Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/A9IkFPXYdO3T5X5JefE13sRUvuw.roa
File: A9IkFPXYdO3T5X5JefE13sRUvuw.roa (raw, json)
Hash identifier: hsCU/Fyi5tvMnNKBCIq7mnMVnPb2UsdaLap42FYPT4s=
Subject key identifier: 03:D2:24:14:F5:D8:74:ED:D3:E5:7E:49:79:F1:35:DE:C4:54:BE:EC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193B089D49871607E93008F15B416424C83
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/A9IkFPXYdO3T5X5JefE13sRUvuw.roa
Signing time: Tue 10 Dec 2024 12:27:22 +0000
ROA not before: Tue 10 Dec 2024 12:27:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6939
IP address blocks: 94.156.114.0/24 maxlen: 24
94.156.118.0/24 maxlen: 24
94.156.120.0/24 maxlen: 24
94.156.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b0:89:d4:98:71:60:7e:93:00:8f:15:b4:16:42:4c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 10 12:27:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03d22414f5d874edd3e57e4979f135dec454beec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f6:36:e6:c0:a2:e4:d3:cb:62:b6:91:a4:72:
73:d0:6a:3e:88:6a:07:73:ec:6d:1f:06:ba:94:e8:
12:67:25:ef:40:95:b2:08:1e:13:41:9e:b1:94:7f:
92:f3:e5:6b:50:9f:7a:87:23:e6:8d:b4:86:b6:b0:
d5:74:58:b0:81:85:99:77:8b:e2:5c:c1:d2:0e:f4:
93:6a:d9:87:66:82:79:2e:eb:24:0e:7a:73:09:d8:
a3:35:72:12:80:72:15:41:d3:01:11:b6:7c:cf:d6:
84:3e:f1:3b:da:5c:03:cc:ca:a7:a7:ac:21:d9:f5:
8f:ca:87:b2:36:eb:1f:a3:d2:33:be:ce:08:31:26:
f9:8d:58:12:ce:f2:3e:89:30:b3:43:d3:96:18:0d:
ab:f9:be:04:b7:91:7f:77:a6:77:44:60:dd:51:36:
dc:29:a5:01:25:85:3f:8b:2f:d3:30:c7:e7:3e:c4:
6b:a0:03:cd:f9:4b:df:16:83:78:a0:62:5b:2a:31:
24:64:fd:bd:58:e8:c8:44:81:4c:5f:27:01:9f:7b:
08:7b:c4:85:8e:5a:32:6f:eb:dd:6a:5c:9a:28:20:
03:56:97:14:ac:64:0b:eb:3e:58:f8:ec:f8:4d:2f:
e7:6f:5e:86:a6:46:67:81:ef:3a:14:3b:2d:70:ad:
10:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D2:24:14:F5:D8:74:ED:D3:E5:7E:49:79:F1:35:DE:C4:54:BE:EC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/A9IkFPXYdO3T5X5JefE13sRUvuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.114.0/24
94.156.118.0/24
94.156.120.0/23
Signature Algorithm: sha256WithRSAEncryption
65:af:d3:c1:f1:f0:b3:8f:96:5e:61:51:82:47:16:e6:b7:34:
97:18:58:a2:61:9b:29:8a:13:d5:e7:dd:a0:31:43:85:39:c3:
3b:84:04:7f:75:9c:11:70:17:3b:1c:27:57:22:4c:9c:ad:fe:
1b:e6:fb:8f:20:41:7a:04:a6:87:e7:34:f0:0e:9b:a7:7f:24:
62:90:55:8a:3f:ec:74:a5:28:4a:c9:5f:77:d3:30:6a:53:24:
bd:99:6e:58:9d:bc:2f:0a:0a:df:f5:e5:84:b3:39:2e:69:75:
cc:24:fc:97:49:98:56:10:8f:c4:da:34:b7:97:53:52:5b:0e:
9d:94:92:3e:27:5f:50:2c:18:b5:8f:d3:c7:33:c9:d7:28:41:
02:1a:eb:b6:db:a4:4a:2a:68:59:e3:46:ae:36:9f:81:96:d9:
ce:5d:ef:61:10:24:3f:39:ef:e1:7e:68:5c:04:e2:25:34:a0:
31:4e:ef:62:84:49:be:16:82:48:b2:1e:fa:3c:89:c8:75:13:
13:4b:b5:80:4d:22:59:58:41:06:aa:46:6b:78:52:c6:86:c7:
e0:74:ca:f8:f8:a1:aa:01:ce:b4:34:83:6c:d6:b3:56:94:02:
d5:27:97:3c:53:e8:d5:a5:b6:85:ce:31:da:ff:d7:d4:ac:42:
70:45:bc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:42:26 2025 by rpki-client