Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/C9iyUqWP3z3OudC40TuKCVWkCOU.roa
File: C9iyUqWP3z3OudC40TuKCVWkCOU.roa (raw, json)
Hash identifier: XNwjD6zOwb9/Nkjwz2LIHk8/AtNIZ7XoD6w3Pd3s4GY=
Subject key identifier: 0B:D8:B2:52:A5:8F:DF:3D:CE:B9:D0:B8:D1:3B:8A:09:55:A4:08:E5
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018CC348DB3C7525718A8C7C4FE0204A45AB
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/C9iyUqWP3z3OudC40TuKCVWkCOU.roa
Signing time: Mon 01 Jan 2024 04:29:40 +0000
ROA not before: Mon 01 Jan 2024 04:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48590
IP address blocks: 194.209.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:db:3c:75:25:71:8a:8c:7c:4f:e0:20:4a:45:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 04:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bd8b252a58fdf3dceb9d0b8d13b8a0955a408e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:75:65:60:63:cd:26:0c:56:08:3b:77:f4:27:
1f:89:50:5e:86:8c:96:7b:a4:15:8d:1f:25:d8:e4:
b6:ec:5d:3f:02:b1:04:a7:36:2e:6f:75:af:7f:49:
06:82:97:3e:2c:83:a1:74:f2:ca:b7:3c:a1:e7:f2:
6d:cc:a8:9b:99:1d:4c:1e:86:26:92:57:54:65:53:
9c:dc:3e:78:51:41:2f:2f:48:3c:12:4a:fa:92:12:
6e:12:c6:9a:1d:91:a5:28:ef:3f:f1:62:2d:6b:5e:
06:52:fe:a3:f0:93:2f:94:9b:c4:60:52:75:47:cb:
3f:31:fb:a1:ea:91:91:b8:6e:90:59:39:dd:d2:47:
ee:13:82:ca:8f:dc:0d:29:a0:d5:ad:9c:87:76:fd:
82:f7:09:50:a0:24:2f:b1:0c:5b:68:06:72:fb:52:
86:a6:26:97:15:fe:29:2d:5a:54:a4:d0:cc:f5:b5:
9a:f4:86:ff:c7:aa:5c:4f:68:14:48:17:e8:6d:b6:
17:06:85:d2:9d:cd:ca:d1:11:77:eb:d8:c2:7c:cd:
b7:a3:ce:30:c4:23:27:1d:80:1c:99:64:cb:6e:c7:
b9:ee:0a:60:77:82:4b:33:f4:9f:a8:2c:6e:6b:99:
44:26:fb:73:c4:65:b3:50:5c:d7:a5:f2:3e:36:a4:
0c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D8:B2:52:A5:8F:DF:3D:CE:B9:D0:B8:D1:3B:8A:09:55:A4:08:E5
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/C9iyUqWP3z3OudC40TuKCVWkCOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.12.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:73:9e:40:09:1f:a7:10:81:fb:2b:c7:f5:03:7f:c4:31:ea:
3b:2b:22:21:70:00:de:64:85:f8:a4:b7:de:9c:43:41:50:a7:
a3:89:31:d2:85:4c:4a:79:4d:c1:95:6a:d2:17:2a:9a:ed:2f:
1b:a4:95:d3:0a:00:31:bd:e2:57:84:7c:1b:b3:b5:f5:db:c5:
f7:a4:22:bf:d2:76:bc:81:2a:18:b2:42:3b:bc:6e:51:18:5c:
7c:9a:19:d8:06:3c:68:ae:53:6b:27:43:fc:d4:3f:c3:03:5b:
dd:07:ed:55:bf:dd:6a:b0:2a:e8:06:a7:fe:91:8e:8f:f5:4f:
ed:c8:98:32:da:7d:0f:81:4c:41:44:f8:3b:39:66:41:ce:43:
8b:e7:cb:cb:0c:44:e4:70:4c:f0:c6:10:a3:fd:05:99:75:63:
f8:91:94:04:a3:7b:68:a4:2e:d9:62:a5:bc:7b:9c:16:1c:65:
82:aa:5a:c2:35:93:1b:00:24:18:9e:b3:97:e3:89:5d:99:16:
1b:9f:06:bb:08:90:6d:69:24:e5:06:a4:f4:0d:8e:d0:28:38:
c6:a3:f6:92:94:b1:3b:a3:0f:b3:82:e1:71:4c:31:54:9a:64:
6a:ea:c0:72:39:4a:57:de:ed:2f:0b:e7:34:2d:d4:7f:b7:c5:
f8:5a:20:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:27:04 2025 by rpki-client