Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/MjFT5p0TnD82ceDoINaHPbEuYbQ.roa
File: MjFT5p0TnD82ceDoINaHPbEuYbQ.roa (raw, json)
Hash identifier: e6MyCBhy1NUbFw6CEO0GErq1H/eQI+MvnaehmtZJLFA=
Subject key identifier: 32:31:53:E6:9D:13:9C:3F:36:71:E0:E8:20:D6:87:3D:B1:2E:61:B4
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0194282424A145FB80AD75B7374480B18827
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/MjFT5p0TnD82ceDoINaHPbEuYbQ.roa
Signing time: Thu 02 Jan 2025 17:50:44 +0000
ROA not before: Thu 02 Jan 2025 17:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49699
IP address blocks: 87.246.3.0/24 maxlen: 24
87.246.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 09:28:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:24:a1:45:fb:80:ad:75:b7:37:44:80:b1:88:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 2 17:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=323153e69d139c3f3671e0e820d6873db12e61b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:91:9f:4f:f5:cb:d0:00:27:66:50:5c:a5:61:
a1:00:20:80:c8:68:15:85:25:1c:0e:99:67:26:a7:
ba:40:66:50:c6:2f:98:b1:ab:81:e4:19:35:a2:86:
e9:ce:d5:ab:b3:fb:6b:21:a8:3b:82:e4:40:a8:d1:
51:c3:ab:3e:9b:26:52:5d:f8:c2:75:b5:d5:bf:12:
41:da:51:20:87:01:96:dd:ef:54:0a:5a:ce:b4:a0:
0b:a5:9a:8d:39:cb:09:c3:f5:cf:65:ed:fb:08:17:
f6:fc:e8:d8:c9:b7:43:5e:a2:53:3e:36:ac:6e:f9:
4d:89:f7:ad:e3:4c:eb:84:a7:bb:36:16:39:36:56:
b4:90:a2:4b:04:87:1e:87:1b:15:05:8e:03:37:6c:
dc:ec:35:aa:98:8f:d5:78:77:3e:1e:69:e4:d9:6d:
bd:a6:9b:90:7b:8b:aa:6b:15:91:0f:34:55:8b:3c:
b0:d6:cc:df:55:09:11:03:dd:da:57:30:a6:de:cf:
3c:1a:20:8f:18:9c:f3:10:91:03:1d:f3:43:eb:39:
a2:0d:b6:2b:93:d2:f6:be:11:0d:16:80:ce:2d:8f:
3b:06:72:bf:68:33:a5:a4:56:eb:5d:ff:07:7d:6e:
8d:e3:cb:f1:83:18:ff:a3:5e:ff:68:79:79:52:67:
e1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:31:53:E6:9D:13:9C:3F:36:71:E0:E8:20:D6:87:3D:B1:2E:61:B4
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/MjFT5p0TnD82ceDoINaHPbEuYbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.3.0/24
87.246.24.0/24
Signature Algorithm: sha256WithRSAEncryption
48:8d:e5:c9:53:f4:f8:75:21:a5:b4:8a:05:d7:bd:9c:98:65:
90:41:8d:cb:d9:7b:0c:79:55:db:76:dc:5c:74:90:f0:fa:e0:
3b:ec:c0:c9:19:be:c5:9f:3c:d9:8b:a3:b0:e0:a2:25:14:44:
f3:24:f8:eb:68:86:dd:2e:af:6b:da:d6:09:a0:aa:9c:46:23:
2a:cb:a8:97:3c:07:da:32:3c:cb:01:98:c1:de:2c:d7:f4:ff:
35:04:df:48:c3:dd:45:86:69:ee:dc:b3:28:0c:50:8e:5a:08:
9a:5b:e1:40:2d:78:75:f6:d3:7c:ad:ea:01:6a:a9:77:c0:75:
1c:e1:da:11:e4:2d:eb:5d:c2:cf:c0:fb:32:bc:b8:a5:91:1d:
0f:bd:19:5a:d8:fd:11:b3:ca:b3:36:51:82:d1:56:39:90:37:
2e:9e:86:d0:5c:12:45:37:ec:a8:cb:05:d6:7b:f1:52:4b:44:
41:bf:80:77:05:2f:af:18:7a:1a:35:1c:08:33:58:ac:37:8b:
76:84:b2:37:c9:07:f8:32:4f:1e:65:cf:27:87:8a:a6:a6:39:
11:f5:9b:fb:22:07:4b:55:16:7d:8e:56:86:94:2b:a7:df:3e:
ce:6e:a1:a0:ef:11:ff:29:8e:98:81:08:b1:91:46:8f:9a:61:
72:af:ce:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:38:00 2025 by rpki-client