Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hC8CHHETJ4ETWUzFzvptEvxXLDE.roa
File: hC8CHHETJ4ETWUzFzvptEvxXLDE.roa (raw, json)
Hash identifier: DwvRy6ykIT6WlaYFlNEKRXfDPUtmraLWgHOU5Ni4QF0=
Subject key identifier: 84:2F:02:1C:71:13:27:81:13:59:4C:C5:CE:FA:6D:12:FC:57:2C:31
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824747BF45998AD3CFEAAA7480427CA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hC8CHHETJ4ETWUzFzvptEvxXLDE.roa
Signing time: Thu 02 Jan 2025 17:51:05 +0000
ROA not before: Thu 02 Jan 2025 17:51:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39238
IP address blocks: 194.113.36.0/24 maxlen: 24
194.113.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Mar 2025 11:14:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:74:7b:f4:59:98:ad:3c:fe:aa:a7:48:04:27:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=842f021c7113278113594cc5cefa6d12fc572c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5a:7f:7e:9d:f1:c9:8f:ad:2d:c0:60:d7:d1:
c3:33:d9:ab:8d:f8:b3:3d:52:56:a2:0b:37:6c:98:
07:55:cd:ca:93:c2:dc:fc:97:f5:b7:39:67:25:91:
fb:d3:73:2e:e9:c6:04:12:6d:33:c9:c9:3b:b6:96:
15:df:07:03:4f:bf:96:02:af:4d:28:c2:24:ad:79:
02:73:d0:84:a5:6f:64:93:55:28:d8:09:52:63:d4:
51:99:5c:ac:4b:4f:92:56:8a:6e:20:32:d9:92:45:
52:c8:10:4c:2f:7c:26:f5:7c:4c:63:0c:74:e9:be:
62:ff:be:b9:b4:34:d2:c4:36:6c:74:c4:67:25:2e:
48:d8:ed:09:a0:87:3a:1d:bc:49:2d:e9:64:3b:3c:
2c:59:90:7b:0a:40:ae:9e:ec:54:f6:7a:01:18:36:
61:f7:55:d7:62:7e:48:a7:04:b6:31:64:8d:e6:61:
da:6d:1c:a2:a8:e6:fb:0c:28:d0:39:a2:f3:ce:e4:
22:de:9c:60:64:f7:9c:89:40:26:86:69:49:15:40:
b3:f2:d9:5c:98:58:39:4a:af:80:7b:08:07:86:4d:
28:57:1c:64:27:3c:fb:9a:8b:39:96:1a:ed:b1:ba:
a7:81:8a:33:15:dd:ef:a5:44:16:3b:92:90:0f:f1:
54:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2F:02:1C:71:13:27:81:13:59:4C:C5:CE:FA:6D:12:FC:57:2C:31
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hC8CHHETJ4ETWUzFzvptEvxXLDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.36.0/24
194.113.39.0/24
Signature Algorithm: sha256WithRSAEncryption
13:50:26:2c:09:5b:9b:be:6f:6d:18:27:da:4e:c5:34:86:e0:
aa:c0:e3:27:b5:15:ca:18:37:0a:40:4f:fb:b9:5d:d5:7b:5e:
5b:c2:53:bd:a6:bb:86:16:02:c7:03:66:c9:c3:e8:c2:6c:e4:
85:79:9a:96:d0:79:c1:df:c8:5b:26:65:c1:d9:e5:21:63:58:
9a:b3:b8:22:f2:a1:98:bd:be:02:44:a2:9d:d7:b5:1d:9d:60:
c1:23:72:a6:b0:2e:d7:06:9b:16:10:0c:c5:9d:81:4f:31:07:
6c:93:c5:0f:3a:fb:af:91:f9:ea:99:78:6f:83:80:16:1a:ab:
a4:6c:78:81:e2:64:cc:15:8c:a2:24:46:46:99:b9:dd:58:81:
ac:4b:00:61:9b:a0:f0:bd:d4:9b:ad:9c:07:fd:ab:27:a8:a9:
12:3b:d6:5a:25:b8:81:70:c4:9e:f3:d7:d4:f3:e8:7c:f1:72:
12:84:65:52:44:7c:8b:1b:6d:fa:f0:e7:5d:af:61:39:6a:be:
e6:15:40:d5:c9:b2:8c:55:32:7b:70:66:91:85:6e:00:dc:31:
55:df:d1:ff:dd:94:c7:87:ee:37:2f:a1:80:64:80:b9:3c:96:
ad:e7:a8:8b:96:0b:4b:82:58:f9:9a:e0:0f:ab:42:39:0a:8b:
cd:32:71:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:42:15 2025 by rpki-client