Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/G8g4cA-9-cEvQOOCW6tjce4N3D8.roa
File: G8g4cA-9-cEvQOOCW6tjce4N3D8.roa (raw, json)
Hash identifier: 7iNS5qLVgRq3TPWi+tVBJc4I2wSplaEvuM4LfR3FV6E=
Subject key identifier: 1B:C8:38:70:0F:BD:F9:C1:2F:40:E3:82:5B:AB:63:71:EE:0D:DC:3F
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01942827EB2E798EE4A76DF4729811B4CB20
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/G8g4cA-9-cEvQOOCW6tjce4N3D8.roa
Signing time: Thu 02 Jan 2025 17:54:52 +0000
ROA not before: Thu 02 Jan 2025 17:54:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17941
IP address blocks: 217.147.12.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 03 Mar 2025 09:19:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:eb:2e:79:8e:e4:a7:6d:f4:72:98:11:b4:cb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 2 17:54:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bc838700fbdf9c12f40e3825bab6371ee0ddc3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:2a:54:29:00:0e:b3:6a:b0:f5:7c:3c:bf:
96:27:42:36:cc:ae:e7:44:47:3a:a3:35:88:ad:c5:
f5:1c:18:e8:3b:62:57:7d:a8:f8:aa:90:a4:c9:d6:
27:be:6a:4f:b0:d0:76:50:68:62:6d:47:18:00:a8:
9e:e6:14:33:d1:09:4f:68:2f:23:98:e2:e3:da:a3:
dc:50:aa:31:b6:2b:ab:e3:98:eb:df:ba:df:44:a5:
03:85:08:ae:2a:fe:53:e1:60:5f:5b:ac:3f:07:70:
ed:35:28:3f:8f:97:d9:be:62:3b:33:05:16:be:c5:
c2:3c:3b:5b:b9:5e:cf:22:a8:21:b6:af:9a:17:6b:
78:45:c6:57:c4:6a:63:b5:8e:66:52:84:62:d8:e9:
73:8d:24:96:39:75:e2:86:47:41:a7:0a:13:40:c8:
e7:9c:2b:b8:5c:8f:f6:ff:d8:53:0f:71:0a:ed:84:
94:4a:80:32:f4:6f:23:fe:2d:a9:e2:00:16:16:e8:
e1:a6:49:c7:a6:f0:95:1f:89:c9:54:1c:54:27:25:
25:87:00:3b:70:1b:2f:b8:7d:78:07:7f:cf:ad:de:
de:27:ad:85:b9:41:76:a5:64:fe:b6:a8:ea:d2:dd:
99:2d:1e:9b:58:17:38:14:c4:99:2b:bf:4e:ee:9a:
30:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C8:38:70:0F:BD:F9:C1:2F:40:E3:82:5B:AB:63:71:EE:0D:DC:3F
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/G8g4cA-9-cEvQOOCW6tjce4N3D8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.12.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:ab:03:10:b5:71:b8:1e:83:64:86:85:4a:38:16:1d:5a:1a:
31:66:8e:5c:0a:b8:7a:f9:97:5b:ff:14:05:fd:e8:07:28:01:
6b:d0:a1:28:7e:5c:60:69:db:a7:3d:ad:e9:70:d2:5c:ea:56:
52:ce:55:5c:05:f6:53:63:82:81:17:8f:0f:a4:f9:80:75:ca:
6a:0e:fb:9e:aa:1e:cf:66:57:bb:66:05:77:d6:d9:9c:82:0d:
31:77:ef:1f:18:39:b0:18:64:a8:80:2f:66:8d:9e:24:b0:91:
5d:d6:42:7f:bd:b3:b2:b9:67:d1:65:4f:bd:ff:09:0d:65:51:
5d:bb:f4:01:50:c1:7c:a6:54:fe:db:e0:57:bd:db:6d:71:47:
49:c2:25:2f:ed:c0:c8:9c:71:20:9f:c7:2d:de:9f:24:a2:0e:
e8:8a:aa:e6:e8:ff:28:64:8b:6d:90:83:38:5c:01:1f:c0:96:
4a:71:7b:51:e0:e9:d7:3c:62:5a:85:af:37:c5:60:59:66:a5:
31:62:47:2f:8a:bd:1f:a4:a4:2d:2b:ee:30:ea:56:55:1a:54:
eb:74:a6:9d:c5:6c:2a:ba:0b:74:27:8d:3a:eb:6e:b0:8c:8c:
8a:80:17:a2:7a:a7:85:09:8f:6e:9f:7c:9a:82:3b:64:92:bb:
59:fa:02:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:25:59 2025 by rpki-client