Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/l3lKclk_vwJQRMsiFky6dGmbpfc.roa
File: l3lKclk_vwJQRMsiFky6dGmbpfc.roa (raw, json)
Hash identifier: lYfmXYIExjWAdVi60TMqptdoz3A9zNrru3kCSDJpgTs=
Subject key identifier: 97:79:4A:72:59:3F:BF:02:50:44:CB:22:16:4C:BA:74:69:9B:A5:F7
Certificate issuer: /CN=18f003fba37b00d5f9ce7ec84a3e0668bcd02824
Certificate serial: 018CCA2A192D049E94D758F91F037274D296
Authority key identifier: 18:F0:03:FB:A3:7B:00:D5:F9:CE:7E:C8:4A:3E:06:68:BC:D0:28:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/l3lKclk_vwJQRMsiFky6dGmbpfc.roa
Signing time: Tue 02 Jan 2024 12:33:25 +0000
ROA not before: Tue 02 Jan 2024 12:33:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202207
IP address blocks: 94.250.246.0/24 maxlen: 24
94.250.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:19:2d:04:9e:94:d7:58:f9:1f:03:72:74:d2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f003fba37b00d5f9ce7ec84a3e0668bcd02824
Validity
Not Before: Jan 2 12:33:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97794a72593fbf025044cb22164cba74699ba5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6c:20:ae:8c:ab:12:6a:34:6b:c9:3f:cf:19:
1e:0c:fe:7b:df:17:f4:b3:f0:23:35:71:e1:8f:8a:
35:f9:6d:af:0e:0d:d9:39:aa:87:4d:b7:78:b0:2a:
ec:49:5f:dd:fb:19:4d:54:d1:b5:37:02:3d:20:92:
52:92:e4:19:61:61:0d:58:e9:6d:c6:c7:8c:e0:c0:
0e:20:a8:15:f3:46:df:0e:2d:af:7f:5b:60:3b:cf:
05:1f:d1:13:eb:be:92:d7:29:bd:2b:09:b2:c5:e3:
26:0c:85:53:73:94:6f:07:82:a8:63:dc:4e:e6:38:
84:dc:80:de:ae:00:9e:71:b9:57:32:97:c4:1a:c0:
18:b5:0e:8b:df:fa:5a:c2:9f:7a:b0:c7:11:aa:48:
9e:09:d7:56:0b:fb:ca:fb:6b:b5:9a:df:19:21:a2:
31:d7:bb:ef:1b:71:fc:3b:80:23:e1:1f:46:5c:64:
d3:81:99:41:1c:25:c9:fa:7b:6e:ab:ce:ed:cc:42:
a0:4f:ca:39:26:dc:bc:01:bc:e4:90:fc:d6:e6:ba:
5d:34:0d:46:09:f6:97:d4:be:eb:80:76:1c:cf:6e:
3c:49:55:d9:95:04:de:91:80:a9:5f:6b:5a:ee:3c:
a7:42:d7:84:8a:ac:2e:04:b3:6b:95:6c:16:51:6a:
0a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:79:4A:72:59:3F:BF:02:50:44:CB:22:16:4C:BA:74:69:9B:A5:F7
X509v3 Authority Key Identifier:
keyid:18:F0:03:FB:A3:7B:00:D5:F9:CE:7E:C8:4A:3E:06:68:BC:D0:28:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/l3lKclk_vwJQRMsiFky6dGmbpfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.250.246.0/23
Signature Algorithm: sha256WithRSAEncryption
51:ed:ef:e7:8a:7c:45:62:61:d4:85:dc:c9:ec:94:ca:45:59:
d6:70:4d:17:3c:98:9e:ef:b3:15:b9:a5:16:13:f2:53:a5:94:
c6:d7:24:04:a0:c7:47:4c:56:04:1b:4a:8f:61:98:4c:16:0c:
fa:24:45:94:f3:5b:a7:24:ed:c8:9f:3a:74:74:70:69:72:39:
5c:ad:62:c5:26:f7:95:93:76:47:aa:9a:0d:05:f8:9e:05:61:
91:96:10:ef:a6:b0:1c:d6:35:2a:84:d2:c6:8b:63:5c:d3:bb:
96:4d:d0:f8:50:bd:a9:70:48:14:7e:bf:56:65:87:2d:aa:f1:
f3:f0:12:8f:12:dc:20:f3:72:9b:13:69:89:0a:ab:7f:eb:f4:
73:77:fe:6d:4c:77:65:95:42:37:6d:31:21:ad:1d:17:fc:23:
a1:1b:9f:e1:ff:dc:cc:aa:3f:ec:85:43:b8:d5:87:91:ac:46:
a7:35:9e:98:74:85:d7:52:ce:ae:3c:4b:ef:4e:f9:69:17:fe:
df:94:74:ce:56:6e:3d:4e:75:90:36:4d:2a:ae:00:42:ce:6b:
0f:2f:cd:b3:f9:64:c9:97:74:93:9e:14:41:b4:39:f5:00:52:
4e:b5:0a:f0:07:ef:68:18:60:4b:71:18:9f:8e:07:75:75:70:
82:7f:50:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:12 2025 by rpki-client