Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/0vxyY18z--b4iS_pZFzvI9_SB7U.roa
File: 0vxyY18z--b4iS_pZFzvI9_SB7U.roa (raw, json)
Hash identifier: 1Jvz4pKZFtOvCwEt8hcBx6oyfff6pk2biZCpyN1rTSE=
Subject key identifier: D2:FC:72:63:5F:33:FB:E6:F8:89:2F:E9:64:5C:EF:23:DF:D2:07:B5
Certificate issuer: /CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Certificate serial: 01941F8C91CEAFD830BF3C9B6839DD4889EB
Authority key identifier: 09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/0vxyY18z--b4iS_pZFzvI9_SB7U.roa
Signing time: Wed 01 Jan 2025 01:48:13 +0000
ROA not before: Wed 01 Jan 2025 01:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214623
IP address blocks: 199.244.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Mar 2025 21:07:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:91:ce:af:d8:30:bf:3c:9b:68:39:dd:48:89:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Validity
Not Before: Jan 1 01:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2fc72635f33fbe6f8892fe9645cef23dfd207b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:06:c8:e3:49:78:cf:15:a3:29:a2:d8:1d:04:
e5:da:9c:4d:ee:a7:f4:5d:23:a6:a3:98:20:63:40:
5e:57:19:08:df:dd:52:98:0d:35:cc:c9:04:5b:da:
79:8a:b7:a1:8b:2b:33:70:55:87:af:fd:68:ba:94:
cb:84:0f:6b:63:a4:17:2b:8d:97:8e:3c:1d:5c:70:
ac:2e:e8:07:86:4f:6a:4d:f8:8e:91:d2:a6:c5:4a:
f1:86:43:41:43:df:a9:f3:f8:ca:09:b8:00:5b:ee:
3a:4f:77:d0:b2:60:ce:24:f4:c8:c4:2c:21:92:86:
4e:3b:b4:c7:c6:d0:24:0c:e0:14:cc:db:01:8f:cb:
61:ab:01:ac:3d:d0:4c:19:a8:6f:68:a6:89:c8:09:
d6:0e:6a:16:ce:51:13:92:53:ac:08:36:8e:3b:a3:
15:23:dc:c8:7a:40:a9:4c:ca:c1:5a:11:d2:d2:fc:
b9:41:94:56:90:03:1c:2e:1e:74:72:9e:db:f9:68:
1f:72:dd:00:dd:49:43:4d:92:7f:58:5e:21:3f:0f:
dc:1a:18:99:e6:36:fe:b2:10:0d:e8:7f:47:f3:00:
74:ef:7c:17:6a:dc:f1:f8:b5:90:aa:1e:73:42:1b:
5f:9d:91:6e:16:bd:5c:03:c3:a8:42:78:2b:d0:a8:
6c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FC:72:63:5F:33:FB:E6:F8:89:2F:E9:64:5C:EF:23:DF:D2:07:B5
X509v3 Authority Key Identifier:
keyid:09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/0vxyY18z--b4iS_pZFzvI9_SB7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.244.103.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:9a:dd:d5:1f:ce:2d:fc:86:de:a9:bd:9f:da:e0:5a:1b:77:
7b:25:8d:0b:ef:68:5f:f6:1f:5d:74:7e:8f:8a:cc:a3:15:9f:
ae:a0:22:a7:07:54:50:ab:42:10:1a:b5:58:be:0f:9c:60:e4:
c7:44:25:d3:09:69:82:54:56:36:25:75:d0:ac:2c:f2:e8:cc:
1a:8e:e3:1f:4d:22:75:44:c4:bb:54:99:17:ea:24:99:3e:35:
5b:74:c8:af:3c:3a:48:eb:63:d3:c4:c9:48:be:7a:29:67:6c:
92:d3:76:92:7d:e4:43:f5:c8:63:08:60:01:1b:0f:1f:4f:e4:
26:bd:b4:83:83:fb:da:3d:64:04:6d:c0:8f:2e:15:3e:89:14:
30:92:2b:a8:f7:c3:7c:81:39:a7:e1:8e:41:31:32:33:e6:ae:
d3:b5:b6:60:fa:47:44:ef:02:61:ea:b1:a1:d1:21:9c:d0:56:
a8:4b:52:8e:27:46:b1:59:82:9d:41:ac:d6:50:64:73:02:8b:
b4:25:56:62:4c:02:13:9d:f3:a3:24:f0:d3:f9:aa:9f:41:c5:
a7:2f:7b:3a:4d:8c:88:74:5f:12:ba:0e:20:80:1f:92:67:ba:
da:65:32:f4:bd:fe:a3:80:d0:1d:5b:b0:4a:6b:f4:67:09:17:
5e:c9:ee:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:12:49 2025 by rpki-client