Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/IBRZ-lBx1sGKDohyUBPnzHuLc9A.roa
File: IBRZ-lBx1sGKDohyUBPnzHuLc9A.roa (raw, json)
Hash identifier: ZHj6SnRi2FDXR2yXDQNgjfQ/kX0SGlDVx8yGizQZOE4=
Subject key identifier: 20:14:59:FA:50:71:D6:C1:8A:0E:88:72:50:13:E7:CC:7B:8B:73:D0
Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Certificate serial: 0193217D7486833CCD25E62FDA6F710978F0
Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/IBRZ-lBx1sGKDohyUBPnzHuLc9A.roa
Signing time: Tue 12 Nov 2024 17:48:10 +0000
ROA not before: Tue 12 Nov 2024 17:48:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34177
IP address blocks: 91.234.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:21:7d:74:86:83:3c:cd:25:e6:2f:da:6f:71:09:78:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Validity
Not Before: Nov 12 17:48:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=201459fa5071d6c18a0e88725013e7cc7b8b73d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:f2:70:72:d4:83:66:9d:f8:ab:ae:00:d8:
f8:cf:09:eb:a3:bd:90:32:c2:a9:2c:f6:72:65:16:
56:12:1f:76:06:ca:40:ed:67:3f:35:f2:a5:09:3f:
c0:f7:82:11:96:0b:44:5d:5c:03:b9:8a:a8:4c:49:
1b:4b:f8:20:74:a5:33:60:a2:ba:94:7a:33:c4:4b:
54:56:b3:d6:e6:93:5d:bb:01:d7:ff:40:54:e1:d3:
a7:33:33:35:71:93:64:51:c7:ca:4f:b8:6d:0c:31:
c4:06:ae:e4:cc:b7:e5:b9:e5:cf:82:1c:db:a0:c6:
96:d7:56:fd:8f:1c:14:5a:54:5f:8d:74:95:5e:18:
db:2f:e8:54:56:dc:4a:04:fa:96:e4:08:d7:58:d1:
7f:1a:f0:03:34:ea:a1:03:0c:76:67:c7:c0:bc:78:
2b:9c:85:5e:cd:66:c4:67:16:db:cf:64:de:36:ae:
c5:59:f5:aa:5a:fc:3c:b1:23:f4:63:09:08:f2:31:
a7:02:98:eb:60:25:90:f0:f0:f0:4a:06:e7:8f:f7:
00:5a:64:0d:4c:bc:ed:af:9d:2a:fa:97:eb:b3:57:
66:51:52:85:8d:d7:34:29:19:79:16:40:b5:eb:69:
a9:a9:4b:fa:2a:04:e2:94:69:33:f0:e8:97:00:ad:
82:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:14:59:FA:50:71:D6:C1:8A:0E:88:72:50:13:E7:CC:7B:8B:73:D0
X509v3 Authority Key Identifier:
keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/IBRZ-lBx1sGKDohyUBPnzHuLc9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.9.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:0c:34:e7:7f:52:09:ef:7a:2e:25:d9:34:95:3c:50:35:30:
71:b5:db:13:98:7e:e8:d6:f9:ad:99:d4:0f:3f:8c:16:a1:5b:
91:a8:09:da:e5:b1:c0:b7:16:9a:3a:ea:74:01:a4:94:af:7a:
99:ec:f0:a6:a6:da:0b:87:e5:49:37:e3:5b:c7:d2:b5:3b:45:
93:01:41:5d:d8:ff:28:19:86:4e:69:b7:75:f8:eb:b3:04:e1:
a0:d0:ac:a6:38:08:3a:11:b7:45:59:ab:ab:cb:f9:d5:4e:c4:
88:90:65:62:d2:c3:be:30:2f:33:a3:ba:ab:b5:59:1b:14:cc:
4d:5c:5f:e7:c1:1c:34:06:a3:00:11:9b:6a:fe:e9:98:4f:1b:
28:db:cb:38:50:e7:e1:e9:19:1f:57:24:df:cf:e7:56:58:34:
bb:99:f4:eb:7d:8b:70:be:fa:d8:1f:46:73:b9:27:38:4d:d2:
01:a9:79:99:88:8d:7c:a2:89:7b:33:d4:ce:aa:84:bc:1a:35:
52:fb:3e:ee:73:9a:d2:da:64:c7:26:de:91:7b:42:3a:c5:d1:
cc:53:35:d2:3e:dc:17:d1:2f:df:98:a8:bf:39:38:39:8b:78:
4a:ef:06:d5:42:3c:19:1f:7e:b3:eb:0b:a9:53:b0:18:a7:46:
36:92:c1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:41:54 2025 by rpki-client