Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/xr9PBj6HBobNY-aalYiH4Clpn9c.roa
File: xr9PBj6HBobNY-aalYiH4Clpn9c.roa (raw, json)
Hash identifier: d/1myOFBSW74Ysk9FkJHvtUk2CcpXJFloHMjawtJDKA=
Subject key identifier: C6:BF:4F:06:3E:87:06:86:CD:63:E6:9A:95:88:87:E0:29:69:9F:D7
Certificate issuer: /CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Certificate serial: 019491CF8F5F8070AF17BFFDFAA8E15F7A58
Authority key identifier: 4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/xr9PBj6HBobNY-aalYiH4Clpn9c.roa
Signing time: Thu 23 Jan 2025 06:18:06 +0000
ROA not before: Thu 23 Jan 2025 06:18:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212127
IP address blocks: 109.95.124.0/22 maxlen: 28
Validation: Failed, certificate revoked on Tue 01 Apr 2025 21:15:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:91:cf:8f:5f:80:70:af:17:bf:fd:fa:a8:e1:5f:7a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Validity
Not Before: Jan 23 06:18:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6bf4f063e870686cd63e69a958887e029699fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5d:64:2d:e6:85:ea:01:c2:cc:f0:7a:82:ba:
f2:ea:fd:a0:b8:b3:1b:ed:a2:d1:2a:f7:1b:33:d5:
22:59:52:a2:cd:b7:46:1b:2b:7f:6e:8a:12:e5:90:
0e:64:82:cf:a2:bd:98:f5:d3:d1:64:e6:9e:c7:94:
c0:31:d3:37:5e:85:64:ca:c8:d6:96:42:84:0c:fe:
9b:c3:f9:36:dd:11:fe:53:31:41:84:9c:ba:ca:4b:
91:84:64:88:c9:18:f6:38:f4:ea:cd:6d:92:4d:b1:
c1:72:a3:32:5b:a4:d8:8a:51:75:2a:ae:1f:b7:97:
9f:ce:37:ae:9b:9a:79:1e:04:05:49:7e:0c:3d:f5:
00:4b:92:55:cf:43:28:0c:02:65:e4:0c:77:3b:3c:
eb:a6:8e:67:da:ad:ca:0f:12:92:f8:de:ee:55:31:
d4:d9:f4:6f:bc:1b:d6:a3:ad:87:43:cf:7c:e9:56:
41:66:cf:6e:b2:96:1d:0e:74:62:cc:31:53:30:2c:
74:c6:49:84:ae:5b:92:3c:a3:1d:3c:e1:ef:38:8c:
c4:e2:51:97:2e:eb:29:98:97:f8:e7:46:e1:9e:31:
3e:2d:74:ce:96:5f:08:89:f4:85:e9:33:83:8a:02:
77:b7:6e:10:86:dd:4c:05:9e:eb:59:6f:e7:25:4d:
6e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BF:4F:06:3E:87:06:86:CD:63:E6:9A:95:88:87:E0:29:69:9F:D7
X509v3 Authority Key Identifier:
keyid:4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/xr9PBj6HBobNY-aalYiH4Clpn9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.124.0/22
Signature Algorithm: sha256WithRSAEncryption
37:77:2b:0d:8c:21:06:42:20:d5:15:c3:1f:8c:88:72:dd:dc:
34:37:1f:27:0d:1d:47:5a:12:8b:b2:a8:63:e4:3f:83:8d:da:
11:d4:fa:6f:53:7b:d8:c4:80:55:91:7c:52:bf:20:aa:a5:c6:
c2:cb:52:d9:1d:67:fc:83:d6:0e:27:ba:9e:16:0f:16:44:53:
0e:68:da:43:c4:5d:b0:5c:f7:55:12:ff:bf:1a:a9:9c:74:96:
14:a1:59:56:e1:33:40:1f:f1:cd:f2:0b:d7:1a:b1:82:6c:bf:
7f:a7:d2:86:18:aa:7f:0d:9f:7c:49:9e:e4:49:9e:76:8b:eb:
f7:43:a1:52:44:04:f7:dd:9f:99:f5:e0:7f:7e:85:49:d4:75:
ae:02:9e:c7:66:6a:b8:79:71:c4:75:dd:c9:26:1c:c9:b8:9f:
c4:a1:e7:50:e5:78:40:fb:2c:07:39:47:3b:df:15:1a:b1:e4:
21:84:c0:0c:78:f4:1f:05:4d:a5:6f:91:87:a1:f9:64:07:eb:
ab:f4:a3:70:67:75:50:08:d8:3b:ab:a9:ae:f9:67:e6:6e:12:
e7:c9:ca:60:9d:8f:59:59:73:f0:6c:c4:4b:5a:e6:40:21:94:
11:43:25:d0:f4:5b:6e:be:65:cd:42:d2:6e:84:74:df:4d:fe:
90:4a:d7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:48 2025 by rpki-client