Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/AIXIPHl5FeeASoYCgxJWY_xZScQ.roa
File: AIXIPHl5FeeASoYCgxJWY_xZScQ.roa (raw, json)
Hash identifier: PXaNqK1GJwpntK1efAIsjK1NF9MM7oh8N98IP5/Eb4U=
Subject key identifier: 00:85:C8:3C:79:79:15:E7:80:4A:86:02:83:12:56:63:FC:59:49:C4
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A3471F74C526F7AD39748E7501A77
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/AIXIPHl5FeeASoYCgxJWY_xZScQ.roa
Signing time: Wed 01 Jan 2025 19:49:10 +0000
ROA not before: Wed 01 Jan 2025 19:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 128.0.118.0/24 maxlen: 32
128.0.119.0/24 maxlen: 32
Validation: Failed, certificate revoked on Wed 15 Jan 2025 09:57:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:34:71:f7:4c:52:6f:7a:d3:97:48:e7:50:1a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0085c83c797915e7804a860283125663fc5949c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ff:ba:47:48:ac:3a:65:b1:66:87:28:cc:d4:
04:3f:bd:b8:4d:45:27:ca:db:23:42:76:4c:94:32:
75:ac:b5:cc:d0:9b:53:f2:75:27:15:8c:ee:ce:84:
11:12:8b:7a:29:49:08:7e:78:0a:e2:44:cc:19:ed:
5a:84:45:bc:bb:90:c1:ea:65:30:69:06:70:b3:07:
4a:4a:20:80:34:d4:9a:99:f1:66:d0:1c:f2:b5:76:
80:c3:b7:08:b7:2f:f2:de:52:e2:b3:5c:ff:c5:73:
bc:df:9e:8f:8e:d1:b9:1e:1d:fb:73:db:88:0d:24:
df:f1:7c:48:72:29:3c:54:eb:94:da:0c:ee:46:da:
97:d9:6d:1c:4d:0d:5a:bf:4e:92:a2:69:8b:5b:8a:
e3:44:51:e7:ae:12:d4:63:9c:fc:3a:88:f3:59:ca:
93:7a:45:f8:b6:54:fe:a4:8c:90:8d:0e:0d:1e:bf:
4a:41:2b:4b:76:5b:24:d8:33:75:54:e5:5f:3d:0b:
a2:9b:e4:8f:d5:70:21:91:2a:26:91:b7:ed:e7:d8:
1e:39:d5:22:ec:9e:cf:88:4b:0e:a1:ba:e2:ff:d6:
96:a8:60:28:d9:44:2b:ac:87:53:99:10:3a:0e:33:
85:4f:74:1f:aa:f3:0b:75:b9:96:c1:32:d3:9e:93:
47:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:85:C8:3C:79:79:15:E7:80:4A:86:02:83:12:56:63:FC:59:49:C4
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/AIXIPHl5FeeASoYCgxJWY_xZScQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.118.0/23
Signature Algorithm: sha256WithRSAEncryption
63:c8:fa:3d:65:a5:5c:59:e4:b8:f6:02:a6:96:dd:72:ef:da:
22:7f:4e:f5:10:d8:03:8c:11:5f:4f:a7:95:65:10:5c:fd:4a:
e0:12:96:a1:b7:b0:de:7f:db:62:aa:0e:88:04:c9:08:e4:ac:
f2:ef:07:c3:57:6e:e4:81:58:7d:e0:f2:f2:06:7e:53:97:60:
02:f5:73:4e:92:c2:a2:a2:56:03:9d:20:f0:75:51:22:55:44:
d8:85:a7:19:c3:35:c6:ab:09:e2:ec:97:63:1b:22:be:0e:0e:
ab:13:04:2a:b9:74:2e:b0:6d:82:91:74:ab:46:76:41:28:ce:
d7:3c:6b:99:a9:26:e9:92:4f:37:d3:46:78:b4:84:a7:28:dd:
82:21:0d:91:69:b7:f7:f8:4c:e6:a0:f0:34:55:9c:9b:55:53:
71:88:59:66:f0:08:18:d9:6b:13:f3:8a:55:d9:c9:c7:5f:ab:
f6:b5:10:db:8e:91:35:de:c5:39:96:f5:e2:56:8c:0f:b3:30:
b0:bc:45:29:4e:65:d5:7f:0c:f0:17:8b:87:ac:2c:54:a6:ca:
6c:9e:98:55:7e:08:1c:e9:2b:59:83:b7:80:71:e1:5e:e7:43:
8e:36:ae:be:95:7b:f3:c6:6f:7e:f7:ac:fe:e6:db:38:29:ad:
36:f6:15:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjajRx90xSb3rTl0jnUBp3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjUwMTAxMTk0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDg1YzgzYzc5NzkxNWU3ODA0YTg2MDI4MzEyNTY2M2ZjNTk0OWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP+6R0isOmWxZocozNQEP724TUUn
ytsjQnZMlDJ1rLXM0JtT8nUnFYzuzoQREot6KUkIfngK4kTMGe1ahEW8u5DB6mUw
aQZwswdKSiCANNSamfFm0BzytXaAw7cIty/y3lLis1z/xXO8356PjtG5Hh37c9uI
DSTf8XxIcik8VOuU2gzuRtqX2W0cTQ1av06SommLW4rjRFHnrhLUY5z8OojzWcqT
ekX4tlT+pIyQjQ4NHr9KQStLdlsk2DN1VOVfPQuim+SP1XAhkSomkbft59geOdUi
7J7PiEsOobri/9aWqGAo2UQrrIdTmRA6DjOFT3QfqvMLdbmWwTLTnpNHMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFACFyDx5eRXngEqGAoMSVmP8WUnEMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvQUlYSVBIbDVGZWVBU29ZQ2d4SldZX3haU2NRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgAB2MA0G
CSqGSIb3DQEBCwUAA4IBAQBjyPo9ZaVcWeS49gKmlt1y79oif071ENgDjBFfT6eV
ZRBc/UrgEpaht7Def9tiqg6IBMkI5Kzy7wfDV27kgVh94PLyBn5Tl2AC9XNOksKi
olYDnSDwdVEiVUTYhacZwzXGqwni7JdjGyK+Dg6rEwQquXQusG2CkXSrRnZBKM7X
PGuZqSbpkk8300Z4tISnKN2CIQ2Rabf3+EzmoPA0VZybVVNxiFlm8AgY2WsT84pV
2cnHX6v2tRDbjpE13sU5lvXiVowPszCwvEUpTmXVfwzwF4uHrCxUpspsnphVfggc
6StZg7eAceFe50OONq6+lXvzxm9+96z+5ts4Ka029hXL
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:20:57 2025 by rpki-client