Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/M0ck-ri1RVHDueUxc4K8Izq2Ook.roa
File: M0ck-ri1RVHDueUxc4K8Izq2Ook.roa (raw, json)
Hash identifier: K48hE0qPxpfrftHYXEVGHTpIP6T2TzfxXtjONYsXfYs=
Subject key identifier: 33:47:24:FA:B8:B5:45:51:C3:B9:E5:31:73:82:BC:23:3A:B6:3A:89
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193B024340B439D819AD14F563F1B3FDAEE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/M0ck-ri1RVHDueUxc4K8Izq2Ook.roa
Signing time: Tue 10 Dec 2024 10:36:22 +0000
ROA not before: Tue 10 Dec 2024 10:36:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 91.92.240.0/20 maxlen: 20
94.156.64.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b0:24:34:0b:43:9d:81:9a:d1:4f:56:3f:1b:3f:da:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 10 10:36:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=334724fab8b54551c3b9e5317382bc233ab63a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9f:e6:f7:25:dd:1e:40:c1:a0:b3:72:47:df:
1b:e5:31:33:de:b1:3f:45:57:01:3f:c3:26:0b:6e:
e5:e0:97:fc:02:5d:2c:cb:ad:44:7d:f3:8c:47:2d:
73:95:8a:b9:b1:26:80:85:c6:e7:c8:6e:5c:1f:7d:
70:d7:a8:05:1c:03:d3:42:1f:58:4d:87:b7:bd:20:
cd:b6:ea:76:54:16:a1:ec:6e:42:6e:02:a7:23:3b:
be:19:32:1b:c5:8c:d8:a0:2f:61:7c:cd:3b:7b:40:
8b:e9:7b:1c:30:ef:c1:97:c5:95:09:79:6b:18:d6:
03:93:91:6b:f3:0f:f9:f8:b8:1a:47:6d:94:69:19:
c1:f8:fd:be:f5:20:e7:b4:2b:85:17:a5:fe:82:dc:
37:20:10:6a:3d:77:d3:e9:cb:4c:3d:41:3b:e6:ba:
16:ed:98:4e:9e:8c:a3:04:99:a0:71:da:ee:59:e3:
78:67:20:d4:17:bc:54:69:f5:cb:e0:95:b0:11:44:
01:f4:b0:25:5b:e4:46:ae:e0:85:97:40:00:88:b5:
83:91:ff:77:62:0b:44:41:af:ec:a0:50:99:59:8e:
c6:69:24:b8:8f:61:9e:0b:f5:f3:73:e3:67:bd:ef:
9c:87:07:5a:36:2b:1f:47:ae:0a:52:f5:cc:18:55:
eb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:47:24:FA:B8:B5:45:51:C3:B9:E5:31:73:82:BC:23:3A:B6:3A:89
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/M0ck-ri1RVHDueUxc4K8Izq2Ook.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.240.0/20
94.156.64.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:87:56:43:00:eb:d8:a4:4d:09:9d:9e:09:ad:ee:64:fb:1d:
c5:26:ce:8d:94:3e:c8:6a:97:d4:55:57:7b:f6:9f:55:57:70:
31:06:16:e3:3f:ce:65:79:07:e1:cc:ee:98:44:04:aa:43:43:
f3:31:33:54:b2:de:ea:04:77:10:de:d0:5e:e7:a5:d5:0e:27:
94:cd:37:24:75:0c:97:d9:90:96:fc:ed:98:99:b1:01:e9:4c:
41:28:2e:51:53:18:6d:77:ec:9a:6b:26:08:a4:98:d1:bd:c8:
79:e4:67:fd:53:88:18:8d:ac:14:8e:fe:e8:1b:9b:7c:39:5c:
74:e6:37:76:d3:a7:e8:7a:7f:bb:1d:db:36:c2:5d:a4:df:3d:
a8:2a:a6:9b:fb:81:f3:a9:f1:d3:b5:b1:6c:4f:77:13:84:bb:
f8:c6:33:16:65:c3:fc:05:20:b3:2f:a3:84:14:88:02:2a:65:
88:86:37:41:ba:ac:d9:f0:9e:96:84:43:0d:34:4e:27:fb:4b:
a1:8c:34:74:7d:d6:68:d2:b9:da:ac:a7:35:84:cc:80:87:c9:
0b:2d:f4:93:02:d7:b1:d3:ee:02:13:99:29:18:9d:7f:71:a8:
80:0b:04:6b:2f:57:13:1f:48:f9:96:e3:ab:c6:1c:00:3a:6e:
4c:c0:0f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:25:30 2025 by rpki-client