Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/S3lKTI5vmKQJ7sGV9BbKEH5uVJ0.roa
File: S3lKTI5vmKQJ7sGV9BbKEH5uVJ0.roa (raw, json)
Hash identifier: QjcGdjUUJbJBH5sbajyx3FmwhlyyHLC6WlagW5FnZUA=
Subject key identifier: 4B:79:4A:4C:8E:6F:98:A4:09:EE:C1:95:F4:16:CA:10:7E:6E:54:9D
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 0194266B8FB66E558FE5989DF5D7E2D17DC4
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/S3lKTI5vmKQJ7sGV9BbKEH5uVJ0.roa
Signing time: Thu 02 Jan 2025 09:49:30 +0000
ROA not before: Thu 02 Jan 2025 09:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 94.124.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Feb 2025 13:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:8f:b6:6e:55:8f:e5:98:9d:f5:d7:e2:d1:7d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 2 09:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b794a4c8e6f98a409eec195f416ca107e6e549d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:ee:5a:5d:41:34:ba:db:98:96:36:7d:d0:
b5:a2:04:22:19:27:83:08:19:8a:97:8b:4d:37:3d:
58:97:fe:4a:17:c6:1c:46:be:08:a6:eb:85:33:64:
8a:64:ff:22:c0:fc:da:c3:bd:01:66:a0:c7:ab:48:
df:ca:10:fe:47:f1:d4:7e:d1:d9:92:36:61:db:34:
5e:cf:a9:79:a6:39:d3:ed:5c:51:b8:79:77:72:9b:
f0:6c:07:c1:a0:77:a9:2e:31:c0:cb:0a:4d:58:28:
3d:22:fb:20:1d:f1:a5:52:ea:56:eb:99:89:e4:f6:
3f:3c:6f:ef:25:95:0b:cf:af:9d:92:08:44:c8:04:
9a:b5:2a:42:4b:fb:cf:45:6f:3e:f0:54:98:15:cc:
ad:68:60:e7:33:7f:b5:e0:b3:72:78:2d:96:6f:9e:
dc:61:53:25:ce:15:5a:dd:59:06:3c:85:44:41:26:
e4:d8:e9:42:a1:3e:90:a8:d8:09:dc:fd:6b:41:94:
76:20:8a:6f:c8:39:b5:35:6e:1b:de:bf:95:1e:bd:
31:b4:15:2e:d2:82:2d:6a:1f:2b:74:f7:a0:c1:7a:
50:34:00:77:ca:58:71:f5:29:70:99:18:76:ab:66:
a7:68:c0:77:4d:ff:ad:18:89:6e:8b:d6:a6:d3:1f:
f0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:79:4A:4C:8E:6F:98:A4:09:EE:C1:95:F4:16:CA:10:7E:6E:54:9D
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/S3lKTI5vmKQJ7sGV9BbKEH5uVJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.160.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:ce:a3:f7:7c:06:2c:75:fe:ac:f2:68:3e:25:e1:ab:ab:41:
4f:e0:b0:2e:88:20:94:b6:96:4c:d1:82:b8:53:87:54:70:6d:
dc:d3:0e:1e:a9:24:46:92:cd:c5:39:4b:dc:fa:13:e1:09:d6:
61:e4:d5:71:85:1d:2b:ad:b4:0e:db:b2:90:d1:01:78:f8:4b:
27:cf:17:3e:63:a7:93:74:45:b7:c0:96:12:37:17:c0:04:f0:
9d:2a:5d:15:fc:e7:aa:d7:95:9f:70:5e:cb:4e:8a:7d:c0:bc:
89:9c:fe:be:87:ec:e2:8c:a5:9e:1e:21:21:62:f2:3f:9b:b2:
96:c1:cc:41:cb:79:34:ba:00:2c:bc:2b:40:e6:32:45:63:87:
27:f0:77:06:59:95:07:a0:ef:68:c6:f4:15:fc:a7:48:a7:7a:
80:a4:30:91:24:8a:ae:d1:b0:3f:8d:b0:11:74:c2:a8:96:e4:
87:27:82:f4:ed:71:8d:90:0e:b5:bd:b6:58:1c:ed:7f:af:f1:
e2:5b:55:45:49:4d:c5:0f:d6:07:61:90:42:42:fc:0f:22:58:
bc:6c:04:f0:37:69:97:0e:c8:27:34:29:03:80:65:38:6b:de:
53:41:4a:72:02:53:ff:48:95:f4:2f:a5:d1:5a:12:42:5d:2b:
b3:bc:9c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:17:05 2025 by rpki-client