Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/E9KXSNqtWd6kYTmVRVN_nDTBLHg.roa
File: E9KXSNqtWd6kYTmVRVN_nDTBLHg.roa (raw, json)
Hash identifier: falbDFlP2aluDfIFPTXpVIrTwdo13omKPARcvBi77x0=
Subject key identifier: 13:D2:97:48:DA:AD:59:DE:A4:61:39:95:45:53:7F:9C:34:C1:2C:78
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824D1E26F89114B702532187C3E7177
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/E9KXSNqtWd6kYTmVRVN_nDTBLHg.roa
Signing time: Thu 02 Jan 2025 17:51:29 +0000
ROA not before: Thu 02 Jan 2025 17:51:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215826
IP address blocks: 212.87.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Feb 2025 07:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:d1:e2:6f:89:11:4b:70:25:32:18:7c:3e:71:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13d29748daad59dea461399545537f9c34c12c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:b3:c9:3c:b0:d4:a3:56:f5:19:9f:3d:69:
89:c6:e6:9b:7b:53:60:37:0d:60:69:30:8b:51:80:
61:5f:34:a5:14:07:ac:bb:78:46:62:b4:8f:c4:02:
f9:0b:0c:31:62:f1:f1:cc:36:73:53:7d:47:93:db:
da:7e:c0:bf:69:6e:89:63:ea:31:c5:10:8d:d7:b7:
c9:4c:26:8b:8a:ab:57:5f:ad:7b:e1:7f:f2:73:8b:
4a:ef:d3:84:e6:94:d1:e0:b4:fb:cf:59:c8:4d:de:
f8:c5:10:e8:96:ef:db:e6:30:09:bf:d8:b4:d0:ad:
ca:f1:fe:24:54:b7:c7:12:57:d0:64:96:83:25:98:
de:64:51:50:92:b0:ee:c8:68:79:a3:90:e5:0b:98:
23:b2:09:60:49:4f:0c:80:0c:e8:62:2a:bd:0e:d6:
cd:23:95:aa:9b:c5:f2:b2:74:11:d3:8a:4a:6f:d6:
fb:46:8a:93:3c:db:1e:c7:31:ca:c4:a1:c5:fc:01:
53:53:ad:94:35:b3:31:74:1b:b5:26:fe:2f:36:0f:
ba:85:4b:d4:ba:48:fb:d2:7f:35:55:e0:d6:e6:e4:
d4:07:58:8b:3d:7b:8c:dc:95:29:e4:d7:1e:2c:61:
19:2c:e0:4c:21:4a:2c:fa:ba:8d:14:28:64:b9:50:
55:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D2:97:48:DA:AD:59:DE:A4:61:39:95:45:53:7F:9C:34:C1:2C:78
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/E9KXSNqtWd6kYTmVRVN_nDTBLHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.220.0/24
Signature Algorithm: sha256WithRSAEncryption
60:6d:30:98:16:b5:7b:10:36:ec:92:fc:00:d6:92:67:ad:a6:
24:b8:34:52:87:b9:3a:6d:7a:3e:52:d3:10:71:db:6f:2c:e3:
fa:ec:0c:f0:00:f6:47:b1:16:b0:82:84:25:a9:47:72:70:2b:
b7:57:38:d0:55:93:e0:3a:5d:48:2f:bc:71:da:ba:84:7e:61:
55:80:89:a1:0b:07:f0:7b:71:91:72:c0:b6:2c:8b:86:12:ab:
0c:07:1a:e0:2b:9f:76:77:e9:af:c4:74:9e:4c:c4:fd:68:bd:
6b:9f:c3:d0:c1:7b:ea:c0:0a:c2:76:d4:93:10:84:ce:77:ce:
e5:66:7b:43:74:b1:02:65:30:67:82:04:77:25:70:2e:10:45:
29:70:f6:bb:6c:c8:91:07:c1:17:fb:48:82:41:6f:f1:8f:6e:
94:39:d5:c2:a2:af:97:3b:c6:11:18:c9:f5:e5:03:87:f6:8a:
2a:85:bd:40:ec:89:2c:52:32:73:a5:61:c2:8a:49:a9:83:70:
ca:53:10:c0:42:0c:fd:f9:ca:4f:72:af:e6:0c:bb:85:fd:e9:
e9:09:76:40:6f:7a:f1:c2:3b:7e:94:a9:11:13:17:4d:a0:48:
fe:e7:b8:d6:79:26:97:45:3b:85:dd:06:c0:94:97:ba:a5:cb:
d2:c4:6f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:42:18 2025 by rpki-client