Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xpw0aB56iARM3IzmHXjvGp5qhQs.roa
File: xpw0aB56iARM3IzmHXjvGp5qhQs.roa (raw, json)
Hash identifier: kcb0G/90e4rlSs8utTako/pRsDH7N8kszNZiF/HXYyA=
Subject key identifier: C6:9C:34:68:1E:7A:88:04:4C:DC:8C:E6:1D:78:EF:1A:9E:6A:85:0B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826C625EAC37A9C823CA7A449D46B97
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xpw0aB56iARM3IzmHXjvGp5qhQs.roa
Signing time: Thu 02 Jan 2025 17:53:37 +0000
ROA not before: Thu 02 Jan 2025 17:53:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 84.32.223.0/24 maxlen: 24
84.32.236.0/24 maxlen: 24
88.216.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Jan 2025 08:10:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:c6:25:ea:c3:7a:9c:82:3c:a7:a4:49:d4:6b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c69c34681e7a88044cdc8ce61d78ef1a9e6a850b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8b:ad:88:71:9b:ac:ad:af:c7:94:2a:b2:2f:
68:ce:f1:1e:3d:c0:e6:d4:99:f2:0c:d1:7c:16:0f:
c2:96:cb:bc:31:32:01:77:92:ec:4a:a8:21:80:90:
34:8f:03:a7:96:25:27:15:13:91:78:76:7a:62:9f:
3a:a9:a3:83:fe:17:c7:0c:1a:f7:4b:7a:14:1c:c1:
0d:42:a3:75:f4:fd:6f:1c:0a:67:78:05:71:91:20:
22:c3:5a:d3:31:a9:5a:42:65:ac:71:4a:dd:ea:91:
5e:62:67:c9:50:d5:52:ce:81:f8:fc:48:d2:a8:27:
28:8d:d5:66:61:11:a4:52:0a:4a:a8:9c:ac:0c:83:
0b:ff:38:5d:91:95:54:f3:e3:93:f0:e8:59:73:97:
46:75:f3:40:d3:34:b6:49:3c:68:b8:73:4f:a0:7b:
ce:94:11:d6:b2:ba:77:a9:8c:a9:9c:35:68:57:0b:
ff:d8:ba:fa:1f:a8:a2:7b:78:77:28:cd:74:41:f2:
e9:ec:6f:fc:b9:2e:46:a8:cc:b5:d4:24:57:0b:fa:
87:69:fc:7f:11:f5:76:0c:65:bb:1e:5c:9c:0e:73:
bd:6b:77:2f:dc:44:43:b9:3f:c7:67:f9:6c:06:23:
f0:2a:e9:8b:a7:36:dd:df:4e:a4:7e:f4:c3:1e:1f:
43:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9C:34:68:1E:7A:88:04:4C:DC:8C:E6:1D:78:EF:1A:9E:6A:85:0B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xpw0aB56iARM3IzmHXjvGp5qhQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.223.0/24
84.32.236.0/24
88.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
53:2d:7d:af:f1:22:72:b6:9b:56:1d:5e:86:2e:d1:fb:ce:b8:
81:ef:ca:74:e1:f1:bc:1d:1e:14:78:98:93:52:25:27:e8:78:
70:c0:17:29:16:66:70:13:a7:54:ec:01:34:73:11:e9:a9:5e:
e4:b3:5d:01:90:4e:ef:eb:d1:f8:c8:e7:e0:87:75:f3:13:a3:
69:c6:a4:05:52:28:f4:29:c5:ab:7d:9a:7c:7a:92:ac:c4:e8:
8e:9b:a5:87:fb:32:f4:68:35:85:07:7d:58:ee:c3:8f:f7:37:
22:c3:09:1f:3c:1a:b3:b1:4a:49:bb:68:e7:b3:16:18:f7:b6:
6c:6d:32:cf:cb:df:df:29:7d:7b:bd:1c:de:f7:68:19:b7:11:
95:08:44:cd:09:22:c5:0e:85:d4:a7:ec:f2:eb:2a:c3:cf:1f:
5a:38:20:23:c0:ab:42:76:e6:69:cc:17:94:92:a5:b6:12:b8:
9c:43:9b:c5:70:77:bc:2b:9a:4c:f3:73:84:74:c6:c5:69:b2:
e2:c0:81:bd:fc:7a:c7:80:6b:84:02:04:95:df:4c:c4:8b:c1:
09:a6:1b:14:97:67:c3:f9:1e:62:b6:f1:93:96:f9:9b:d1:97:
e7:67:a7:fb:e1:59:b6:08:fd:51:90:25:eb:4e:79:5e:66:bc:
0a:2e:67:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:38:35 2025 by rpki-client