Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xbI0FdoKwT3r1gKR37ulcy4eMtg.roa
File: xbI0FdoKwT3r1gKR37ulcy4eMtg.roa (raw, json)
Hash identifier: LYKwEimC/PpMa+mVp7vf43uqUtna/gkNQo6XoOl4bxw=
Subject key identifier: C5:B2:34:15:DA:0A:C1:3D:EB:D6:02:91:DF:BB:A5:73:2E:1E:32:D8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824D1673F41169A46D73B1E5D025D0D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xbI0FdoKwT3r1gKR37ulcy4eMtg.roa
Signing time: Thu 02 Jan 2025 17:51:29 +0000
ROA not before: Thu 02 Jan 2025 17:51:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215787
IP address blocks: 91.200.192.0/22 maxlen: 24
94.154.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Jan 2025 07:49:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:d1:67:3f:41:16:9a:46:d7:3b:1e:5d:02:5d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5b23415da0ac13debd60291dfbba5732e1e32d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:00:82:ce:84:68:0f:41:74:81:1d:c4:e9:bf:
62:0a:d3:de:0d:71:1b:31:c2:87:65:cb:a0:54:76:
e4:6b:46:09:99:9c:ef:46:c8:24:03:de:3f:7e:60:
e5:3b:6c:53:77:1e:6a:c0:5a:e7:b4:a7:cb:72:d1:
50:f0:bb:41:41:6d:fa:d6:04:64:93:70:d8:cf:c2:
2f:b0:fa:f7:ca:90:a7:7e:f5:8e:ff:0a:bc:f0:07:
07:9a:67:ea:78:6c:c9:89:7f:5d:89:08:3d:1f:26:
90:d0:ad:a5:b1:91:67:b0:c3:1a:fa:97:1b:63:2d:
86:1a:45:ba:a3:91:13:2d:bf:8f:69:c6:4b:74:25:
80:bd:82:03:1e:fd:75:74:5d:ca:b0:69:5d:56:21:
4d:65:61:73:3f:c8:dc:a0:3b:97:67:a3:64:41:3e:
ec:8d:87:e2:65:e1:f5:d9:2a:a3:3a:81:1c:1b:b3:
7b:f2:0d:b7:4d:9d:5d:06:87:ef:29:22:c4:59:62:
aa:ff:6e:68:8d:26:dd:7b:9d:ae:e1:90:07:ed:7f:
6a:ea:50:35:53:c8:6b:fb:c1:39:9b:0d:48:bf:6e:
f5:c9:16:16:90:2e:5d:3d:41:d7:ab:f9:49:21:48:
0c:c2:16:36:fb:2f:ad:d0:26:09:f3:cf:77:f7:41:
14:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B2:34:15:DA:0A:C1:3D:EB:D6:02:91:DF:BB:A5:73:2E:1E:32:D8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xbI0FdoKwT3r1gKR37ulcy4eMtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.192.0/22
94.154.163.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:80:0d:5b:8d:3b:9c:fe:29:24:8a:eb:d4:2a:7d:3b:8c:2a:
7b:29:3d:35:9c:e8:c7:9b:e2:a2:c5:c4:ab:56:d1:43:57:34:
b0:46:11:f8:47:1f:7f:16:34:14:b7:71:ce:cf:5c:74:c7:5e:
27:4d:74:23:02:7f:6e:35:1f:05:43:50:74:be:1c:a9:d5:f1:
d7:3c:6d:36:03:74:8a:ba:61:83:c7:c0:7f:35:4d:8c:bd:a7:
05:d9:6b:43:59:8f:a6:68:fb:c1:90:68:0d:7a:7e:cf:03:30:
c2:d4:d7:d2:bf:33:c0:bc:90:8b:31:09:f7:1c:4d:84:07:d3:
d0:7b:ef:6c:c3:ca:98:9e:2c:a8:20:e6:e7:64:23:f8:47:37:
e1:7e:f3:22:fc:46:65:1a:26:c2:fc:61:62:4a:cc:b0:b8:77:
38:4e:22:fe:a9:df:4c:b4:8e:23:5c:76:94:5a:74:b4:9c:c4:
1f:7c:2f:ac:64:b3:63:4e:87:00:5e:42:e2:47:2f:75:1c:07:
f0:de:cf:9d:7d:c9:44:35:ee:8e:fc:15:a9:72:65:9f:bf:bf:
38:59:ca:55:a0:fe:53:a0:bd:09:4f:86:22:2a:18:a2:77:1b:
12:75:5e:7c:3f:01:08:61:a7:78:b4:e6:73:58:f8:01:6f:de:
46:7f:85:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:20:29 2025 by rpki-client