Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/9AMoyTK7rvlCh7Un7xB7Vzsy5Bw.roa
File: 9AMoyTK7rvlCh7Un7xB7Vzsy5Bw.roa (raw, json)
Hash identifier: rsRYgp/k7frJnWXOjagSw/eFPqJZ7fQ6YOreP/+HMOQ=
Subject key identifier: F4:03:28:C9:32:BB:AE:F9:42:87:B5:27:EF:10:7B:57:3B:32:E4:1C
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018F40019676902687D77956C98956ACC842
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/9AMoyTK7rvlCh7Un7xB7Vzsy5Bw.roa
Signing time: Fri 03 May 2024 19:49:56 +0000
ROA not before: Fri 03 May 2024 19:49:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 192.144.33.0/24 maxlen: 24
193.38.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 May 2024 18:22:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:40:01:96:76:90:26:87:d7:79:56:c9:89:56:ac:c8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: May 3 19:49:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f40328c932bbaef94287b527ef107b573b32e41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ec:02:b7:36:e3:c0:f0:56:50:5d:df:4f:3c:
fa:d3:24:c9:0e:24:2f:4e:6a:65:f4:8d:f9:ff:b1:
a4:ab:0f:ba:b6:f4:07:38:77:47:61:0f:f1:d6:8d:
55:c8:18:4d:51:df:ea:6d:2b:9f:6e:88:41:31:41:
95:95:15:8e:b0:6e:f8:2c:85:6e:f3:b8:b3:52:c9:
27:8a:c2:0f:de:8d:8f:16:7a:1c:4a:ce:d0:37:09:
3c:7b:a0:6e:57:c9:9c:cf:cd:ce:d6:c4:5e:b2:2e:
06:06:d7:94:93:1d:66:ff:da:b7:5f:ac:00:49:b5:
22:92:4c:ae:fb:3f:71:31:94:f9:51:af:3f:13:72:
36:f6:22:21:80:ab:27:f8:dc:db:d8:3e:0f:69:fb:
ba:5d:80:6c:92:69:88:da:07:5d:6e:07:90:77:b2:
00:62:1e:62:c8:f8:66:3b:a4:99:22:aa:ef:7d:f6:
a2:46:3c:9d:b7:53:b5:81:c7:1a:2c:91:c8:20:69:
25:60:69:2a:27:68:f8:51:be:f4:df:21:3a:b8:2b:
08:aa:bc:f7:97:df:da:82:8d:57:94:13:34:64:a7:
b5:b6:d1:83:80:b8:c1:69:36:c4:1a:a5:af:b6:69:
84:9d:21:1f:41:f2:12:24:26:11:ca:15:45:3a:d5:
0f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:03:28:C9:32:BB:AE:F9:42:87:B5:27:EF:10:7B:57:3B:32:E4:1C
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/9AMoyTK7rvlCh7Un7xB7Vzsy5Bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.33.0/24
193.38.249.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:2d:d9:d1:e6:34:3d:23:a1:ea:08:c6:f2:a6:f2:4d:54:d5:
a3:5a:61:4c:e9:dc:31:58:77:4e:95:e4:dc:fc:ec:d7:72:ae:
89:d7:34:ca:f1:d5:ed:d4:b7:84:6a:df:48:89:3c:cd:83:9a:
b7:1c:07:40:39:b5:02:9d:87:a1:53:f4:bd:e3:0e:5f:0a:0c:
9a:da:ee:d0:83:72:44:80:53:ae:f0:63:79:64:4d:1c:43:fa:
60:ce:b5:47:db:0e:10:1f:db:34:2b:08:f5:fc:79:22:f2:a8:
d2:98:1e:1e:56:a4:82:fa:b2:5b:0a:4e:b4:92:8a:8a:9a:d1:
45:d6:b3:4e:70:ca:66:43:df:e7:c2:a7:2d:47:44:5e:84:4b:
4a:0f:48:90:e7:22:49:d6:9e:df:60:5f:6b:17:1f:61:cd:5e:
00:86:34:c5:69:a3:cd:d1:6d:be:e4:54:ef:a7:21:84:2d:35:
59:47:7a:72:3b:7a:90:c4:f4:d4:0f:c4:bc:aa:81:6d:6c:43:
d7:21:99:8c:5b:7f:20:c7:da:66:4c:f1:4a:ba:d8:f9:d8:53:
72:2e:72:fb:01:6e:08:cf:3b:0a:1f:fc:a6:18:f9:8f:41:da:
6f:c2:a6:7e:de:40:df:e3:91:7a:5d:b8:ae:39:e2:b8:52:61:
b7:52:d0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:09 2025 by rpki-client