Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6VWILCc1b2zwi3uYddZPYm2GdP4.roa
File: 6VWILCc1b2zwi3uYddZPYm2GdP4.roa (raw, json)
Hash identifier: 67tXeeNrCHsdPanKJcVhG2KNOcsEKJzS/Ezn7nN0Za0=
Subject key identifier: E9:55:88:2C:27:35:6F:6C:F0:8B:7B:98:75:D6:4F:62:6D:86:74:FE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D0BBB9D59626BC9DF6DD597E91EB8B638
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6VWILCc1b2zwi3uYddZPYm2GdP4.roa
Signing time: Mon 15 Jan 2024 06:07:41 +0000
ROA not before: Mon 15 Jan 2024 06:07:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216289
IP address blocks: 84.54.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 07:13:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0b:bb:9d:59:62:6b:c9:df:6d:d5:97:e9:1e:b8:b6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 15 06:07:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e955882c27356f6cf08b7b9875d64f626d8674fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:3a:ce:7a:79:b3:14:54:04:4f:79:23:34:
c8:38:b6:07:b6:8d:58:69:87:c7:ec:47:96:91:f4:
8b:e8:77:a2:35:8d:e5:e0:1a:67:6a:a9:ee:7c:b8:
e5:9f:e0:e2:e8:d6:7b:e6:f7:04:a0:35:af:4c:7e:
4c:bb:de:83:bc:f2:dd:fb:b9:b6:2c:5c:db:9c:dc:
54:9d:f6:b2:ae:8f:b6:50:0a:99:ef:18:36:f4:ff:
d8:28:06:06:ed:1d:87:98:96:66:80:20:95:ad:de:
de:be:01:6a:f8:47:2e:f6:51:e5:62:93:b1:15:81:
19:48:0e:bf:f5:ba:b2:07:db:7d:66:a9:ac:7d:a7:
ca:9f:39:42:7d:5a:c9:48:3d:02:6d:d3:b8:13:7a:
e4:5b:10:e5:1f:a2:4f:e9:72:ee:ac:79:63:a1:32:
30:db:9d:23:76:af:3c:31:e9:62:09:60:96:44:b2:
0e:bf:d0:6f:6f:1b:11:b8:02:41:34:aa:c1:ff:4a:
37:68:1f:6c:80:35:83:5a:ad:50:f7:ae:00:04:7a:
93:69:ce:e6:42:af:15:87:71:d3:6e:9a:40:e4:ba:
09:cb:51:ff:07:08:56:52:59:9d:fa:49:85:44:ee:
a6:e6:30:bb:8d:64:e5:39:1d:0f:02:8f:c3:6e:c6:
cb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:55:88:2C:27:35:6F:6C:F0:8B:7B:98:75:D6:4F:62:6D:86:74:FE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6VWILCc1b2zwi3uYddZPYm2GdP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.49.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:32:bc:9d:5f:bc:8c:f7:b6:7b:b9:aa:c3:89:54:38:5b:5d:
07:14:81:03:ee:21:c0:d0:0d:84:33:50:cb:84:64:d7:1e:01:
fb:db:18:83:2b:b4:4f:f7:e2:cc:32:b3:61:31:97:70:35:55:
42:df:e9:ef:ae:f1:25:ae:5a:b3:e1:3d:df:d9:24:09:6a:5f:
36:6b:64:58:68:02:f5:66:26:09:41:47:9e:55:38:04:36:70:
43:c5:b2:76:26:7e:f2:b5:af:dc:9f:4d:5c:36:86:a4:2a:68:
76:96:e0:98:7a:06:ba:92:8b:88:9a:f0:12:69:33:cd:46:5c:
46:2c:4a:5d:e5:8a:14:4a:c4:60:ba:fc:80:bd:cc:5b:2a:bb:
bb:60:19:d8:3a:54:12:f5:0b:11:23:75:ca:71:2a:5f:27:6a:
2d:b2:e5:a2:e4:93:84:ea:1e:69:1c:4a:97:a3:51:fc:85:70:
64:70:7c:aa:b2:e1:59:36:7b:c1:c6:10:9a:cc:50:03:51:08:
b0:60:78:b5:02:7d:46:e7:d8:1f:f8:db:33:fc:37:f2:b9:30:
36:66:e5:28:ee:e9:f1:8c:58:8c:f5:97:fd:98:51:0e:a2:3f:
18:ce:f4:3f:c0:cb:7d:73:d8:88:27:97:5f:e8:26:00:5b:9c:
7a:8e:1c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:37:53 2025 by rpki-client