Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/xr4cnoQYDBUSz0Q66jWIVigNlXs.roa
File: xr4cnoQYDBUSz0Q66jWIVigNlXs.roa (raw, json)
Hash identifier: acGeAXYA1k7RGZBMGbdoHpf8NEHkWx6QI/rc8pCfjjo=
Subject key identifier: C6:BE:1C:9E:84:18:0C:15:12:CF:44:3A:EA:35:88:56:28:0D:95:7B
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 018D5AFB61A89984E3A881CA355D3DC18D87
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/xr4cnoQYDBUSz0Q66jWIVigNlXs.roa
Signing time: Tue 30 Jan 2024 15:27:20 +0000
ROA not before: Tue 30 Jan 2024 15:27:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 194.165.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 17:36:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5a:fb:61:a8:99:84:e3:a8:81:ca:35:5d:3d:c1:8d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Jan 30 15:27:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6be1c9e84180c1512cf443aea358856280d957b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1a:1d:e6:9f:93:9c:86:6c:ef:63:5a:fb:82:
73:81:5b:42:bb:29:41:78:1b:fb:77:7b:7b:c5:28:
b6:99:9d:c6:0b:85:76:11:cf:66:c2:0d:ff:f6:82:
9d:d8:25:9c:79:73:f9:26:c0:a0:68:16:b4:c0:6a:
31:40:36:d4:05:86:04:c1:fc:10:59:dd:d5:7e:2a:
ec:8b:2b:08:5c:a1:29:a7:e0:d5:a3:af:df:d0:69:
76:b2:bd:86:00:d8:c7:c1:f3:12:38:15:0c:db:3b:
79:09:61:4b:50:ca:86:06:4d:d6:81:4a:8a:01:af:
e6:8a:49:f9:28:55:1a:dc:2a:5e:d1:5f:93:7b:0a:
0a:e0:f9:ff:0a:77:16:95:75:76:4e:a1:eb:b8:8f:
e5:3c:3e:fd:62:4c:2f:4d:43:1b:ab:23:3a:dd:cf:
1e:7b:52:39:91:54:f3:07:89:37:d2:af:78:c0:e6:
bf:aa:21:ba:00:64:f6:87:7d:08:2a:0f:7c:4f:e4:
73:1d:52:55:f8:b4:85:fc:85:41:0e:29:34:4e:29:
81:5b:8d:51:b8:99:43:83:e1:4e:f9:b3:42:6a:eb:
6b:35:71:e2:73:f4:0c:97:38:d5:4f:c9:64:7e:c9:
cd:f3:8e:23:41:2c:f7:d5:41:46:a2:9b:c7:9b:2d:
34:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BE:1C:9E:84:18:0C:15:12:CF:44:3A:EA:35:88:56:28:0D:95:7B
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/xr4cnoQYDBUSz0Q66jWIVigNlXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.27.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:62:14:68:15:5e:85:6e:f0:22:1d:df:55:fe:c2:51:f5:52:
b5:55:67:2d:7e:e9:99:b0:e3:de:8c:cf:f2:f9:19:10:1e:b9:
ea:2c:e5:16:96:4c:61:b4:0d:9f:3b:3d:91:c3:14:18:ae:35:
50:c8:d2:9e:02:4f:bd:09:a4:42:39:24:7a:e2:04:9e:d3:6e:
16:30:62:59:2d:2d:d5:5a:1e:35:f2:fa:f8:8d:06:07:47:04:
1f:86:86:10:9b:e6:9b:a6:06:a5:76:38:6e:41:cd:dd:4a:f8:
85:54:c6:29:61:26:78:d6:a6:32:2c:b7:e6:ad:44:79:f8:e7:
fc:2a:bd:dc:c8:0f:80:cc:92:f7:42:8b:f0:c4:b3:7c:62:12:
90:6a:ef:a1:0b:e5:1c:aa:6d:1d:15:9e:a0:a9:cb:2f:ae:b9:
54:3b:a2:10:76:87:22:a0:c4:f2:d1:26:f9:32:d7:42:58:2a:
ac:57:85:1d:00:da:d0:b6:52:9a:49:5b:2b:97:2b:a2:8f:6e:
82:20:89:08:d6:61:25:31:1b:69:24:b0:b5:fb:60:66:8d:f0:
36:28:9a:14:9a:cd:68:4e:5d:47:e3:29:9c:c7:fb:11:a1:a9:
01:e4:b3:e3:5c:b5:6f:fe:da:a5:2f:63:5d:bb:28:18:1c:de:
4a:15:fb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:46:41 2025 by rpki-client