Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9z6hsnW0EI67dWOltbe1ZrSw8UQ.roa
File: 9z6hsnW0EI67dWOltbe1ZrSw8UQ.roa (raw, json)
Hash identifier: G0AubFFf7pYin2S/nvJh+07CHVNqBev0ipif+PBvYds=
Subject key identifier: F7:3E:A1:B2:75:B4:10:8E:BB:75:63:A5:B5:B7:B5:66:B4:B0:F1:44
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019491B5E8960618B3096E9AEE0BEB9A1CA8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9z6hsnW0EI67dWOltbe1ZrSw8UQ.roa
Signing time: Thu 23 Jan 2025 05:50:05 +0000
ROA not before: Thu 23 Jan 2025 05:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207388
IP address blocks: 192.145.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 09:20:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:91:b5:e8:96:06:18:b3:09:6e:9a:ee:0b:eb:9a:1c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 23 05:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f73ea1b275b4108ebb7563a5b5b7b566b4b0f144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:12:49:4b:30:3e:5e:c0:38:6c:10:e8:35:50:
62:91:be:5f:03:6a:48:30:c6:41:11:72:40:97:e9:
9a:0e:4c:5f:18:27:03:d9:28:15:0b:89:69:14:a5:
4d:cb:47:c9:8d:2a:b3:54:21:69:44:69:b5:4d:23:
3d:74:83:3d:79:6c:5d:9b:7b:36:78:b8:eb:43:1b:
71:5b:2b:35:08:b9:36:00:41:dd:1d:89:5d:bc:65:
6a:4e:ed:7e:c2:b5:d5:6c:0c:1e:0f:13:f2:1c:03:
e0:70:4c:6f:fc:1f:98:a9:52:0c:26:db:cd:a2:aa:
50:53:bd:e9:cd:88:00:d3:c9:26:fc:43:bb:31:ab:
7a:89:5c:4f:b1:97:15:14:32:a6:64:39:c2:cb:59:
e8:62:57:47:a2:e0:e4:aa:9f:3b:7c:12:d0:0b:b7:
3a:59:f2:af:c9:6f:c2:6a:da:89:cc:28:44:b4:ed:
f9:f0:ff:26:04:3a:e1:b2:47:d7:f8:20:46:b7:c6:
74:02:72:42:62:1e:4b:dc:13:7e:3c:8a:4c:05:6c:
e5:8b:1e:44:75:50:a4:03:b1:fa:a1:be:8c:fb:b9:
ab:7b:69:f5:aa:6f:a9:56:e8:dc:2b:30:6d:ae:ed:
5b:84:f3:51:96:fe:01:a0:54:98:a6:c1:a2:33:60:
74:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3E:A1:B2:75:B4:10:8E:BB:75:63:A5:B5:B7:B5:66:B4:B0:F1:44
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9z6hsnW0EI67dWOltbe1ZrSw8UQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.28.0/22
Signature Algorithm: sha256WithRSAEncryption
17:b4:9a:4d:51:28:cf:50:26:fe:60:d7:d2:54:d0:15:41:a6:
af:ca:7b:d0:3b:2c:2f:dc:d6:df:cb:38:8c:38:7a:24:65:0a:
27:69:c9:9d:c8:15:cb:2c:19:3c:f5:a8:db:6b:81:d4:39:f5:
3e:e4:37:f4:b3:41:23:e5:2f:e6:07:b4:35:fd:00:ef:37:2e:
6c:3a:30:29:28:7a:58:64:7d:ae:aa:87:96:ae:0d:56:79:46:
e5:a9:41:6a:c9:1b:c3:e7:23:2f:30:c1:19:95:d9:f2:ed:b1:
6e:0a:11:c0:ea:d1:0e:d1:e6:ea:d7:ee:a8:c8:e5:15:c7:ac:
ca:c7:55:db:3b:8a:3c:c5:14:ac:e1:ed:0a:5d:4a:74:33:fc:
9c:96:84:88:95:ff:ba:4f:32:6f:c6:e9:c4:d4:55:cc:2b:cf:
57:54:a1:2b:05:1b:00:23:da:54:d0:cd:f4:00:21:7f:5a:7f:
55:19:ce:cd:34:1b:fb:ca:e9:5b:0e:3c:88:f9:d4:ec:58:94:
5c:74:22:4f:f0:85:65:74:b4:de:db:7d:33:31:82:93:75:c5:
4d:f2:72:48:e9:fc:17:46:69:bd:03:87:9e:09:f5:e5:87:67:
5b:cc:c8:d9:af:25:12:09:fb:01:ab:25:05:2d:7d:cd:a4:8c:
b7:3f:cd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:46 2025 by rpki-client