Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/i5i5922q8vhfPBWFxFdhPpyDq54.roa
File: i5i5922q8vhfPBWFxFdhPpyDq54.roa (raw, json)
Hash identifier: vYEgL111zhKbn+U8nEmF+6/912Nw/o4y9c/kbiIoH2w=
Subject key identifier: 8B:98:B9:F7:6D:AA:F2:F8:5F:3C:15:85:C4:57:61:3E:9C:83:AB:9E
Certificate issuer: /CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Certificate serial: 0194B21AC55241A8FE4DDCEA18C72479378E
Authority key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/i5i5922q8vhfPBWFxFdhPpyDq54.roa
Signing time: Wed 29 Jan 2025 12:48:06 +0000
ROA not before: Wed 29 Jan 2025 12:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50411
IP address blocks: 37.130.8.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 06 Mar 2025 15:13:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b2:1a:c5:52:41:a8:fe:4d:dc:ea:18:c7:24:79:37:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Validity
Not Before: Jan 29 12:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b98b9f76daaf2f85f3c1585c457613e9c83ab9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7a:df:aa:6d:f4:cc:50:9d:2f:c8:b0:01:fa:
53:79:90:be:ee:ee:4b:1f:67:be:3a:e3:15:2d:bf:
d0:6c:e6:03:1a:90:b3:ba:0d:b0:ae:41:d6:83:36:
64:55:6d:47:45:ad:65:f8:18:8d:81:74:d9:6d:4b:
1c:2f:cd:7e:e0:95:e2:76:a2:e7:48:a4:50:02:ef:
43:7f:11:7b:a8:19:9d:f6:d2:f8:0e:39:04:f6:db:
a6:73:2b:34:b8:77:c8:aa:9f:ea:b9:7a:d3:21:cd:
08:b4:97:6e:59:01:a8:84:ab:11:c1:36:db:04:29:
23:23:bb:be:ff:e8:ec:fa:f7:22:95:fd:50:52:f3:
78:f6:7c:bb:53:75:88:38:e9:40:31:2d:89:3b:f3:
39:f4:1b:5c:39:fe:39:3c:41:05:62:18:80:e2:d7:
c5:2f:2c:de:a6:a9:17:45:bf:97:8b:7a:33:ad:93:
ac:41:b2:47:49:b1:0e:9d:5e:e3:21:b0:95:05:c8:
68:f3:60:96:53:3e:36:43:a2:cb:e9:9f:c5:bf:c1:
9d:00:26:43:17:c2:b2:39:8d:1f:07:75:d1:c3:09:
d3:f8:b8:a5:1e:30:ed:34:00:92:bc:93:b8:17:c0:
1f:38:4b:b9:61:16:c2:ed:18:9b:7f:5c:1e:f5:a1:
df:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:98:B9:F7:6D:AA:F2:F8:5F:3C:15:85:C4:57:61:3E:9C:83:AB:9E
X509v3 Authority Key Identifier:
keyid:90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/i5i5922q8vhfPBWFxFdhPpyDq54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.130.8.0/22
Signature Algorithm: sha256WithRSAEncryption
23:70:46:57:c9:8c:d6:29:a5:9a:f4:fb:31:50:af:28:23:5e:
79:b4:fb:34:65:45:5b:c9:f0:4e:8a:6f:cc:09:62:39:75:87:
8c:93:3a:ec:00:6c:47:d1:81:3d:b8:20:4f:3c:a4:76:0b:67:
7b:a3:c1:64:d5:74:0f:87:e3:47:2c:d6:ef:08:fe:ff:74:5a:
3c:01:82:56:55:05:dc:a2:35:c4:e9:d3:50:38:67:cc:b9:c5:
fa:6e:43:49:6c:19:f0:2e:20:d2:05:13:7f:76:c0:a9:9e:a8:
7d:a6:b2:1d:cf:57:8f:f6:49:3e:7b:9f:46:3c:f8:f2:86:8b:
2a:00:62:e7:cf:6d:7f:f6:2d:c4:f7:19:1c:b9:86:1e:ec:c8:
49:23:f7:57:53:90:64:c8:07:03:a5:2e:df:fb:e3:f0:bb:8a:
60:fe:97:b8:f5:eb:52:3b:4e:88:12:31:7f:ea:57:14:19:f3:
8e:6e:70:b6:29:9f:92:3a:19:33:02:b6:aa:8b:e4:cd:15:ee:
13:79:e8:7c:e3:bc:d4:72:f5:9c:81:63:bf:88:b1:2f:a2:fa:
6a:b9:94:8e:09:7e:c3:39:9c:6a:16:8c:bb:a5:e3:7e:16:02:
a5:a4:fe:7e:a5:01:d1:d3:84:9f:73:8a:e8:1a:48:0c:19:ab:
ce:b1:63:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:12:24 2025 by rpki-client