Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/9Yr09qrGQAy5Du8tTZgwKWl37JA.roa
File: 9Yr09qrGQAy5Du8tTZgwKWl37JA.roa (raw, json)
Hash identifier: 5v/1FyR9K8n1djRAHCPolnU0shCLblvEG2NkqaEh7/I=
Subject key identifier: F5:8A:F4:F6:AA:C6:40:0C:B9:0E:EF:2D:4D:98:30:29:69:77:EC:90
Certificate issuer: /CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd
Certificate serial: 018CC94E6D171B104820F11D9DC724DE678D
Authority key identifier: BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/9Yr09qrGQAy5Du8tTZgwKWl37JA.roa
Signing time: Tue 02 Jan 2024 08:33:29 +0000
ROA not before: Tue 02 Jan 2024 08:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39274
IP address blocks: 195.250.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6d:17:1b:10:48:20:f1:1d:9d:c7:24:de:67:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd
Validity
Not Before: Jan 2 08:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f58af4f6aac6400cb90eef2d4d9830296977ec90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:90:a1:53:cb:b9:7b:90:a7:25:d3:be:62:c7:
e1:28:f0:5b:fa:58:e7:d4:2e:36:5b:04:58:65:1d:
56:89:c2:cc:fb:bf:6d:2c:5d:06:68:a2:bc:54:e9:
a3:cb:68:a8:4a:18:6b:47:84:35:6e:95:b5:f0:3b:
2f:cb:49:56:3b:57:42:da:49:c7:22:9f:2d:2c:ed:
e0:5a:a6:f4:62:a2:55:be:1f:38:ee:d2:60:59:38:
d3:41:87:71:25:24:08:4d:8d:19:0f:cd:46:05:1b:
87:f3:3c:a7:5b:69:5e:a1:47:80:86:de:e9:81:df:
95:a5:b2:e3:43:97:51:10:e5:21:ca:7f:3c:0f:19:
54:4a:b4:1b:e1:65:a6:0b:48:81:fd:84:c0:f6:a2:
f0:65:54:6c:62:87:81:ad:49:85:46:a2:7d:f7:27:
f8:80:d5:21:99:98:11:a2:e3:7b:31:03:c2:95:ca:
b1:aa:1f:ac:4c:83:a5:86:70:1b:83:aa:b0:36:76:
3f:fc:1c:f8:40:48:23:a4:69:51:8e:04:1e:d9:f0:
91:fb:77:68:0a:79:29:fb:67:89:4e:ab:f8:a6:27:
5f:82:49:7c:1f:1d:49:af:9c:42:30:4b:0d:fb:d5:
fa:0d:3e:15:c8:6d:13:0d:56:b0:6d:ad:3e:c6:e4:
df:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8A:F4:F6:AA:C6:40:0C:B9:0E:EF:2D:4D:98:30:29:69:77:EC:90
X509v3 Authority Key Identifier:
keyid:BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/9Yr09qrGQAy5Du8tTZgwKWl37JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.250.33.0/24
Signature Algorithm: sha256WithRSAEncryption
07:57:8e:8d:30:fa:2c:73:3c:f6:71:80:45:e8:7e:be:50:68:
5a:05:08:c7:e4:01:6e:fc:ff:5c:ff:ff:a1:c9:6e:ac:d4:8d:
4b:6d:60:b0:d0:f0:ae:77:91:fb:80:74:ee:ad:7f:e2:b0:f2:
b6:96:42:67:1c:f8:f5:58:85:53:1f:0c:f3:66:44:d6:c7:a0:
cd:c2:ae:d3:c8:ef:0d:8c:2c:6e:e8:b7:c4:7b:31:53:e6:6a:
d6:9a:fa:b2:2c:3f:69:19:80:04:8b:bd:f2:29:ab:01:0b:0e:
1d:36:b8:fc:c8:96:bb:ed:3f:9d:f4:df:ea:26:a0:9c:8e:f4:
44:53:1c:82:a4:f5:06:28:56:bf:13:2c:87:ba:20:65:b7:5a:
f7:3a:71:36:69:0c:e9:79:a3:03:1b:6b:b2:66:41:82:45:fb:
70:59:e3:2f:a3:78:64:62:3d:86:b7:a3:fb:86:27:d4:3d:75:
28:9d:30:2f:76:29:1c:d9:36:6a:b1:bd:54:28:3c:b7:91:95:
f5:31:ce:0f:b5:5a:d2:59:15:a8:fd:60:16:32:18:51:2e:39:
28:27:6a:dc:2f:58:7b:ca:a0:14:6f:5a:11:c4:31:58:a0:6b:
29:5f:60:db:9f:12:9e:f6:b1:02:fa:e4:08:cb:8b:b0:50:92:
52:95:60:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:50:53 2025 by rpki-client