Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/sfT7clOLTOBjvRJVAIsFquR50k4.roa
File: sfT7clOLTOBjvRJVAIsFquR50k4.roa (raw, json)
Hash identifier: fsHX7nutSHEoXkKUmU7Ra/Zz8fpeMiXl/xpdD6d1Hng=
Subject key identifier: B1:F4:FB:72:53:8B:4C:E0:63:BD:12:55:00:8B:05:AA:E4:79:D2:4E
Certificate issuer: /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Certificate serial: 01942823F33AAF9A2AD1074C5FD4CB9937E4
Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/sfT7clOLTOBjvRJVAIsFquR50k4.roa
Signing time: Thu 02 Jan 2025 17:50:32 +0000
ROA not before: Thu 02 Jan 2025 17:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212234
IP address blocks: 83.220.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 07:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:f3:3a:af:9a:2a:d1:07:4c:5f:d4:cb:99:37:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Validity
Not Before: Jan 2 17:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1f4fb72538b4ce063bd1255008b05aae479d24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f4:07:ae:c3:5d:92:a3:3d:f6:7e:5c:ec:7b:
88:ea:24:60:59:36:18:f4:3c:b5:00:ba:30:6b:ac:
17:11:11:1c:4e:45:e3:3e:2f:0a:cd:9d:95:e7:4d:
41:19:25:40:5a:c6:46:ad:7a:0e:08:83:c8:8e:f3:
4d:a5:bc:eb:6a:74:87:e6:4b:17:54:e4:f2:48:4a:
af:01:be:e4:2d:09:27:ae:e3:c4:3c:4e:64:47:81:
50:b7:df:9d:05:8a:a3:b2:a8:5b:df:49:58:a4:2a:
68:d5:c5:33:5c:0f:f4:9a:95:ab:0e:8e:ab:ba:18:
4b:8f:7b:cb:6a:d1:2a:c4:be:3f:bc:63:6b:c0:1b:
af:2e:fd:ab:4b:35:97:a3:ad:81:98:10:a4:f2:4f:
e2:4b:16:9b:00:11:ab:0c:47:f2:c5:df:69:07:87:
9d:6c:c7:a3:3f:49:33:be:04:0f:2d:8c:1d:8e:d0:
01:4d:32:f8:63:86:94:fc:1f:29:9c:30:23:e6:db:
a2:06:ac:29:19:08:21:c0:5f:53:02:51:3c:10:e8:
74:20:90:b6:bc:b9:e6:ab:5f:17:5d:fd:3d:66:31:
82:06:ca:c9:a4:53:a3:e3:00:b3:27:7a:15:4b:12:
7d:4a:b4:bb:7a:15:33:39:b3:93:3a:c2:bb:7c:fd:
fc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F4:FB:72:53:8B:4C:E0:63:BD:12:55:00:8B:05:AA:E4:79:D2:4E
X509v3 Authority Key Identifier:
keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/sfT7clOLTOBjvRJVAIsFquR50k4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.220.84.0/24
Signature Algorithm: sha256WithRSAEncryption
33:78:88:a9:6d:d5:6e:8b:1a:6a:cf:f0:18:3f:44:51:93:55:
d9:bb:89:de:43:e3:d9:7b:31:98:b5:d4:12:ff:e4:39:9e:bf:
eb:82:86:2b:7a:f3:e8:58:56:89:08:dd:3f:19:e1:b6:15:6e:
22:61:25:72:a6:b9:2a:68:86:90:85:c3:b5:49:72:3d:7d:91:
18:dc:26:5a:18:42:5b:73:cb:b2:99:73:87:2a:62:1e:10:90:
b2:7e:66:3e:18:d1:ad:0c:bf:1d:03:0a:e6:0a:04:cb:e2:a8:
9a:2c:01:50:58:f0:e1:9b:d5:78:ce:3b:43:f3:9d:31:61:0c:
33:a5:f5:d6:95:2b:33:f8:e7:10:27:27:92:41:43:1b:2a:cf:
07:71:ee:46:78:ee:27:08:9c:98:32:46:c6:5b:6f:3a:89:fe:
1d:a5:a5:05:1b:75:a2:86:67:16:fd:ed:bc:8a:88:9d:22:4d:
09:bd:18:5e:02:b7:1a:73:1c:75:43:a3:4a:85:9d:1a:30:13:
24:5e:b5:35:5b:23:5e:15:22:66:2e:0a:24:3a:07:d1:ce:47:
02:a0:f3:a3:77:ac:7c:b1:2a:c0:98:0f:9c:97:ca:2b:98:9e:
e2:6c:95:3e:66:a3:74:4a:56:99:46:5c:3f:58:51:13:bb:39:
96:91:17:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:25:06 2025 by rpki-client