Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/2yjASwRdWv1VCVRb2ZrEeiz76FM.roa
File: 2yjASwRdWv1VCVRb2ZrEeiz76FM.roa (raw, json)
Hash identifier: MbBRgv7s423RDgckS5r4iSu5vpNT4HssL55gyU8AidY=
Subject key identifier: DB:28:C0:4B:04:5D:5A:FD:55:09:54:5B:D9:9A:C4:7A:2C:FB:E8:53
Certificate issuer: /CN=9e56980d489e9c53bc829f3e8d63d383f38d0de3
Certificate serial: 018CC500CC4237D141E191C774BB7FC9F270
Authority key identifier: 9E:56:98:0D:48:9E:9C:53:BC:82:9F:3E:8D:63:D3:83:F3:8D:0D:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlaYDUienFO8gp8-jWPTg_ONDeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/2yjASwRdWv1VCVRb2ZrEeiz76FM.roa
Signing time: Mon 01 Jan 2024 12:30:12 +0000
ROA not before: Mon 01 Jan 2024 12:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48394
IP address blocks: 94.247.8.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:47:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:cc:42:37:d1:41:e1:91:c7:74:bb:7f:c9:f2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e56980d489e9c53bc829f3e8d63d383f38d0de3
Validity
Not Before: Jan 1 12:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db28c04b045d5afd5509545bd99ac47a2cfbe853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8e:2e:88:c6:b6:06:ca:1e:09:6a:0e:1e:db:
13:de:9d:c7:c4:95:49:a7:ea:bd:7a:40:a5:ad:38:
8b:57:bf:44:58:65:32:23:1a:c7:18:b1:53:67:30:
f0:1c:c0:b1:e9:07:2d:f6:a6:f7:e2:6c:f7:82:42:
16:9f:3e:fd:c3:ac:69:c4:c9:40:c9:c2:54:fc:19:
b8:4f:bd:97:20:81:f5:f6:ab:95:89:60:a9:d9:6f:
87:3b:06:16:cc:1f:5e:e0:2e:79:6f:dd:2d:39:ae:
ec:63:68:98:45:f2:cc:da:1d:82:cc:59:d4:d7:ba:
0d:32:43:49:92:aa:f4:f4:9c:8a:e7:82:fe:06:cf:
18:89:50:1c:cb:c1:3f:80:f1:cb:2e:13:09:89:f1:
b3:d6:73:86:bc:d4:28:53:78:84:9c:44:09:fa:76:
bf:cc:b6:8c:c0:c7:72:00:b6:90:3b:40:4a:aa:b1:
fa:18:dd:fe:12:b6:c4:10:3e:7b:ec:92:a3:41:fc:
cb:37:cc:e4:12:c0:22:8d:be:6c:24:2c:ff:25:1c:
56:c2:5d:25:69:b8:0d:1e:72:f2:56:97:b0:1e:17:
1f:51:55:86:b4:c9:fe:11:45:b3:70:37:d9:8d:bb:
c4:ca:0c:39:9c:a3:ae:52:09:0b:40:cf:86:9a:e7:
9d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:28:C0:4B:04:5D:5A:FD:55:09:54:5B:D9:9A:C4:7A:2C:FB:E8:53
X509v3 Authority Key Identifier:
keyid:9E:56:98:0D:48:9E:9C:53:BC:82:9F:3E:8D:63:D3:83:F3:8D:0D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlaYDUienFO8gp8-jWPTg_ONDeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/2yjASwRdWv1VCVRb2ZrEeiz76FM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.8.0/21
Signature Algorithm: sha256WithRSAEncryption
58:05:b6:08:cd:67:5d:56:36:24:f8:93:a0:6b:44:9b:f1:e1:
d0:44:69:a2:7c:05:cf:9e:2a:14:0b:c2:ac:54:54:35:80:f1:
ce:62:56:f3:7e:e8:11:8c:3e:57:14:17:16:91:c9:36:a7:c5:
94:69:7d:54:b4:79:35:ba:3b:33:c9:de:d7:67:3e:56:ae:11:
0d:62:fb:75:ea:a8:2c:c2:44:3d:08:78:26:5e:74:2a:34:99:
6c:61:5e:82:33:9a:50:0f:54:bf:bf:bc:9d:6d:d1:22:b0:02:
e1:52:a1:3d:d9:9c:2d:bc:15:d9:e4:e5:86:fe:a7:08:f4:79:
30:4b:1a:63:34:31:b2:70:48:27:03:a6:bb:f8:24:a3:df:3a:
99:98:f0:88:c0:db:e5:bc:ba:a6:9a:f4:97:6d:83:5f:03:4b:
e9:95:d4:05:bc:18:45:fc:3a:12:aa:7d:4b:63:c7:61:59:a8:
73:c5:3c:46:b6:9a:79:79:b5:e8:30:c5:a4:23:2f:dd:0e:62:
bb:56:2d:63:e6:f5:a2:c7:13:e3:c3:be:6d:41:ac:33:3b:c0:
69:ea:d8:38:ba:7f:0f:25:66:85:bd:b4:a7:eb:e4:7b:ea:db:
bb:f7:db:35:1b:56:0c:de:f4:2b:05:96:f4:77:47:57:ec:83:
66:c8:81:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 18:52:59 2025 by rpki-client