Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mr1aqkv6sobd4F12dud88Fz-utU.roa
File: mr1aqkv6sobd4F12dud88Fz-utU.roa (raw, json)
Hash identifier: 9ApuPcq0l5HkZqRPScj+uMqJ5NIi95/aMllu6pYDr48=
Subject key identifier: 9A:BD:5A:AA:4B:FA:B2:86:DD:E0:5D:76:76:E7:7C:F0:5C:FE:BA:D5
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018FBF08E950CCA267EEED6B15729623B8E9
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mr1aqkv6sobd4F12dud88Fz-utU.roa
Signing time: Tue 28 May 2024 11:49:43 +0000
ROA not before: Tue 28 May 2024 11:49:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214965
IP address blocks: 194.105.82.0/24 maxlen: 24
217.145.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Aug 2024 07:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bf:08:e9:50:cc:a2:67:ee:ed:6b:15:72:96:23:b8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 28 11:49:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9abd5aaa4bfab286dde05d7676e77cf05cfebad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fa:0e:42:61:f5:3d:5f:69:64:07:e5:09:c4:
a2:27:bd:24:ac:c1:5b:18:48:ab:b2:b7:da:29:50:
57:60:cd:b8:7d:2d:0e:d6:d9:6e:85:2f:4d:54:9c:
31:0c:8a:07:f3:43:b3:06:b5:29:34:35:0d:04:07:
4b:5e:c3:25:50:5c:da:ca:ab:72:ad:87:5c:6b:07:
4a:0a:81:38:ae:0f:cc:65:11:8c:ff:8e:c1:22:76:
15:d4:42:d3:d9:23:51:76:71:93:8c:16:45:83:26:
c2:2c:e4:ea:dc:3f:1c:67:25:90:bd:72:c7:03:ce:
55:70:de:65:cc:0e:2d:3a:7a:94:cd:83:d8:cf:b7:
40:b6:18:2b:11:b3:1c:ff:24:8e:69:08:0e:5d:aa:
18:bc:e5:ad:bf:46:c2:a8:ca:87:04:37:0e:0e:45:
75:49:7d:47:1e:cb:6f:f5:22:ca:a8:06:7a:cc:b6:
d5:f9:44:eb:83:13:bc:0a:27:66:78:09:b8:55:7c:
5b:89:27:75:bb:9e:99:6c:d9:3f:9f:d7:46:b2:fd:
e3:12:81:b2:5d:60:78:4d:a2:13:a0:bf:c3:b2:08:
65:1f:86:ee:1c:0b:ee:1c:dc:f1:5c:ab:7c:c8:b3:
e8:27:65:a8:cf:95:74:b0:b4:34:9a:af:fe:5f:05:
66:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BD:5A:AA:4B:FA:B2:86:DD:E0:5D:76:76:E7:7C:F0:5C:FE:BA:D5
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mr1aqkv6sobd4F12dud88Fz-utU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.82.0/24
217.145.69.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:d9:d9:94:26:d7:b5:0a:3c:92:55:b2:cb:76:ba:58:d4:67:
b0:f7:72:88:a7:6d:71:c1:34:af:8a:54:a5:2f:c5:e6:07:0c:
d5:0a:19:48:14:37:c2:9c:bb:eb:53:1b:24:7b:c4:fc:dc:1e:
53:33:6f:cf:ae:57:68:57:35:b1:d4:41:a1:0a:95:72:35:da:
99:29:ba:46:6d:52:8e:de:e2:62:94:35:28:c6:cf:e2:6b:7f:
d4:ec:1a:94:77:c0:09:cf:fe:2f:b0:8e:f3:45:f4:9c:93:60:
79:71:c2:42:e6:02:96:96:86:00:b5:e2:11:f8:c5:7f:e1:95:
bb:35:ec:77:c4:48:1b:c6:2f:6c:02:3c:4e:bf:55:69:d9:e5:
77:04:68:e6:60:18:8e:05:a2:b2:d8:55:9d:d8:d3:68:1c:cb:
e7:cb:21:77:28:32:20:0d:c2:a0:d5:90:20:fd:4d:ce:2c:21:
e9:e4:45:ea:44:48:c4:0a:f6:f9:ec:50:e8:be:83:a2:d4:bb:
aa:ff:2d:9d:8d:61:10:fe:24:93:57:c1:b2:d6:3d:70:de:37:
d3:ef:06:b2:f6:0e:86:c7:af:e3:06:5a:0a:f3:d6:89:15:25:
16:2c:11:43:0c:98:cb:a4:b4:93:6d:99:b1:6e:e6:bf:8c:24:
29:fe:32:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:33:28 2025 by rpki-client