Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/9AuW8SBeRKrt70DkC8sF6NCKIBM.roa
File: 9AuW8SBeRKrt70DkC8sF6NCKIBM.roa (raw, json)
Hash identifier: 2m6hPE6F3XxonQu7WyTcRaQFgz63qL1Jo39GLO8QOl8=
Subject key identifier: F4:0B:96:F1:20:5E:44:AA:ED:EF:40:E4:0B:CB:05:E8:D0:8A:20:13
Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial: 01917A302A113D6FDAD2C5037B68EEE04944
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/9AuW8SBeRKrt70DkC8sF6NCKIBM.roa
Signing time: Thu 22 Aug 2024 13:04:22 +0000
ROA not before: Thu 22 Aug 2024 13:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214317
IP address blocks: 94.247.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7a:30:2a:11:3d:6f:da:d2:c5:03:7b:68:ee:e0:49:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Validity
Not Before: Aug 22 13:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f40b96f1205e44aaedef40e40bcb05e8d08a2013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ee:c1:42:e3:10:87:92:59:50:92:83:5c:df:
5e:52:61:f6:e5:00:eb:f0:d6:41:3a:d8:a9:d1:e5:
5d:3e:19:94:dc:4a:83:b2:eb:df:88:7a:cc:b3:48:
52:ee:f3:32:e9:75:7f:01:e0:02:a0:89:3a:1f:2d:
a2:3c:de:3e:e7:9e:cf:24:57:b0:48:14:23:23:9d:
e5:42:d9:62:32:e7:6c:fb:5f:a1:18:14:b8:b2:07:
33:d5:c3:37:5a:d4:b8:8b:cf:86:34:84:54:c1:42:
12:0d:75:dc:81:fc:72:0e:c8:82:a5:e3:0e:ca:0d:
f2:28:04:14:37:22:5f:c0:98:b1:b7:db:22:35:57:
13:64:9b:ec:14:4f:ff:e7:89:98:12:30:30:5a:5a:
be:97:5c:b9:31:c2:c4:0d:9c:0a:66:ea:da:e7:0f:
e0:9c:64:98:aa:7e:79:46:e9:10:f6:e5:ab:77:b1:
61:54:c3:b4:5d:c8:6f:1f:3a:9e:1b:99:7e:20:4a:
09:13:73:ff:cc:ec:ef:c0:6d:00:45:ef:f6:1e:32:
7c:c5:77:31:a6:54:e0:fc:68:c1:be:46:22:c9:5b:
03:3a:87:d7:a9:1a:90:fe:21:d8:84:1b:fe:b4:76:
c1:9c:f7:1f:5c:dc:d0:57:4d:7b:41:df:b1:54:b7:
c9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0B:96:F1:20:5E:44:AA:ED:EF:40:E4:0B:CB:05:E8:D0:8A:20:13
X509v3 Authority Key Identifier:
keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/9AuW8SBeRKrt70DkC8sF6NCKIBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.104.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:ab:9e:e9:4d:c9:0a:7b:bb:de:85:c6:18:b9:b0:aa:70:c2:
e3:5a:0a:f4:10:57:bf:8c:c8:26:8b:ac:d6:40:ce:ef:4e:27:
90:d5:ef:7e:27:75:54:46:b9:bc:01:43:dc:e9:95:fc:73:85:
f7:9b:a9:86:10:fa:4b:52:cf:60:c9:91:47:79:de:36:fa:16:
51:ea:13:98:3e:42:5f:a8:1f:f1:b0:29:9d:58:1d:11:9e:99:
02:ff:88:20:36:79:54:b2:c3:36:c1:d8:3d:c7:b1:0f:81:50:
f9:26:e4:68:0a:7d:c6:bc:da:20:1b:c3:e4:6f:7f:6a:2d:b2:
fb:dd:41:28:a1:8e:96:ab:92:6e:b2:c7:db:54:ff:be:51:d4:
a7:c5:04:bf:e7:94:fd:01:3a:3c:e0:47:4c:10:58:d4:03:7b:
8f:43:b2:6c:dc:5c:d7:d5:e7:c4:46:d8:1a:6d:5e:26:e6:ed:
47:81:0b:18:67:b4:ba:6b:b2:70:64:85:4d:cd:c5:1f:b8:02:
17:b3:60:7a:a1:71:61:62:6c:e3:cf:3d:9c:c6:94:0e:ba:d5:
24:48:30:ff:6f:45:73:75:8c:f2:56:8f:dc:17:53:56:39:cb:
35:24:49:f1:85:5e:90:ca:c1:b8:b6:43:04:f8:05:05:eb:e9:
23:20:2d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:14:55 2025 by rpki-client