Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/AUJ0ehJTxAdgcwyFne3syhEsAtk.roa
File: AUJ0ehJTxAdgcwyFne3syhEsAtk.roa (raw, json)
Hash identifier: pRGy5pm789sR4IIaKrggwENfBtaPTRLxC+FV0JTdWM4=
Subject key identifier: 01:42:74:7A:12:53:C4:07:60:73:0C:85:9D:ED:EC:CA:11:2C:02:D9
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 018F10D3369A4B42840C8D37722C9C487A64
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/AUJ0ehJTxAdgcwyFne3syhEsAtk.roa
Signing time: Wed 24 Apr 2024 15:57:08 +0000
ROA not before: Wed 24 Apr 2024 15:57:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 194.165.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Aug 2024 07:36:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:10:d3:36:9a:4b:42:84:0c:8d:37:72:2c:9c:48:7a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Apr 24 15:57:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0142747a1253c40760730c859dedecca112c02d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fd:df:cf:58:99:62:02:f5:c1:7c:0f:77:cd:
c6:34:3b:69:84:8a:55:3b:0a:42:c8:f8:cf:cf:d5:
4d:1b:40:e6:0c:60:79:d4:35:3c:69:41:9f:2e:c0:
0b:93:d6:a2:38:b3:55:17:45:f7:c9:9e:23:4f:16:
88:8e:35:a9:ff:89:50:5d:2c:e4:56:85:e7:d1:0b:
58:f0:7d:df:75:9d:d4:f6:b0:2b:13:9a:bb:3d:46:
6c:06:19:ce:4b:b1:55:ac:bf:25:4c:6b:24:bf:d9:
f6:65:19:79:42:a2:e2:28:8a:20:79:14:e1:2f:08:
cb:38:e6:ff:36:34:03:63:19:fa:9c:7d:32:aa:43:
2e:1d:21:4a:b7:b1:c3:40:e6:90:ce:a8:95:e0:85:
08:93:3d:3a:7e:06:66:3b:c0:ab:24:28:ff:29:66:
d1:72:b3:7f:a5:33:1b:c9:17:0d:dc:db:6f:87:8a:
89:36:cf:19:68:8e:06:50:0a:00:6f:99:f4:55:ce:
dc:2a:d4:fc:03:30:81:df:eb:de:50:d4:b6:f0:5f:
1c:22:fb:ca:61:23:64:6c:51:5a:3c:1c:d1:f8:69:
42:2a:ac:d0:38:77:3a:b2:13:2b:68:0a:b7:c4:a5:
61:eb:a6:c5:55:09:38:39:a7:e2:63:32:a3:9d:fc:
7e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:42:74:7A:12:53:C4:07:60:73:0C:85:9D:ED:EC:CA:11:2C:02:D9
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/AUJ0ehJTxAdgcwyFne3syhEsAtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.27.0/24
Signature Algorithm: sha256WithRSAEncryption
28:08:bd:0f:16:e3:30:f9:be:b5:a4:57:08:c7:8d:72:96:0e:
9c:a4:f7:70:bc:22:1b:16:f5:5c:cc:a9:4f:3d:f1:ed:d6:76:
65:e0:31:10:98:65:b5:d2:3c:e5:0e:ff:d3:98:20:96:7f:04:
39:a7:42:ea:63:40:e4:50:a1:a1:6c:e6:64:5f:c7:02:f6:13:
2d:2f:a8:e4:ed:36:87:88:60:e4:3e:40:3a:e0:ea:63:ad:98:
87:2b:3e:7a:56:d7:21:2a:84:1d:4b:11:f2:d4:a7:61:06:2b:
99:27:65:44:ed:b2:44:26:77:4f:34:4b:32:6f:45:f0:5a:4f:
0b:a3:33:93:d1:37:c9:40:24:56:56:73:c1:6e:56:b2:a0:1b:
fa:71:69:c9:c4:fd:58:00:58:dc:0d:d3:17:b7:f7:0f:39:1d:
61:9f:e8:70:b2:3c:a1:a1:96:32:a9:80:db:93:6b:75:92:ce:
bf:96:a5:21:ca:a8:12:b1:c7:00:c9:1d:c6:b3:1e:17:af:23:
47:9a:d3:a2:08:22:5a:87:4a:fd:51:d8:9a:f9:43:c2:b6:0b:
23:75:af:21:ed:09:2d:52:4a:62:83:88:27:97:a3:3b:87:5d:
29:94:da:b7:4b:53:92:88:0c:b7:74:9e:e1:d1:d4:6f:78:31:
ca:dd:01:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:07:26 2025 by rpki-client