Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/gu9DztbKvzKdBz2Rt709mjoR4SI.roa
File: gu9DztbKvzKdBz2Rt709mjoR4SI.roa (raw, json)
Hash identifier: nne3jI6/tmZUbFW6+iHm7RJtExnz7zos+e7orkixaeg=
Subject key identifier: 82:EF:43:CE:D6:CA:BF:32:9D:07:3D:91:B7:BD:3D:9A:3A:11:E1:22
Certificate issuer: /CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Certificate serial: 018CC8DF3CB6F1FB8C8C498435B0E891AE4A
Authority key identifier: DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/gu9DztbKvzKdBz2Rt709mjoR4SI.roa
Signing time: Tue 02 Jan 2024 06:32:02 +0000
ROA not before: Tue 02 Jan 2024 06:32:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209839
IP address blocks: 94.154.152.0/22 maxlen: 22
94.154.152.0/24 maxlen: 24
94.154.154.0/23 maxlen: 23
94.154.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 00:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:3c:b6:f1:fb:8c:8c:49:84:35:b0:e8:91:ae:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Validity
Not Before: Jan 2 06:32:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82ef43ced6cabf329d073d91b7bd3d9a3a11e122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e0:2b:4c:da:f8:cd:08:ea:e5:b2:1d:1c:cc:
4c:49:e7:a0:f4:01:15:48:f6:15:ba:7d:7e:b6:12:
06:67:81:15:57:6b:a4:c8:7e:22:0e:c6:0e:26:62:
4b:d9:d6:db:b9:0e:ed:b0:80:88:a9:4a:d2:9a:63:
c8:4a:66:b8:b9:df:44:4d:4b:fd:a6:a1:81:a2:0a:
97:c6:56:5d:fe:c1:3b:ba:f4:c5:31:3d:2c:3b:00:
7d:64:f1:ec:fb:e9:1c:8c:ff:f5:d1:bf:72:1e:5a:
2d:a2:ea:d8:13:5c:9b:ca:1e:6f:48:e6:b3:33:fc:
3c:3e:c6:e3:93:86:7b:1c:56:3a:4f:66:1a:72:f0:
53:ec:90:ea:a2:07:9b:0d:ac:32:44:51:92:1c:14:
18:39:1b:5c:51:a0:0d:77:51:41:06:de:fe:32:46:
ce:72:94:c6:ef:e0:55:23:c7:5b:f0:c2:34:8c:79:
75:e9:a5:08:7f:33:63:9c:e3:e3:59:61:2b:38:c2:
c3:2a:11:77:1d:cd:2b:28:16:9b:b4:d3:84:3f:ca:
0e:13:41:86:3a:3d:87:4e:c7:b0:c4:d9:a0:30:7a:
c2:84:fa:d9:e3:c5:eb:ee:e5:d3:53:7a:b2:0d:5a:
90:49:fa:cc:b1:f6:a3:84:50:f0:7e:b2:46:49:9f:
a2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EF:43:CE:D6:CA:BF:32:9D:07:3D:91:B7:BD:3D:9A:3A:11:E1:22
X509v3 Authority Key Identifier:
keyid:DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/gu9DztbKvzKdBz2Rt709mjoR4SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.152.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:63:13:d0:56:4f:34:a2:88:5c:4d:87:14:7f:11:0c:e3:c0:
6f:34:42:55:f8:30:82:69:9b:b4:0e:d8:9e:a1:81:7f:d6:91:
8b:4a:2e:75:55:95:89:78:d4:5b:12:54:c9:cb:90:b7:db:26:
6d:62:5d:ca:47:de:d6:59:8a:89:4a:fb:61:00:50:30:b0:c2:
cc:e0:4a:8e:7a:7c:b5:b6:14:ae:c8:34:7e:9a:2f:14:b3:54:
b8:31:0a:54:da:6c:ca:30:07:5f:5b:38:fd:ce:4f:b2:17:63:
95:4a:79:52:5a:9c:e7:e7:59:6a:b0:ba:fa:9d:15:e8:70:7f:
79:92:29:c6:58:b2:6d:a7:3d:a4:38:2d:cd:5c:b3:f3:e9:60:
76:fa:36:53:ac:d7:33:9c:70:ac:3e:13:86:65:83:f4:17:61:
de:c4:27:6b:80:65:b3:92:1e:cb:e0:d7:4c:05:45:7b:46:bf:
df:09:60:2d:2b:1d:a9:a2:a2:98:d9:d8:ac:e7:f1:7b:0e:52:
af:17:d8:5f:8b:75:78:f2:9c:2e:23:df:ba:f4:56:4a:5f:17:
37:3c:3e:b8:2a:5a:15:45:cb:80:88:0b:ce:cb:cc:79:1e:b9:
25:07:3d:83:ab:b2:b2:0e:aa:0a:d6:d9:15:d0:9f:b1:64:58:
0a:f7:25:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:18 2025 by rpki-client