Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/kcAlQ7uHMceQyJotVv9nR81dLTI.roa
File: kcAlQ7uHMceQyJotVv9nR81dLTI.roa (raw, json)
Hash identifier: /uJ2+3mpdELrZ02rPp1L0ybbZLI1BsOYokjhpaejQB0=
Subject key identifier: 91:C0:25:43:BB:87:31:C7:90:C8:9A:2D:56:FF:67:47:CD:5D:2D:32
Certificate issuer: /CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Certificate serial: 0190E9F3EAC2C3F7AD437F7F31ADA03A6F0C
Authority key identifier: CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/kcAlQ7uHMceQyJotVv9nR81dLTI.roa
Signing time: Thu 25 Jul 2024 12:53:14 +0000
ROA not before: Thu 25 Jul 2024 12:53:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34877
IP address blocks: 194.169.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:47:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e9:f3:ea:c2:c3:f7:ad:43:7f:7f:31:ad:a0:3a:6f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Validity
Not Before: Jul 25 12:53:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91c02543bb8731c790c89a2d56ff6747cd5d2d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:06:08:18:1f:ce:0f:12:a1:2f:87:75:b7:2e:
83:bd:29:df:0e:4d:32:89:25:32:4f:3e:98:7f:84:
d7:3d:da:76:b0:89:3c:0a:28:18:5b:01:5d:50:0f:
c9:99:5c:4c:03:45:86:eb:d6:5d:66:10:c9:70:cd:
96:23:3f:0d:af:66:fe:05:fb:73:08:6c:80:dc:a2:
e0:b0:f2:d4:d0:a3:8d:9f:0e:96:98:2e:ae:19:ad:
d4:c5:7d:1d:a6:be:bd:f0:fb:85:cb:af:93:b8:f2:
1d:6e:69:6d:c1:89:48:d2:3f:4c:6f:d6:30:5c:ee:
9c:c6:fb:b6:87:3b:8f:3f:59:66:05:dc:95:1f:42:
66:aa:bb:fa:ac:72:6c:5f:0e:59:1c:54:96:6c:c4:
48:aa:42:c5:a0:58:2b:07:da:e4:4c:dd:e9:7b:d5:
ef:d5:bd:ed:8e:16:4c:cc:00:fe:40:68:aa:47:05:
2c:9e:da:43:31:01:96:1e:2e:9b:e8:f3:18:4d:aa:
32:80:7c:90:41:85:e4:26:13:37:41:27:5a:cb:e9:
bd:8a:14:8a:63:cf:32:af:9c:8a:84:79:b5:a7:12:
36:15:42:e8:ff:2f:63:5e:f7:22:73:dc:f3:3d:ec:
37:97:5d:8f:06:fc:be:18:c4:a2:18:c9:b5:d5:f4:
64:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C0:25:43:BB:87:31:C7:90:C8:9A:2D:56:FF:67:47:CD:5D:2D:32
X509v3 Authority Key Identifier:
keyid:CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/kcAlQ7uHMceQyJotVv9nR81dLTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.210.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:df:c5:b8:b8:9d:17:02:17:e2:9c:5f:76:7c:08:08:db:c9:
b1:d1:bc:4a:82:82:d4:62:17:c8:a8:73:43:a7:dd:b9:1c:7d:
6e:fe:68:ce:93:89:90:e7:fa:df:b3:98:e0:7b:34:fe:b4:9f:
af:9c:7d:b3:ad:be:35:ca:7a:4b:df:ef:7b:c0:d3:dd:c0:dd:
58:fb:b5:a6:a7:8d:46:56:c1:53:88:21:24:7b:5e:cf:2c:39:
17:a3:4d:fa:1e:51:69:07:19:3b:ed:42:45:57:22:48:c1:0b:
7b:98:b8:5e:6a:40:09:bb:a5:f5:7b:9f:6c:92:6e:76:78:32:
5e:d1:c0:46:45:75:d3:e4:47:57:dd:40:9a:d1:31:90:65:5e:
59:d8:65:bc:06:46:89:5a:15:61:b6:e6:73:61:b3:a5:e1:9f:
c2:a1:71:9d:8d:29:68:65:b4:5e:11:8c:0e:dc:32:26:ed:af:
6c:af:24:f8:dd:ae:96:75:11:3c:48:1e:b5:40:44:31:0f:0a:
50:22:5e:94:81:24:42:bd:9b:d2:dd:84:66:e7:f4:4f:cb:39:
80:69:9e:40:df:67:88:d7:41:c0:d2:f2:a6:c1:74:85:25:a8:
c8:79:91:35:41:b5:38:d0:c2:b0:71:4a:14:58:06:c7:d4:52:
e4:47:9c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:11:11 2025 by rpki-client