Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iGRMJ6-J6bo50w207HSBfAR7A6M.roa
File: iGRMJ6-J6bo50w207HSBfAR7A6M.roa (raw, json)
Hash identifier: W9jCbnzsZd3gcCrku+LTaOon9g0XtL1TiAcyCjZxh5M=
Subject key identifier: 88:64:4C:27:AF:89:E9:BA:39:D3:0D:B4:EC:74:81:7C:04:7B:03:A3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194CAE18CA2C5067FC77FEB091B5BA7B90F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iGRMJ6-J6bo50w207HSBfAR7A6M.roa
Signing time: Mon 03 Feb 2025 08:16:06 +0000
ROA not before: Mon 03 Feb 2025 08:16:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 94.156.14.0/24 maxlen: 24
193.148.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 09:38:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ca:e1:8c:a2:c5:06:7f:c7:7f:eb:09:1b:5b:a7:b9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 3 08:16:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88644c27af89e9ba39d30db4ec74817c047b03a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:13:de:55:e2:ee:a3:f5:46:f4:21:c6:b0:9e:
99:fd:16:20:59:70:74:4b:37:ec:47:03:c9:7e:23:
51:a3:94:a2:cf:7f:6b:91:81:86:5a:12:02:70:08:
f7:2d:7b:24:35:d4:f1:93:fd:04:5d:a8:5b:43:f5:
d9:9e:4d:6e:22:b5:9a:b6:e7:de:79:eb:da:cf:90:
11:cd:8b:0c:cc:61:c4:2b:04:27:6b:56:66:15:80:
78:8f:de:fc:51:50:49:41:32:fc:0a:bf:59:8b:36:
3a:f6:78:b2:be:9c:61:49:34:31:83:82:a5:63:89:
c6:fd:ee:d4:4c:7b:ad:7f:56:5d:0e:9c:52:35:a2:
c4:76:90:a8:c7:5b:b0:61:76:6f:f9:4a:36:8b:ea:
53:6b:12:6c:0f:c8:2a:53:2d:81:79:2e:9e:a7:a8:
8e:53:29:77:17:d0:49:20:c9:68:39:2a:40:7d:50:
ee:88:27:e7:3f:7d:f1:d1:fc:24:3a:70:0b:d3:50:
4a:73:d0:6a:e3:e4:73:26:01:88:ee:75:d9:55:29:
45:71:e1:c9:9f:9d:d4:bd:b9:59:18:aa:9e:20:da:
c8:f5:b2:99:25:70:60:80:d1:44:3d:2a:3f:c0:29:
c3:a5:62:ab:8f:de:84:f4:2f:72:dc:4e:7c:5f:0c:
b3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:64:4C:27:AF:89:E9:BA:39:D3:0D:B4:EC:74:81:7C:04:7B:03:A3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iGRMJ6-J6bo50w207HSBfAR7A6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.14.0/24
193.148.253.0/24
Signature Algorithm: sha256WithRSAEncryption
47:5b:ec:bd:8e:d7:dc:f2:8a:0c:90:2b:37:88:7f:80:6d:49:
fd:02:75:43:68:5f:ad:e7:2b:b3:71:b7:fc:be:46:b6:cd:60:
c8:09:e5:b3:73:68:e4:fe:86:d9:ba:fc:48:ce:11:19:94:ae:
2a:2b:10:e9:c1:4e:8f:2f:c0:0e:6c:39:6e:d2:c7:52:a5:9d:
6f:22:d5:99:81:9e:80:2f:02:ce:87:28:7c:f4:b3:23:2d:66:
a2:99:02:46:00:88:d1:ca:41:5c:e4:c5:06:c5:b7:f8:b5:55:
f8:b4:e7:e8:a8:39:01:26:8c:d3:12:c4:10:87:04:f8:ca:fc:
71:25:a9:7b:d3:7c:2c:91:40:bf:66:46:09:f0:a4:15:ce:1c:
5e:ce:84:33:00:38:a5:33:86:37:de:e1:92:da:61:5f:98:94:
ac:2c:2c:bb:11:a7:61:92:a6:22:09:3d:39:41:65:74:45:da:
3d:8a:61:28:6a:e6:ed:4f:5a:71:ac:6f:a3:10:0a:75:59:a4:
5c:4f:95:3d:a0:9c:34:ce:66:32:0d:53:53:a9:e9:ec:f6:28:
4e:32:40:c2:4e:58:c3:e6:23:b7:73:ba:9d:26:4d:00:f4:e2:
41:12:76:be:81:14:1b:c9:16:7b:d5:e5:01:76:3e:9b:bc:6b:
d5:33:2a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:32:11 2025 by rpki-client