Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/9KNjWyGS1zGt8YfqAcFsO6SMKIo.roa
File: 9KNjWyGS1zGt8YfqAcFsO6SMKIo.roa (raw, json)
Hash identifier: cYDWoEMWXYk9r9GqrgfujJNaCqWKRcrZabQEjT3Bp9o=
Subject key identifier: F4:A3:63:5B:21:92:D7:31:AD:F1:87:EA:01:C1:6C:3B:A4:8C:28:8A
Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial: 01942369C4DCFA4DD8050A175BEE96109AEA
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/9KNjWyGS1zGt8YfqAcFsO6SMKIo.roa
Signing time: Wed 01 Jan 2025 19:48:41 +0000
ROA not before: Wed 01 Jan 2025 19:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15577
IP address blocks: 217.9.0.0/24 maxlen: 24
217.9.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Jan 2025 07:44:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:c4:dc:fa:4d:d8:05:0a:17:5b:ee:96:10:9a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Validity
Not Before: Jan 1 19:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4a3635b2192d731adf187ea01c16c3ba48c288a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:be:72:19:64:5b:7a:16:19:7d:ce:55:39:fb:
9d:51:70:2a:e6:f9:ad:28:6a:17:19:8b:9a:e7:77:
2b:93:b4:84:d5:04:7d:c6:81:12:4e:09:09:9c:91:
60:f7:e9:e3:f3:80:af:d6:ac:c2:26:61:ba:fc:25:
23:cc:28:dd:af:24:34:6d:32:59:cd:ba:34:e4:2b:
a2:92:f4:fb:d9:c2:1c:48:ff:0a:24:17:48:1f:e4:
06:28:23:63:7a:0b:b9:9a:c2:5e:56:03:54:7b:99:
45:dc:3e:39:43:c8:c5:41:ae:2d:61:5a:1f:e0:4f:
0e:94:d4:9f:58:fb:d0:30:6f:3d:67:4d:49:cf:a8:
65:4c:f0:31:8e:65:d6:6c:28:79:e0:81:41:89:bb:
14:03:e8:a0:3a:b9:87:d1:37:1d:44:dc:6f:d4:d9:
98:b7:39:63:de:46:32:8a:ae:ab:88:21:c9:20:f7:
52:de:ec:76:a2:d6:b0:47:aa:df:aa:61:81:28:ed:
7c:a0:f6:9a:f8:fa:33:3f:68:dc:30:2f:94:b1:f2:
af:26:eb:53:83:6c:17:c4:0f:f5:f9:f5:20:aa:b6:
2d:14:c6:d1:4e:1f:b8:70:7c:35:56:ad:e1:82:a1:
9e:f7:3d:fc:05:0f:46:3a:75:7c:c6:59:2f:ef:b3:
c1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A3:63:5B:21:92:D7:31:AD:F1:87:EA:01:C1:6C:3B:A4:8C:28:8A
X509v3 Authority Key Identifier:
keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/9KNjWyGS1zGt8YfqAcFsO6SMKIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.0.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:6e:3c:f8:ba:b1:1c:50:a3:e0:2b:61:1c:e8:63:e2:80:da:
2c:11:b6:60:19:5a:69:c6:d1:d8:e0:93:14:b8:2a:07:e5:28:
f3:df:31:80:9d:c1:13:a2:ea:97:2f:66:ed:96:e4:87:19:84:
84:f9:f2:0c:0a:d2:d7:c5:e6:02:0f:e5:08:ab:54:4e:f9:2e:
a0:3b:b4:67:74:e6:a3:ea:c0:84:63:29:46:a1:da:5a:dc:0e:
0a:21:19:79:73:38:6b:79:da:4c:ce:d1:c9:dd:07:f2:3f:61:
ae:df:68:21:8c:32:c6:c6:47:e6:ee:60:3f:24:35:4e:2b:05:
a4:5e:9b:04:e0:49:2b:90:ee:af:56:e7:69:ea:84:d4:6f:fe:
03:9a:c5:50:9e:aa:4e:33:70:e0:97:b7:ad:f1:28:ce:de:fa:
ec:45:90:26:99:39:1b:47:6a:0c:03:07:aa:ff:b6:71:d4:d7:
21:57:27:68:ac:41:fe:e6:25:3a:54:08:57:a2:7b:eb:46:e9:
4b:ae:fe:ee:fb:51:4f:b2:82:ad:8e:ea:54:b4:5a:57:71:1c:
d4:ba:2b:cd:94:e1:ba:48:23:d1:e3:03:e8:44:9c:11:2b:b5:
ae:41:7a:7f:92:2e:f0:29:10:de:0f:c3:12:39:d9:7c:9b:4e:
5e:2c:5a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:44:02 2025 by rpki-client