Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/T9gX_8bpgIJO2U_6dT8DCAS-_FA.roa
File: T9gX_8bpgIJO2U_6dT8DCAS-_FA.roa (raw, json)
Hash identifier: 22PTMhqB6QXJDs0xbZJiZ4AMSOFKgNQM2zIxuC/kQnY=
Subject key identifier: 4F:D8:17:FF:C6:E9:80:82:4E:D9:4F:FA:75:3F:03:08:04:BE:FC:50
Certificate issuer: /CN=cac24115a22c8d4121a4a06758aa869bd1c93a1e
Certificate serial: 0191FAF50A85E54F477EF3E1B73FE6F1FF50
Authority key identifier: CA:C2:41:15:A2:2C:8D:41:21:A4:A0:67:58:AA:86:9B:D1:C9:3A:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/T9gX_8bpgIJO2U_6dT8DCAS-_FA.roa
Signing time: Mon 16 Sep 2024 13:10:48 +0000
ROA not before: Mon 16 Sep 2024 13:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214296
IP address blocks: 194.9.66.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:f5:0a:85:e5:4f:47:7e:f3:e1:b7:3f:e6:f1:ff:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac24115a22c8d4121a4a06758aa869bd1c93a1e
Validity
Not Before: Sep 16 13:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fd817ffc6e980824ed94ffa753f030804befc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:59:8a:8a:34:0e:22:72:f9:f9:a7:e7:2c:4c:
63:a2:0c:7b:42:99:8a:02:e3:82:f6:13:bd:43:38:
38:f8:20:ac:02:fc:df:c8:f3:c1:ee:1e:a5:a5:66:
f6:d5:17:90:2a:a8:0c:4a:aa:29:52:a8:4c:94:b8:
6a:a1:57:45:2b:6a:ef:e9:36:ad:2e:0d:d7:02:6f:
15:52:36:7e:37:75:95:8f:3a:dd:1d:8f:c0:2a:c5:
9d:60:67:c0:be:1e:d4:0e:57:e4:89:ed:03:be:e1:
e4:23:d8:33:cc:ad:dc:58:ec:96:0a:32:f2:22:a2:
52:b5:5c:d5:bc:c3:e4:23:db:f6:2a:6c:02:b5:07:
0a:d2:a9:b3:0a:df:52:c1:ba:77:6c:ae:8b:92:c9:
66:47:ed:57:c1:02:98:8c:3d:32:3c:ad:84:b8:e0:
c5:d4:cd:81:dc:40:5d:f9:b1:f3:12:3b:00:c5:a3:
2a:a9:0a:83:50:88:74:89:9a:ed:70:6e:b7:24:e5:
66:6c:ee:10:69:e2:96:6a:4c:ce:b0:7a:da:37:69:
93:6b:98:d6:dd:1b:11:2f:aa:15:57:e0:30:23:16:
3f:9c:8b:35:f6:d2:9d:c2:61:c0:77:93:55:85:ab:
00:97:86:f1:e5:5f:d8:41:db:32:c9:9f:89:43:6b:
ca:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D8:17:FF:C6:E9:80:82:4E:D9:4F:FA:75:3F:03:08:04:BE:FC:50
X509v3 Authority Key Identifier:
keyid:CA:C2:41:15:A2:2C:8D:41:21:A4:A0:67:58:AA:86:9B:D1:C9:3A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/T9gX_8bpgIJO2U_6dT8DCAS-_FA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.66.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:f5:14:e6:47:fa:46:6d:97:c1:42:3e:eb:ec:44:bd:82:72:
64:27:ab:c8:b9:81:4a:59:09:a5:f1:63:e3:4b:40:43:ec:1a:
48:d4:16:c7:a0:94:dc:28:3b:dd:53:e5:55:d4:cc:d3:5e:9b:
04:2b:1c:9d:b2:d8:d1:81:4f:66:bc:ff:92:23:15:12:11:16:
1b:af:dd:8c:8e:2c:0b:79:c8:e7:28:f6:da:69:4c:0b:30:86:
57:1d:1f:84:d1:64:da:48:a4:af:a1:e0:8e:1f:0e:9f:44:66:
b0:58:ae:bb:4a:fb:0b:a6:dd:84:02:b7:e4:82:4a:62:4b:00:
21:39:a2:79:12:5c:fb:b7:e6:9b:2f:ab:90:ca:b6:f2:3d:19:
78:47:a9:ef:48:d6:cd:78:e8:e5:9e:74:95:ac:cf:a9:19:43:
26:e0:5a:c3:ef:ab:5d:71:f8:13:72:2a:42:23:f3:bd:88:3c:
29:f1:6b:0f:a6:fc:5f:80:ff:eb:24:11:5e:9c:15:c7:74:94:
89:f4:7d:80:40:24:2b:c7:08:55:66:1a:83:0f:d8:4b:db:85:
29:cf:dc:87:be:bf:31:83:84:7b:9c:b2:6a:e0:56:e8:e7:e3:
26:1f:30:65:aa:f2:0a:84:4e:84:17:42:b3:ee:bb:4d:49:f1:
7b:52:5c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:05 2025 by rpki-client