:b9:09:18:22:22:aa:09:54:6e:
7d:62:42:ef:05:b7:86:9c:d6:c0:3f:2d:6d:0f:1e:
63:1f:e1:8e:45:1e:55:70:79:9c:18:ac:28:47:a2:
f5:ed:52:00:b0:da:17:15:97:79:2e:e8:2c:66:8d:
03:1a:ca:ea:16:c9:ee:46:44:5c:54:6c:28:9b:3b:
cb:56:ef:ee:33:e7:76:94:05:cd:81:c2:7e:b3:d7:
2b:21:3f:5a:73:e0:08:c1:4f:44:57:a0:85:f0:ea:
aa:07:c4:6b:49:e1:42:95:40:0a:f1:db:e0:50:12:
37:8e:cc:70:66:60:7c:1d:93:d0:f3:4b:d9:4c:00:
92:55:21:cb:1f:ff:f1:e1:49:38:df:a4:96:dc:34:
fa:56:73:4b:6b:5f:6d:d2:48:d0:39:4c:11:1a:7a:
04:5a:32:34:e5:0c:c6:8f:d2:6a:4b:a2:b5:dd:c7:
1e:e5:2e:c4:bf:d5:c4:93:33:7d:6d:a4:96:9c:91:
cb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:63:A0:89:5B:DE:38:16:8A:DE:5B:AF:52:0B:53:43:08:6D:C5:6B
X509v3 Authority Key Identifier:
keyid:24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/rmOgiVveOBaK3luvUgtTQwhtxWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.28.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:b9:1c:fe:14:0e:ba:c7:f0:3d:1a:6f:ad:c9:a7:7e:4a:47:
76:35:c0:01:ea:20:ec:09:ab:ee:6a:26:15:3b:53:90:2c:de:
00:8f:19:f4:9b:a6:77:dc:57:c4:dd:a3:da:77:20:dc:57:0d:
a8:50:df:7b:62:9c:d8:35:02:d6:82:e2:eb:0a:e5:03:20:b8:
9d:b0:45:4a:e3:12:bd:fd:e9:d8:08:7f:4a:41:0d:b9:a2:a4:
36:29:57:43:a2:9b:de:0b:53:25:9a:91:e5:a7:8b:06:56:53:
99:40:eb:da:78:ef:33:a6:70:e8:69:33:b0:87:aa:8f:2a:91:
02:d2:00:38:71:30:61:e5:86:a1:df:f5:27:5c:57:8e:81:27:
4e:bb:a5:6e:d7:d1:34:3f:3e:c5:09:8c:98:f5:f3:5b:b8:d4:
fe:47:d6:1e:07:b8:ef:8a:de:4d:95:6c:d3:c0:01:9f:02:66:
2c:9e:79:f7:54:3a:b2:b3:73:44:bb:55:2e:af:54:42:2b:ac:
23:8b:55:40:64:e1:1f:a8:17:f3:67:eb:ce:bd:96:74:1a:7b:
64:ce:33:62:64:f1:c1:7a:b8:80:d8:e7:dd:06:56:bb:4e:cb:
89:c8:72:23:da:6e:a0:af:1b:75:da:1e:f5:02:a0:e0:84:af:
60:fc:ba:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:07:07 2025 by rpki-client