Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/aWVvzSAqnXEtJ8IsF6L1fFg3_AM.roa
File: aWVvzSAqnXEtJ8IsF6L1fFg3_AM.roa (raw, json)
Hash identifier: zB6kgV9oYHxUdRPskzy3fXSN8JX++rjBS06hsIMOv5M=
Subject key identifier: 69:65:6F:CD:20:2A:9D:71:2D:27:C2:2C:17:A2:F5:7C:58:37:FC:03
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 01939777C8CD4CD87E9BA4BC4B76E7E2BFA9
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/aWVvzSAqnXEtJ8IsF6L1fFg3_AM.roa
Signing time: Thu 05 Dec 2024 15:37:09 +0000
ROA not before: Thu 05 Dec 2024 15:37:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 194.38.24.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:97:77:c8:cd:4c:d8:7e:9b:a4:bc:4b:76:e7:e2:bf:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Dec 5 15:37:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69656fcd202a9d712d27c22c17a2f57c5837fc03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e7:86:67:76:4b:49:50:84:ba:de:96:2d:88:
40:3c:6c:7c:c1:9e:f1:fb:7b:9c:9a:60:2f:ac:6a:
cc:d1:52:6e:7e:4d:90:cd:68:d9:a2:79:de:94:99:
ad:f1:f9:2a:11:7a:31:4a:07:a7:b0:16:a4:09:4b:
80:95:09:46:41:aa:a7:89:53:83:61:d5:64:a2:d5:
07:41:14:f5:2a:e7:c8:9a:3e:d5:87:71:9d:0e:01:
96:9f:26:58:9b:72:b7:be:0e:8b:57:4c:f3:21:43:
a2:b2:a2:fd:5b:9f:ad:78:b5:56:9f:74:ee:d4:ea:
d3:c2:dc:55:b8:9b:9d:61:2f:4f:37:d2:78:e7:12:
3d:f1:e2:82:7f:c1:ee:72:0d:1b:99:90:8e:25:f7:
53:d9:cd:15:68:65:8d:1c:f8:8c:24:f9:e6:17:d0:
2f:b4:00:df:12:fe:15:7f:a3:5e:e1:6f:04:91:89:
2b:30:72:bf:74:85:8a:97:0a:d4:5b:60:00:10:84:
70:ea:aa:a0:73:df:cd:cd:1c:0d:60:04:c9:97:64:
ab:f9:3b:80:f0:f1:a0:92:04:86:4a:19:9c:d5:61:
e6:88:d8:a0:4b:c6:83:39:42:4b:a6:1f:2d:ab:3e:
b6:d2:cd:90:2b:96:0b:d4:af:eb:55:7c:59:28:e1:
2f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:65:6F:CD:20:2A:9D:71:2D:27:C2:2C:17:A2:F5:7C:58:37:FC:03
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/aWVvzSAqnXEtJ8IsF6L1fFg3_AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.24.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:6a:39:a0:2a:69:9c:03:e1:ea:1e:0c:da:ef:c7:8f:94:f8:
10:f6:23:5f:ec:ee:ca:da:05:1e:2e:a4:16:01:10:a8:89:67:
ba:f3:95:c2:c1:9d:e0:89:dd:75:5f:9d:d7:8a:db:86:68:09:
c5:9c:d7:fb:3b:08:29:9a:8a:92:8c:44:f5:aa:8e:01:a3:a9:
69:7f:21:54:23:fb:8b:a0:4e:11:8b:7e:1d:4c:10:b1:96:ac:
71:46:8a:16:ba:4e:7a:3f:79:03:1d:57:ed:0a:07:d6:23:a5:
a9:42:e9:d3:42:30:d5:34:1d:c6:1e:3f:4c:0d:4c:68:e3:d2:
8e:59:0f:a7:b1:bd:03:af:9a:e4:d8:e5:18:c8:b1:f0:22:ae:
23:43:4b:9f:66:fd:2b:03:a0:2e:dd:4f:98:db:38:f0:3f:33:
13:4d:24:97:7c:b3:b6:ef:7f:46:6e:17:ac:43:3c:d8:9d:52:
57:36:e1:43:e7:d3:81:50:bc:68:ef:6d:f6:05:2c:e7:54:88:
f5:e9:e3:f1:2c:48:4f:9f:96:11:9b:6c:15:d2:82:8f:25:a2:
70:1b:43:68:42:92:50:da:0a:5b:b0:7e:2c:69:48:df:d6:e6:
f9:31:e5:98:8e:06:24:18:05:16:8c:5a:e9:c3:74:f7:2d:34:
56:f4:29:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:24:07 2025 by rpki-client