Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/jKyaodw8Fy2BKzoq5LhnoMmSC_g.roa
File: jKyaodw8Fy2BKzoq5LhnoMmSC_g.roa (raw, json)
Hash identifier: Sjfdjm/6+vOLvr4dcbAKQm81msrq4g/zL8c93PoKVKc=
Subject key identifier: 8C:AC:9A:A1:DC:3C:17:2D:81:2B:3A:2A:E4:B8:67:A0:C9:92:0B:F8
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 01942444F820785510FA752D9D133F8C7E11
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/jKyaodw8Fy2BKzoq5LhnoMmSC_g.roa
Signing time: Wed 01 Jan 2025 23:48:07 +0000
ROA not before: Wed 01 Jan 2025 23:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9002
IP address blocks: 31.128.32.0/22 maxlen: 24
45.130.212.0/22 maxlen: 24
83.222.20.0/23 maxlen: 24
90.156.254.0/23 maxlen: 24
91.218.142.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 05:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:f8:20:78:55:10:fa:75:2d:9d:13:3f:8c:7e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Jan 1 23:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cac9aa1dc3c172d812b3a2ae4b867a0c9920bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:13:1b:e7:f4:7b:d3:b3:41:40:8c:0b:96:79:
57:ad:43:29:a0:06:c1:5d:3d:79:35:fd:86:09:67:
d5:b8:6c:5f:a2:5c:93:60:05:8f:3a:f4:24:6a:8d:
6d:73:4d:f0:ce:1f:6b:98:f8:ed:aa:a8:9a:d9:e2:
88:28:f8:41:8f:61:6c:50:46:60:c9:bf:6e:da:6a:
24:e7:db:43:d7:87:e7:65:03:05:1d:e8:cd:ad:77:
75:c2:1f:ff:e2:58:46:e4:b0:ae:d9:42:28:00:8e:
11:27:33:8b:7e:21:e6:4d:b8:30:0c:41:dd:f0:fc:
a5:b3:11:83:fd:68:8d:e4:e9:ca:bf:04:92:28:33:
8a:26:47:47:fb:0b:72:71:a0:7a:86:da:2b:71:ff:
ae:71:57:a4:aa:ff:12:1f:c4:03:ac:98:bd:ef:db:
70:62:45:e2:aa:60:5b:f4:56:8a:c2:e4:a5:e9:57:
d9:14:de:e8:4c:48:2f:d0:5a:de:53:4b:8e:0c:ea:
4d:c4:88:e6:e7:67:90:d8:c6:67:88:b3:92:43:06:
b9:e9:e1:ce:e5:af:05:de:2b:ee:cc:61:fc:ba:94:
46:60:be:fc:cf:39:7e:ce:8c:e1:74:be:e9:f0:f1:
22:75:fe:8a:b4:5c:41:fc:9c:05:68:0d:b0:8c:19:
a5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AC:9A:A1:DC:3C:17:2D:81:2B:3A:2A:E4:B8:67:A0:C9:92:0B:F8
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/jKyaodw8Fy2BKzoq5LhnoMmSC_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.32.0/22
45.130.212.0/22
83.222.20.0/23
90.156.254.0/23
91.218.142.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:6e:35:1a:ac:0b:28:93:7e:19:51:c2:49:74:f4:41:39:9b:
7a:d1:a0:ff:59:04:84:7d:42:b1:bf:a2:6b:e3:bd:58:55:66:
c0:bf:52:df:b1:86:fe:bf:57:25:a9:e7:e2:48:92:ec:af:3f:
26:c9:b7:8b:86:fb:cf:89:9f:56:d4:e3:25:74:1c:10:db:ea:
32:e1:f0:49:51:e8:d8:a2:b2:d8:a3:9d:de:9e:3d:98:6b:67:
06:54:24:f8:64:f0:ff:34:19:61:8b:87:1f:77:5d:2e:2f:e3:
d5:41:c0:d4:f3:a8:ca:11:2c:2f:74:a3:9c:df:92:c8:0f:21:
43:d5:4a:00:30:3a:7a:aa:f3:d2:cc:19:b6:bd:e4:cf:8b:3b:
bc:69:da:3c:c8:45:ae:90:c5:be:16:0d:eb:20:c8:f3:ba:61:
2a:2a:3d:d8:d1:0f:77:47:51:ff:e9:6c:bf:4e:66:28:c4:2d:
a4:5d:e2:ed:d2:f8:33:5e:8d:19:b0:dc:c9:b9:d4:fb:a1:5e:
5d:44:72:57:09:54:91:47:e6:91:82:ca:55:45:5c:b5:64:c3:
77:78:d2:fb:85:74:76:68:de:fb:ec:aa:f0:82:24:49:40:81:
e6:0c:90:05:49:07:d6:5d:b3:9c:b4:10:bd:5f:5e:c2:c9:8d:
a9:33:7a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:26:27 2025 by rpki-client