Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/Sq3mJt7GKbge8li9Z8Mv2h8sGAc.roa
File: Sq3mJt7GKbge8li9Z8Mv2h8sGAc.roa (raw, json)
Hash identifier: ayweVnWpr0U7fh2Po+4Dx/ANm0qzm809lQ91k8lQxYc=
Subject key identifier: 4A:AD:E6:26:DE:C6:29:B8:1E:F2:58:BD:67:C3:2F:DA:1F:2C:18:07
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 018CC7274801C7C33325FDA8D3FBDF58CEFE
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/Sq3mJt7GKbge8li9Z8Mv2h8sGAc.roa
Signing time: Mon 01 Jan 2024 22:31:29 +0000
ROA not before: Mon 01 Jan 2024 22:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197106
IP address blocks: 94.31.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:48:01:c7:c3:33:25:fd:a8:d3:fb:df:58:ce:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 22:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4aade626dec629b81ef258bd67c32fda1f2c1807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:be:01:ae:ef:e3:18:50:8b:6c:59:4b:4c:63:
4c:78:d0:72:79:44:29:f1:d3:f8:f2:80:e1:82:f5:
94:7f:f4:dd:0e:3d:13:d9:b5:d3:77:ea:14:7b:ae:
15:1f:a7:b7:19:03:d8:ce:29:5c:f3:d7:9d:d8:27:
5e:8e:ae:0b:2f:17:05:bf:6b:6c:72:c0:e9:6f:47:
be:b1:25:ea:8e:68:0f:be:48:e8:84:a2:bd:5a:8c:
eb:91:e2:0d:d3:70:77:dd:26:43:d2:b6:ea:4f:0a:
44:ee:52:62:41:8c:81:a3:ff:4a:e8:fe:f7:15:c2:
af:71:ab:6c:83:86:69:df:49:86:51:59:b3:14:50:
c4:26:c1:a5:30:40:42:83:b4:37:67:94:e8:5d:49:
b1:3b:4a:6f:de:ab:f9:d7:3d:d2:5b:19:d5:62:da:
74:a1:ac:13:47:eb:56:89:7f:95:fb:1b:2b:04:23:
3c:b9:55:7d:dc:b2:97:cb:0a:fe:1b:34:d8:b4:3a:
20:65:ca:da:80:85:06:1e:60:1b:85:c1:fa:35:14:
70:bb:83:5b:5d:a0:56:fe:9d:7b:44:39:82:5e:21:
6c:3b:65:3b:58:60:78:38:3a:39:c8:82:48:82:71:
ff:d9:94:ec:7c:5e:f6:64:27:13:38:2d:e8:57:4f:
c9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AD:E6:26:DE:C6:29:B8:1E:F2:58:BD:67:C3:2F:DA:1F:2C:18:07
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/Sq3mJt7GKbge8li9Z8Mv2h8sGAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.31.3.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:4a:9a:d1:6f:be:8f:eb:08:c7:94:26:7a:a6:39:b4:ec:c3:
5b:3c:51:16:49:f1:70:ed:26:4c:b5:72:e6:d1:94:2a:a8:0a:
bf:9a:27:93:0d:58:21:eb:26:9b:f6:6a:3f:3d:cc:12:15:a8:
fc:0c:d5:f1:97:ba:b1:18:08:22:e0:30:4e:b0:36:91:f3:5d:
fa:06:93:91:f2:22:86:c4:3c:4b:70:3f:ee:69:cf:06:c6:a8:
a9:ae:d7:8b:6b:b3:31:1b:b9:f2:5a:25:9b:44:0f:df:85:30:
14:c4:d7:fd:ef:72:45:50:8c:46:5f:ca:40:d3:ba:65:a6:82:
5e:e9:e9:bf:8c:df:7f:0f:00:63:c6:d3:e3:62:0d:08:9e:d2:
b7:9f:9d:0b:a9:8f:31:66:d9:d1:23:2a:bd:02:89:78:4f:10:
65:6f:aa:ad:38:76:9a:23:b7:b2:45:dc:b5:04:40:49:78:05:
b3:b4:b8:23:92:10:16:62:8d:0b:fb:1b:83:87:1d:50:ce:b8:
50:87:77:19:e1:3e:db:33:56:23:c6:ec:df:eb:b6:c2:af:6c:
f8:92:d8:57:a7:d3:25:5d:50:75:9d:48:f8:eb:37:75:4f:b0:
1a:aa:d5:b6:da:fd:9b:52:ce:ae:d6:1d:1c:98:02:88:d7:48:
d8:f1:3e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:31 2025 by rpki-client