Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/rWMJlbXuyQo9YQVlAfNBRurBHOQ.roa
File: rWMJlbXuyQo9YQVlAfNBRurBHOQ.roa (raw, json)
Hash identifier: BtQCvkioWa+c8BwjyJ3pIG9oSOGd6gVxtaDFU+arvkk=
Subject key identifier: AD:63:09:95:B5:EE:C9:0A:3D:61:05:65:01:F3:41:46:EA:C1:1C:E4
Certificate issuer: /CN=13fe9bcebae228b36c883c27ea5518e704c10991
Certificate serial: 0193B601A917BC578293AD9D078397CB0134
Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/rWMJlbXuyQo9YQVlAfNBRurBHOQ.roa
Signing time: Wed 11 Dec 2024 13:56:22 +0000
ROA not before: Wed 11 Dec 2024 13:56:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 94.141.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Dec 2024 13:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b6:01:a9:17:bc:57:82:93:ad:9d:07:83:97:cb:01:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991
Validity
Not Before: Dec 11 13:56:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad630995b5eec90a3d61056501f34146eac11ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f4:aa:12:ac:6d:57:08:bc:be:11:64:2e:1e:
f6:22:a3:9d:0b:13:d2:21:83:f9:98:de:82:13:cd:
e1:c5:dd:ff:f1:48:4e:67:4c:49:7f:7b:fd:19:68:
54:48:09:c7:79:09:b4:13:c7:d7:a3:d3:3d:36:36:
1c:32:e8:52:1e:6f:4a:39:2e:66:b6:d9:69:59:f0:
e1:46:a5:d0:1d:bf:63:49:9a:07:a4:8b:84:46:81:
2e:9e:b5:be:b0:70:d2:ab:5a:31:fe:72:82:67:65:
92:b7:1e:3e:3c:98:01:22:8a:a2:d7:f0:9c:e7:80:
76:9d:44:31:ff:7e:9a:b0:2f:5a:d2:e6:ba:14:f5:
56:ef:12:ff:ea:00:15:6d:f6:ec:d9:f4:47:86:73:
0b:c2:1a:ee:32:02:ad:cd:46:48:80:16:7a:fb:2b:
16:5b:bd:bb:47:c7:14:9e:4c:f7:74:a6:a8:7e:cc:
89:46:41:3c:f5:72:ae:2e:92:4d:59:30:2d:bd:5d:
c0:59:92:df:9f:87:94:c5:a4:be:6b:10:a5:5f:06:
b4:3d:4e:77:d0:70:39:c9:bf:7c:4a:14:7b:6d:4e:
12:38:3b:29:c3:d8:a8:cc:26:b6:69:f9:8d:3d:a6:
9c:67:ee:e7:57:d1:17:a7:fc:93:92:8e:43:68:39:
28:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:63:09:95:B5:EE:C9:0A:3D:61:05:65:01:F3:41:46:EA:C1:1C:E4
X509v3 Authority Key Identifier:
keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/rWMJlbXuyQo9YQVlAfNBRurBHOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.141.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:94:9c:0c:e2:12:1e:30:d6:6d:c4:10:8f:3d:06:14:17:d2:
02:d1:e2:91:6b:0e:b5:6c:06:14:c1:87:0f:f2:61:87:31:eb:
ca:9c:03:2f:c5:4e:ad:06:c2:63:58:84:bc:5c:cc:ce:e8:6a:
ed:86:7b:04:10:62:87:f8:ae:a2:b5:2e:65:87:74:04:b3:60:
f2:2a:be:87:2e:bb:ce:db:ad:d7:0b:7a:24:73:56:da:e5:11:
93:aa:8f:af:67:88:0d:e7:0d:ea:1b:ed:c5:09:aa:3b:42:3e:
1a:35:8f:42:26:49:eb:71:13:00:10:d4:d9:22:fb:f3:56:96:
4f:8c:30:4d:a0:c8:be:4c:67:69:f9:af:96:e6:ae:3d:27:cc:
75:b1:b6:57:97:be:41:be:21:d5:ea:94:0e:a2:4d:05:95:80:
59:44:ee:98:3b:0e:b4:23:a0:d5:e2:be:ce:9c:e2:1b:44:3e:
de:8c:0d:7c:79:eb:33:b8:ae:c5:e0:2f:23:78:ff:75:13:60:
be:f1:5a:5d:78:1d:8a:a5:e6:cc:f4:76:a2:30:37:73:c3:f7:
1b:95:49:47:1b:ae:83:06:82:98:1c:2e:7e:16:bc:1d:94:79:
5f:f4:da:f3:29:8c:59:d1:8f:d4:d6:9d:29:1a:bd:69:49:31:
e6:8f:6d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:47:18 2025 by rpki-client