Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/n09V-7Cu4-CB7gpoJ4Nlp0fCcCg.roa
File: n09V-7Cu4-CB7gpoJ4Nlp0fCcCg.roa (raw, json)
Hash identifier: jVmIUPYmK/9T6aV+O7HbUOcSLURcpTT6mmv+8/l9Dzg=
Subject key identifier: 9F:4F:55:FB:B0:AE:E3:E0:81:EE:0A:68:27:83:65:A7:47:C2:70:28
Certificate issuer: /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Certificate serial: 0193F818A6F584E437EA62FF8ED14956D6F6
Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/n09V-7Cu4-CB7gpoJ4Nlp0fCcCg.roa
Signing time: Tue 24 Dec 2024 09:56:25 +0000
ROA not before: Tue 24 Dec 2024 09:56:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44694
IP address blocks: 81.24.12.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 24 Dec 2024 10:04:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f8:18:a6:f5:84:e4:37:ea:62:ff:8e:d1:49:56:d6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Validity
Not Before: Dec 24 09:56:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f4f55fbb0aee3e081ee0a68278365a747c27028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:27:4b:37:10:68:41:2c:d5:3f:66:7d:e5:84:
ae:c7:61:ab:e7:8b:5e:d2:45:9f:08:b7:3a:e4:54:
4e:2c:1d:08:09:8b:74:af:3f:85:97:13:ed:83:cd:
27:4a:cb:90:0f:19:eb:79:00:e9:ec:dd:32:dc:02:
de:52:4a:9d:25:cf:cd:62:f3:a9:24:66:c6:3c:f5:
81:3f:13:2d:0f:f5:aa:81:01:b0:bb:85:bb:db:0a:
83:f5:0f:94:0c:63:d7:17:de:6e:42:9f:5d:dc:cb:
7d:d2:d1:b2:2e:70:e0:af:df:e9:45:3d:fe:b9:1d:
45:c0:a5:98:d8:1c:a7:19:eb:32:07:24:d7:01:6c:
4a:1c:d4:07:06:87:ce:71:2d:e8:47:46:9b:b6:3d:
2d:24:ae:19:d6:71:c9:88:1a:c3:36:e5:91:73:31:
a0:2b:45:83:5f:cc:f9:69:cc:21:42:e0:de:5c:6e:
85:4e:6e:d9:a7:f5:da:07:f9:d5:31:ff:b9:24:57:
f7:7c:be:c7:66:6a:e9:21:30:d7:26:0c:1f:34:6f:
1b:70:13:9b:26:72:9a:b9:a0:1e:a1:4c:f3:3e:79:
4c:a8:88:a9:f8:e0:e4:77:8f:85:ae:09:6b:47:45:
61:5b:5b:c8:58:40:89:2a:3e:1c:f4:7b:ba:59:f2:
46:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4F:55:FB:B0:AE:E3:E0:81:EE:0A:68:27:83:65:A7:47:C2:70:28
X509v3 Authority Key Identifier:
keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/n09V-7Cu4-CB7gpoJ4Nlp0fCcCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.24.12.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:d1:2d:61:0b:2b:66:d9:96:e9:e5:77:47:5b:49:61:5c:d4:
d1:01:2d:fd:fa:56:81:3f:3e:59:13:1d:f9:0d:20:89:1d:60:
eb:51:62:c9:db:54:9c:70:67:6a:0f:c0:0c:1f:58:f0:15:f5:
88:58:37:25:05:e1:8f:f9:e8:ed:9a:0f:28:fd:9b:be:4a:83:
70:20:b5:51:92:67:6b:f3:a0:07:8e:7f:c3:83:d3:f1:f5:be:
8e:c9:1c:c0:6c:db:55:97:eb:f6:ea:d1:4a:42:ec:be:2a:65:
80:ee:cd:36:3a:b5:06:38:d9:a4:8c:66:1a:81:7e:c2:d4:cd:
d9:62:12:2b:89:d2:7e:a0:87:47:43:8a:1c:75:87:3b:38:86:
35:38:9e:3a:8c:f5:bb:f1:81:21:ef:7a:6a:49:d0:a0:a3:ac:
c7:bd:10:ab:b5:e1:34:c1:61:3f:94:5b:75:ea:32:74:eb:45:
f5:bc:2b:c0:91:89:6a:e4:f8:24:57:91:6a:e0:38:1e:23:ea:
2b:cd:c5:dd:2e:a6:78:e9:0e:34:03:6b:c0:f7:5e:a6:b5:ac:
16:80:4c:53:b1:cb:01:83:f6:6e:94:57:17:de:36:4e:a7:63:
ab:b4:73:e8:d0:57:e6:43:11:d2:d0:43:0f:18:ad:70:29:aa:
43:d1:f7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:03:40 2025 by rpki-client