Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/igrfU-DWxJNlcV7feO6VlTg5SbU.roa
File: igrfU-DWxJNlcV7feO6VlTg5SbU.roa (raw, json)
Hash identifier: ZyTR++taOXum6negqxlEOiVJyPmtWUynLAjdVAJ3s+k=
Subject key identifier: 8A:0A:DF:53:E0:D6:C4:93:65:71:5E:DF:78:EE:95:95:38:39:49:B5
Certificate issuer: /CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Certificate serial: 0194252208922D5B87AA3B63E1FB4D3FD80B
Authority key identifier: 81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/igrfU-DWxJNlcV7feO6VlTg5SbU.roa
Signing time: Thu 02 Jan 2025 03:49:34 +0000
ROA not before: Thu 02 Jan 2025 03:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1103
IP address blocks: 134.221.0.0/16 maxlen: 16
192.43.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 10:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:08:92:2d:5b:87:aa:3b:63:e1:fb:4d:3f:d8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Validity
Not Before: Jan 2 03:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a0adf53e0d6c49365715edf78ee9595383949b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:42:4b:75:88:cb:e6:92:96:b3:02:11:14:1d:
7b:be:a2:0a:95:26:89:43:fd:41:74:ac:21:a6:66:
6e:34:db:6e:5d:9e:3f:0f:7e:9e:18:cb:df:c9:6d:
8c:96:84:7b:61:21:a6:0a:54:51:5f:ae:9f:c9:a1:
38:4a:03:11:f9:cf:fc:c0:53:0c:b5:94:7f:59:32:
8f:6b:a0:eb:f5:37:29:90:c4:32:2b:2d:b1:5c:86:
a1:1d:59:f1:31:7d:d0:ec:ce:7b:3b:dd:7d:80:8f:
cd:08:61:12:4b:36:29:cc:22:38:f7:c9:26:62:d6:
d1:00:8d:85:02:a5:4d:c5:97:09:d6:13:12:88:3c:
1d:e7:e5:db:2b:8a:46:8e:44:ea:08:75:54:04:42:
54:15:07:a7:10:0e:15:9b:5e:44:5f:d4:0a:24:dc:
77:d8:fb:b2:0c:fc:a1:4b:22:95:c3:7b:51:bf:1a:
0f:72:55:e6:0f:17:bf:89:41:bf:c7:35:8a:59:3b:
1b:e1:e0:1b:87:61:37:b1:3b:55:8f:88:92:53:77:
a2:46:30:f7:eb:7d:be:71:cb:00:c4:04:42:cc:38:
fb:51:b4:d1:01:33:4b:b0:44:6b:1b:2b:9a:13:e6:
9c:a8:31:30:e3:c9:76:b7:c5:b6:91:c0:43:51:79:
94:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0A:DF:53:E0:D6:C4:93:65:71:5E:DF:78:EE:95:95:38:39:49:B5
X509v3 Authority Key Identifier:
keyid:81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/igrfU-DWxJNlcV7feO6VlTg5SbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.221.0.0/16
192.43.212.0/24
Signature Algorithm: sha256WithRSAEncryption
38:5a:24:a8:55:92:08:f9:fc:f0:14:b3:35:3b:32:34:86:78:
c5:32:c8:13:7d:0e:e3:39:ab:19:5b:1c:b4:a1:54:63:87:30:
0f:33:7b:a3:4b:a7:dd:3b:d4:7a:9d:8c:e0:5d:cf:4f:69:21:
56:14:23:ea:44:9c:d2:f3:a8:72:71:ee:37:18:82:72:ff:09:
ed:5c:fd:0e:7c:ec:65:44:f7:05:98:e6:b1:4b:0a:b0:e9:b2:
19:3d:4d:ae:b7:2c:0e:42:a1:f6:5f:7a:6c:26:a4:aa:8f:5d:
93:bd:62:4b:ba:7a:ea:08:17:bf:12:bb:bc:94:b2:98:a1:5c:
85:e7:52:06:95:e4:a1:f0:2c:c0:44:09:0a:4f:88:a5:c8:85:
2f:cb:77:ec:b4:f0:ce:de:14:58:6d:e5:75:8f:4f:60:cc:73:
9f:6a:1f:e4:25:80:6d:98:9a:e1:a1:d6:c5:b1:7c:bf:2a:9e:
8b:f6:82:50:9a:89:43:7c:46:1e:8b:4d:1a:85:17:e3:17:ac:
b1:c2:d4:70:ef:ae:83:af:38:65:a8:ad:dd:45:9b:49:dc:13:
39:cd:3f:5f:e7:fd:95:be:be:70:fb:ea:8d:01:f9:9b:26:8d:
e8:20:58:fa:c1:53:29:d0:90:42:65:67:8b:57:df:57:b1:ec:
9e:b3:f2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:36:43 2025 by rpki-client