Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ASrKL-SI-uqQVhLljxkunKHkeHA.roa
File: ASrKL-SI-uqQVhLljxkunKHkeHA.roa (raw, json)
Hash identifier: mFrsksMBHH6caWjGljW7WufSVxQ9Q8aJLHn3+OuNRJ8=
Subject key identifier: 01:2A:CA:2F:E4:88:FA:EA:90:56:12:E5:8F:19:2E:9C:A1:E4:78:70
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 019473C43728F3D64EC6D794F5893888D123
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ASrKL-SI-uqQVhLljxkunKHkeHA.roa
Signing time: Fri 17 Jan 2025 10:17:06 +0000
ROA not before: Fri 17 Jan 2025 10:17:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210878
IP address blocks: 64.43.92.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 20 Jan 2025 06:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:c4:37:28:f3:d6:4e:c6:d7:94:f5:89:38:88:d1:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 17 10:17:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=012aca2fe488faea905612e58f192e9ca1e47870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ed:3d:bf:33:f6:f8:63:52:a8:d9:a6:fb:ef:
9d:08:05:9d:08:bc:f6:d4:3a:33:5b:25:66:0e:ac:
9c:d4:ed:2d:ce:d9:68:df:78:ee:3a:c6:c7:6a:49:
56:99:0c:26:a3:7b:02:e2:55:40:93:d3:6f:35:29:
08:57:62:2d:88:f4:b7:b7:b2:90:10:7b:8c:3b:7e:
06:30:f9:a5:53:a7:4a:93:2a:2a:15:16:7f:52:4a:
5e:db:b7:4f:ec:a2:7a:c5:4d:a8:94:c5:f9:22:49:
e9:fd:dc:12:f3:b5:9c:bb:d8:b3:d0:9e:9e:56:c3:
89:c8:07:48:49:bd:37:ce:3b:18:64:47:31:33:4f:
90:e7:a3:1f:3d:ff:c8:c1:3c:06:a3:9c:c6:09:10:
a7:69:cb:f2:77:a2:c0:59:89:06:13:c2:39:cb:4a:
50:41:d9:24:74:4e:08:a5:8f:89:93:70:5f:13:b1:
50:fb:00:56:78:25:bd:f7:99:9e:d0:f1:b4:36:52:
5b:65:a7:07:f4:41:ea:74:65:01:09:0b:e3:4d:dc:
d0:9a:b6:93:d7:c0:48:b0:1a:48:a1:77:10:25:4e:
43:7c:90:1c:3f:7c:64:a3:5c:50:cd:e5:80:6f:9b:
fe:62:ef:a0:d5:66:3e:3c:b3:b3:ea:e1:f7:0c:2e:
59:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2A:CA:2F:E4:88:FA:EA:90:56:12:E5:8F:19:2E:9C:A1:E4:78:70
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ASrKL-SI-uqQVhLljxkunKHkeHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.43.92.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:7f:00:1e:a0:ab:80:9f:e7:71:85:7b:d0:f8:4e:84:b6:64:
38:e6:b4:1b:ab:75:56:3a:1a:1e:64:50:ed:87:fe:5a:12:d5:
71:20:a3:1c:2e:dc:3d:7b:1e:96:68:97:be:c0:d8:f5:01:40:
31:4c:7f:09:1a:21:1b:68:3f:a4:19:2e:c6:f4:e8:ae:f5:1d:
e9:6b:92:b0:c7:76:7e:fc:56:0c:87:2d:15:84:2a:2d:77:3d:
55:35:8c:92:7e:ed:85:22:69:84:c0:32:eb:3b:3b:54:61:e0:
f1:04:50:9f:4a:74:0e:6b:9b:a3:db:8f:6c:e0:5e:34:24:18:
af:e7:0d:ee:cb:75:f5:18:ff:0d:fa:dd:60:a4:55:5e:82:8b:
5c:f1:c6:a2:8b:87:7e:1b:da:78:f1:78:6f:82:a8:22:28:28:
9d:e6:25:aa:cd:fe:a8:b6:c0:95:68:cb:b1:09:4f:9f:49:71:
d3:9f:f7:01:32:82:30:58:72:94:93:05:00:44:74:27:b1:e4:
f4:18:fd:88:e4:8a:54:01:16:26:71:0c:f0:0d:ed:30:54:33:
90:d1:a3:1d:e6:2b:05:04:7f:bf:f6:10:54:f9:0a:1a:5e:6c:
6b:09:74:46:ff:a7:8b:46:cf:5a:e0:94:42:51:73:4e:92:b4:
7a:27:49:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:05 2025 by rpki-client