Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/Xfi0N5f5vFQu5hGV8WPJ0FlZwxU.roa
File: Xfi0N5f5vFQu5hGV8WPJ0FlZwxU.roa (raw, json)
Hash identifier: I0nR3kt2SFLPkwlKUMcSNqWrWG9ooLPGX7z4kajNfYM=
Subject key identifier: 5D:F8:B4:37:97:F9:BC:54:2E:E6:11:95:F1:63:C9:D0:59:59:C3:15
Certificate issuer: /CN=4b8d822165e7f01f722c973967f7554605240802
Certificate serial: 019225150AA637CFAF97795652BBFDA234D2
Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/Xfi0N5f5vFQu5hGV8WPJ0FlZwxU.roa
Signing time: Tue 24 Sep 2024 17:29:48 +0000
ROA not before: Tue 24 Sep 2024 17:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 167.94.170.0/23 maxlen: 23
167.94.172.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:25:15:0a:a6:37:cf:af:97:79:56:52:bb:fd:a2:34:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8d822165e7f01f722c973967f7554605240802
Validity
Not Before: Sep 24 17:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5df8b43797f9bc542ee61195f163c9d05959c315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fd:c0:a9:e1:b0:97:db:19:50:92:55:a2:b1:
d2:fd:ed:73:78:34:99:a8:da:fc:27:17:01:55:bc:
b3:0b:9e:0b:fe:47:52:1f:1c:bf:8b:18:51:74:c9:
0e:8c:7b:ee:7f:c7:42:d2:75:b6:59:1e:d4:81:02:
46:14:25:4a:2b:1c:47:68:5d:ff:ab:72:fd:80:38:
cf:c7:b8:eb:98:57:76:5e:17:34:78:af:15:ad:8d:
49:99:f8:35:23:f3:fe:73:22:1d:f0:70:68:87:43:
4b:55:b9:f6:70:7b:13:17:7a:fb:f4:78:a2:de:80:
c0:f1:07:17:b9:9b:32:c0:1a:5f:b4:7a:bc:28:e4:
4f:fb:4c:74:3c:f1:9c:87:35:76:86:f4:c0:10:80:
a7:28:b6:28:13:f5:3a:5c:eb:93:85:eb:11:2c:b3:
5d:0a:fb:83:02:46:d5:06:5f:35:27:d6:86:d9:fd:
8b:fc:08:83:6a:dc:a3:52:db:ea:45:78:a8:36:0b:
23:9d:e5:c0:8f:7c:e3:17:46:95:56:c3:19:a7:de:
d1:88:b6:a6:39:3a:1d:8a:da:04:eb:86:be:e7:63:
a1:e4:1b:fa:b3:d3:c6:da:6f:03:72:60:05:44:ee:
9c:c4:72:c5:dd:91:63:e3:9d:aa:2d:43:75:c2:dd:
43:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F8:B4:37:97:F9:BC:54:2E:E6:11:95:F1:63:C9:D0:59:59:C3:15
X509v3 Authority Key Identifier:
keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/Xfi0N5f5vFQu5hGV8WPJ0FlZwxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.94.170.0-167.94.173.255
Signature Algorithm: sha256WithRSAEncryption
78:c2:e8:a9:f3:58:e2:d1:48:1e:a5:76:ef:0a:7f:44:76:d4:
d1:59:5d:22:51:fa:64:3e:49:d1:b0:98:ee:7c:52:7f:57:ee:
a2:e9:62:23:b1:d8:92:8d:6a:fe:b4:da:01:38:52:ac:19:04:
0f:da:e1:f0:cd:ce:47:a1:54:c8:cc:ad:d2:e6:48:c5:f5:58:
c0:81:7f:dd:44:68:29:c0:4d:76:36:15:8e:21:eb:3a:eb:d8:
d1:94:9d:4f:2d:3e:3b:0e:3e:f0:63:bc:c5:b1:b3:e1:54:e1:
4e:34:6a:fd:da:19:a2:12:29:cc:a9:09:0d:e2:6a:2f:7a:f9:
ca:33:7c:81:e9:87:87:15:f0:56:33:47:5d:b3:3b:f5:57:71:
25:d5:03:f7:5f:81:a3:bb:99:ce:1f:f5:50:ac:0f:11:51:50:
12:7a:d3:1a:a2:e5:e2:ac:c2:86:4f:58:5c:08:31:a7:e2:75:
74:37:da:25:a5:51:a9:b3:b0:bf:eb:b3:29:bd:bd:26:17:82:
04:ba:a9:83:54:ee:df:52:ac:13:0b:a5:83:2f:eb:73:ee:ff:
d7:91:7c:31:46:72:0b:a2:5c:e1:ec:c1:19:c6:78:22:9f:44:
b0:55:79:e6:da:66:c5:8f:3f:75:87:a6:93:f6:2f:2d:3a:cf:
82:52:45:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 05:17:00 2025 by rpki-client