Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1jJkAA6aNq5gdLGz-Gxdy72qYxw.roa
File: 1jJkAA6aNq5gdLGz-Gxdy72qYxw.roa (raw, json)
Hash identifier: yo8fVuVCsgE1r2mxYbIdaXBETU+CQoK9n3nYEgq6DKY=
Subject key identifier: D6:32:64:00:0E:9A:36:AE:60:74:B1:B3:F8:6C:5D:CB:BD:AA:63:1C
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 0193533A9B291189A165791A53A40C43FEBC
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1jJkAA6aNq5gdLGz-Gxdy72qYxw.roa
Signing time: Fri 22 Nov 2024 09:36:09 +0000
ROA not before: Fri 22 Nov 2024 09:36:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206092
IP address blocks: 192.109.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:3a:9b:29:11:89:a1:65:79:1a:53:a4:0c:43:fe:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Nov 22 09:36:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d63264000e9a36ae6074b1b3f86c5dcbbdaa631c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e6:c1:f5:8f:82:64:dd:f7:05:3f:80:3c:7a:
b8:bf:1f:83:fe:22:e2:13:64:a6:b0:73:a4:8e:a3:
d2:bf:43:9a:cc:f7:29:10:15:ff:ed:cc:89:16:f1:
d5:94:78:9f:0d:7b:21:46:f1:74:6f:7b:19:14:65:
67:1b:f0:e6:86:fa:42:c4:30:c7:ec:e2:78:b6:62:
77:c9:23:d5:c8:6e:17:c0:45:8a:5e:cc:9f:c4:0c:
93:8b:d6:c0:9a:08:c5:be:62:82:da:f3:fd:4c:56:
3c:23:29:74:0c:32:c1:93:81:8d:4b:69:a1:da:3f:
c7:4b:03:14:1f:9a:ba:33:fe:27:b9:5a:33:9d:ea:
cd:eb:9f:13:b7:f2:ef:b2:ef:b0:fe:13:7b:80:42:
86:0f:ab:5f:52:89:d2:6e:fe:53:c2:14:66:0c:6d:
5c:43:4d:3a:ce:87:dd:f4:8e:eb:33:ee:42:dc:f4:
77:d8:6c:b8:d7:fd:3d:bd:2e:ef:42:41:fc:28:fe:
3e:27:6c:43:26:8d:4b:18:9a:e5:58:55:71:88:65:
8e:f0:a9:1f:cd:7c:73:96:6b:f5:d7:02:f9:1c:c2:
9b:23:9b:95:b7:fa:a4:6f:83:fb:8a:77:63:2b:81:
9f:f3:2b:41:b0:94:01:27:d9:de:ba:b2:e0:fd:cc:
cf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:32:64:00:0E:9A:36:AE:60:74:B1:B3:F8:6C:5D:CB:BD:AA:63:1C
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1jJkAA6aNq5gdLGz-Gxdy72qYxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.205.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:37:31:d9:b9:cf:25:77:59:5a:88:5e:02:20:05:52:83:8a:
37:c6:e6:ab:70:8f:97:1f:0b:36:e7:cc:f9:b9:e8:d0:7c:42:
98:75:23:b4:2f:b0:04:fe:84:39:fb:25:a3:48:8e:05:68:ce:
8e:63:2c:00:40:df:0b:80:3a:f2:5f:68:6a:7c:14:9a:f4:e3:
2e:c6:67:aa:81:b1:64:5e:87:e6:90:5e:97:eb:e1:ed:e8:aa:
0a:8a:ac:ea:e4:e2:cc:3f:03:a4:12:2c:4e:b1:93:ab:df:90:
36:2a:2d:05:9f:b2:49:39:a7:d0:4f:ab:96:7b:08:1a:b8:00:
a4:9b:36:73:ae:cf:b1:39:fc:82:32:df:1d:ae:ff:76:5a:40:
31:38:38:74:54:b3:3c:ba:71:85:f6:22:c0:cb:34:dd:11:c0:
76:24:cb:24:7d:1d:bf:5b:f1:ad:67:2e:eb:c1:25:a2:70:9d:
d0:94:c3:0b:bf:65:c0:ad:6a:aa:13:a9:8d:51:ba:d1:de:20:
52:f5:26:e0:c5:69:90:4d:d0:0e:96:7f:1a:33:37:e6:25:90:
a1:c7:d9:de:31:78:51:f3:d0:9e:37:65:52:dd:02:fc:5f:7c:
cc:45:2c:21:fb:8a:77:0b:6e:37:2f:ec:fe:8c:c6:97:32:31:
7c:5d:fb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:12 2025 by rpki-client