Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/mpmQjQCqvQk1IyPT7BG1uJle-Yk.roa
File: mpmQjQCqvQk1IyPT7BG1uJle-Yk.roa (raw, json)
Hash identifier: VCum6nlzIRbRWeBKQvipYnheyKk9U7AZDOeV/scItB8=
Subject key identifier: 9A:99:90:8D:00:AA:BD:09:35:23:23:D3:EC:11:B5:B8:99:5E:F9:89
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01944F31A1049F11F92032B7A01041058EDE
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/mpmQjQCqvQk1IyPT7BG1uJle-Yk.roa
Signing time: Fri 10 Jan 2025 07:50:39 +0000
ROA not before: Fri 10 Jan 2025 07:50:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 194.143.217.0/24 maxlen: 24
213.220.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Jan 2025 07:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4f:31:a1:04:9f:11:f9:20:32:b7:a0:10:41:05:8e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jan 10 07:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a99908d00aabd09352323d3ec11b5b8995ef989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:ec:f4:05:2d:9f:16:6e:49:fb:a0:e1:54:
f9:9d:0f:96:00:96:c5:a6:c6:53:df:f8:06:f1:5d:
92:61:b7:12:82:08:99:65:2e:6d:87:c3:e0:9b:0d:
98:c9:7a:d4:fb:20:2b:c3:55:3a:87:02:17:eb:16:
f8:bb:19:9a:81:69:54:7f:24:99:f6:45:a1:f5:8f:
bc:ac:88:7a:e0:6a:f5:aa:34:f3:8e:8e:aa:27:2d:
71:85:1a:b3:99:82:aa:46:d3:5b:a1:6b:b3:61:33:
94:d9:b7:bd:12:d8:98:23:a0:4e:c0:fe:6a:82:e4:
d2:91:17:45:aa:31:64:1c:85:fa:23:0e:2f:38:e9:
46:f6:06:11:36:f5:c1:51:0c:4e:09:1d:c1:72:a9:
5c:2e:71:0b:7d:3c:08:ba:d1:00:e0:29:d6:72:31:
0c:6f:e4:b3:46:9a:7d:03:ef:a7:17:b9:3d:3c:d1:
0d:ec:36:35:83:e7:e2:2a:4c:b9:b8:0d:a1:a5:6d:
2e:b1:89:34:b6:65:91:fb:a9:3a:71:ee:9d:c5:7d:
d8:b0:64:89:05:b6:4c:78:a4:ac:43:f0:90:63:ff:
ff:3c:e5:3b:eb:34:9c:ba:94:6a:33:0a:65:7d:f8:
fb:8f:35:f0:9e:c4:f1:e7:a2:3f:61:53:0d:80:02:
5b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:99:90:8D:00:AA:BD:09:35:23:23:D3:EC:11:B5:B8:99:5E:F9:89
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/mpmQjQCqvQk1IyPT7BG1uJle-Yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.217.0/24
213.220.5.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:59:d5:de:f1:69:f3:da:4b:98:b3:58:86:59:f8:48:a1:28:
ec:a9:7d:31:9b:3d:8e:71:5a:39:3f:b7:96:b9:c0:bd:a1:31:
c9:69:8b:1b:8f:bb:ac:80:d9:77:8e:58:8a:94:48:db:fb:53:
03:d0:6f:ce:de:f9:b2:64:ea:c2:77:63:80:08:52:60:e9:ab:
56:02:a7:c1:f9:e4:1a:23:87:92:0c:c8:bc:e4:72:2e:06:59:
31:39:fb:14:ef:2c:d5:cd:cc:22:e7:9c:9b:ee:52:77:4b:d9:
62:82:49:05:14:83:2b:6b:3b:26:99:69:73:b7:b2:73:db:92:
d7:4e:9c:79:f6:cf:8c:7f:50:8f:cb:ba:d8:19:49:2e:cd:d2:
43:b8:11:26:69:71:37:95:f9:e9:2e:f9:29:7b:31:90:10:e8:
91:7b:ae:92:ef:ee:24:5e:62:fd:67:b1:d5:04:34:8c:b9:70:
b1:83:e2:db:3e:65:57:ed:79:53:39:7d:2a:60:60:f0:11:36:
15:a9:99:01:29:80:42:0a:5e:8a:49:c8:fb:87:03:6d:b5:1d:
3c:88:1c:3a:12:6c:cb:5a:05:b5:25:d1:fe:c0:11:19:34:c5:
45:70:01:53:66:d3:ba:b9:71:5a:d5:b4:f2:9f:8d:a0:e1:85:
f4:30:63:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:31:31 2025 by rpki-client