Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iTr91CHAlJaxamushIWMzAn9duU.roa
File: iTr91CHAlJaxamushIWMzAn9duU.roa (raw, json)
Hash identifier: uucMfvc/toO1rSKaBPlDajykvBQ8StzeQYIsWFXU6Nw=
Subject key identifier: 89:3A:FD:D4:21:C0:94:96:B1:6A:6B:AC:84:85:8C:CC:09:FD:76:E5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0193BF08BCC250BED7680BAABEF88C33E173
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iTr91CHAlJaxamushIWMzAn9duU.roa
Signing time: Fri 13 Dec 2024 08:00:41 +0000
ROA not before: Fri 13 Dec 2024 08:00:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215590
IP address blocks: 194.87.192.0/24 maxlen: 24
194.87.193.0/24 maxlen: 24
194.87.194.0/24 maxlen: 24
194.87.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Dec 2024 15:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bf:08:bc:c2:50:be:d7:68:0b:aa:be:f8:8c:33:e1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 13 08:00:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=893afdd421c09496b16a6bac84858ccc09fd76e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:73:fc:c3:7d:1e:6a:f2:28:fa:30:4a:78:34:
49:fb:bd:7e:81:5a:dd:1c:a2:c0:40:f3:c3:28:a2:
8c:8b:e5:8f:9a:54:45:5f:60:c1:ed:4d:fd:1f:e0:
c0:d9:1c:7b:be:05:db:af:c0:2b:87:18:d4:91:63:
75:91:b4:de:de:88:82:de:7c:88:4e:54:42:78:95:
bc:cc:0c:41:ec:cf:37:b4:21:c0:44:2e:de:10:7b:
9d:81:05:1c:ab:4d:da:86:51:18:69:7d:04:26:c8:
6b:9a:b1:66:b4:93:3e:ff:f0:1d:a3:de:33:f0:c9:
1a:ea:b2:e4:d8:56:a1:4d:82:f0:af:b9:8c:1a:78:
79:fd:bb:23:6d:91:91:29:4f:b7:39:41:9e:17:ac:
db:78:ac:8c:fc:fc:de:5b:f0:5d:3b:e4:cf:b5:0e:
8d:16:73:cf:6a:22:d9:c3:82:7e:d1:62:b1:c6:4c:
24:4c:5d:c2:61:4f:dc:99:13:5c:b8:11:a5:95:8e:
ec:aa:c4:ed:d0:08:0d:3d:5a:1a:ac:05:b7:cb:32:
03:8c:49:b8:4e:11:c7:e2:10:39:cc:37:94:1d:8e:
99:54:67:30:0f:18:a0:42:df:1d:60:5b:0b:16:ee:
14:cb:2d:86:0e:7f:b4:d6:ae:56:3c:92:45:98:ff:
06:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3A:FD:D4:21:C0:94:96:B1:6A:6B:AC:84:85:8C:CC:09:FD:76:E5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iTr91CHAlJaxamushIWMzAn9duU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.192.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:78:33:21:f9:4d:44:fb:76:c0:8b:5e:9a:d3:61:ff:52:7c:
97:1b:ce:e6:5e:d7:b1:9b:11:50:ab:8e:9b:01:51:01:c9:97:
49:5b:2a:4f:58:f0:3f:d3:d1:1e:b8:6b:56:28:bc:08:00:f2:
b3:70:8f:bd:bc:8d:6b:37:82:3e:94:62:e6:11:ce:a1:b3:33:
82:18:d6:51:25:f8:13:06:aa:b4:b0:93:5b:74:42:c1:5b:5c:
bb:67:fe:25:b0:20:8a:b2:70:fe:e0:db:a3:12:ef:53:77:23:
22:96:1a:b3:29:c6:c6:33:4f:a0:ae:b0:91:fb:3b:c1:58:a3:
9a:e5:e6:e0:f3:06:03:af:18:32:bb:49:18:a6:3e:4d:5c:ae:
5a:3d:05:d6:3d:1e:d0:54:f4:3b:6a:c4:9f:61:79:8f:32:fe:
ad:e5:a1:35:0f:3c:64:0a:49:c4:cc:c5:24:43:bc:a0:40:c2:
0e:b9:8f:0c:02:d7:93:f6:17:04:37:19:38:2e:a2:9e:c2:64:
35:61:d9:51:a4:15:d7:96:79:0a:d9:b1:f0:d1:48:9b:e6:61:
a4:c5:94:bc:ba:74:76:02:ad:94:85:1d:e4:c1:b7:fb:ad:67:
43:1c:00:b5:a8:a2:39:17:46:29:63:14:6f:77:6e:9c:f7:41:
7e:ee:42:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:21:37 2025 by rpki-client