Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0e8k869sz3Qn7D0C4NcZ0yrjHo4.roa
File: 0e8k869sz3Qn7D0C4NcZ0yrjHo4.roa (raw, json)
Hash identifier: 5l4n6eTuufEtsgInNkr8H5VDfq69+2Wq29FANFk+KPw=
Subject key identifier: D1:EF:24:F3:AF:6C:CF:74:27:EC:3D:02:E0:D7:19:D3:2A:E3:1E:8E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824B2C8A6080B0768294B466E3426F4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0e8k869sz3Qn7D0C4NcZ0yrjHo4.roa
Signing time: Thu 02 Jan 2025 17:51:21 +0000
ROA not before: Thu 02 Jan 2025 17:51:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207388
IP address blocks: 192.145.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Jan 2025 11:45:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:b2:c8:a6:08:0b:07:68:29:4b:46:6e:34:26:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1ef24f3af6ccf7427ec3d02e0d719d32ae31e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:89:f4:0a:98:b0:72:40:7f:af:7a:5d:f4:ee:
55:d1:24:c5:22:d9:43:e7:d3:59:12:b5:3d:7a:49:
e7:62:60:f2:2e:dc:54:b1:ea:b6:b8:02:28:d3:af:
4f:fc:2c:8f:17:24:0f:b8:f2:e5:17:6c:10:30:a5:
bc:54:0f:19:36:52:24:09:0b:66:9e:07:06:b5:b6:
17:6c:fd:27:0d:b1:8b:b5:3f:83:5c:68:0b:9b:20:
ed:45:6f:73:cb:4d:e6:34:d7:5b:0b:80:37:61:2c:
64:e7:83:19:d6:fc:19:32:4f:7b:a4:93:e6:7d:4c:
6b:dc:03:30:b3:bc:52:c7:8c:20:aa:4a:96:76:ee:
54:b6:73:ed:7d:b5:5e:eb:7f:d3:90:24:70:48:87:
20:a9:c0:a9:6c:69:cf:f7:40:e8:05:0d:49:ae:f4:
bb:6b:f5:a2:ae:a3:65:0b:8f:2c:8b:d0:19:3f:66:
c1:b9:25:ed:2c:c1:c8:cd:e2:f4:6e:e4:11:7b:9d:
6f:d6:b5:0f:c0:5c:e1:c3:38:9d:b8:be:3b:60:9a:
61:c9:cf:df:57:ae:33:e6:a3:ec:9f:a0:03:5a:89:
95:05:4f:41:63:00:3f:18:23:cb:fc:be:aa:69:c3:
ff:04:86:8a:bc:0e:27:87:e3:90:38:22:05:9b:76:
fe:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EF:24:F3:AF:6C:CF:74:27:EC:3D:02:E0:D7:19:D3:2A:E3:1E:8E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0e8k869sz3Qn7D0C4NcZ0yrjHo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.28.0/22
Signature Algorithm: sha256WithRSAEncryption
17:56:69:47:0d:ad:3a:a6:3a:5e:a7:fa:0f:eb:77:3b:1b:ff:
ae:97:c0:27:46:84:06:4d:01:52:11:44:b8:3f:18:cf:d1:89:
c8:0a:62:16:55:ec:38:1c:2d:c4:5e:8f:c7:50:be:13:b4:75:
dd:f8:99:15:07:97:ba:6c:78:54:76:08:de:61:9c:56:de:4c:
4a:72:9a:36:18:54:5c:e6:0c:20:90:cc:09:80:2e:0a:35:46:
91:e5:51:9a:5e:40:62:de:b2:ad:45:55:bc:49:95:0d:84:b6:
b4:a6:06:f1:9b:ea:7d:8a:96:8c:c0:61:c1:05:37:a3:2c:ab:
93:c6:88:11:88:c6:05:1c:a3:4b:c2:95:8f:cb:3b:4d:fb:5f:
56:5a:2f:54:a2:1c:e5:a1:55:db:94:94:5a:81:3c:e3:06:14:
c5:42:bb:6d:65:0f:b4:99:68:1c:dd:66:2a:9c:60:a4:aa:5a:
ed:38:9a:d3:dd:16:7c:16:e8:4f:01:f9:08:17:08:bb:91:3a:
f1:ea:27:60:2e:4e:e9:99:bb:c5:6c:53:bf:c6:e1:12:c5:9d:
d0:5a:72:30:e6:c3:ae:4b:68:94:e3:64:ab:3a:b3:7f:42:fe:
9a:36:69:c9:bd:d1:96:f3:db:22:21:24:fa:d3:e2:f8:ef:9b:
2e:5a:a1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:35:41 2025 by rpki-client