Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jfB0dX940ryV7cFpRZNDoP4VroA.roa
File: jfB0dX940ryV7cFpRZNDoP4VroA.roa (raw, json)
Hash identifier: UKw8BAmzocVmj0xKszNLiLYFMEaAZamT2nj8hvLCh/0=
Subject key identifier: 8D:F0:74:75:7F:78:D2:BC:95:ED:C1:69:45:93:43:A0:FE:15:AE:80
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195A37EC8F09CFEA6ACD5F98AD9FFB33C99
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jfB0dX940ryV7cFpRZNDoP4VroA.roa
Signing time: Mon 17 Mar 2025 09:45:50 +0000
ROA not before: Mon 17 Mar 2025 09:45:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201364
IP address blocks: 94.156.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 06:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a3:7e:c8:f0:9c:fe:a6:ac:d5:f9:8a:d9:ff:b3:3c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 17 09:45:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8df074757f78d2bc95edc169459343a0fe15ae80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:2e:e2:d4:b5:e4:34:62:4d:70:2b:6f:46:
da:d6:48:a2:3f:ca:8b:a9:9a:92:83:38:28:9c:3f:
33:63:b3:7d:ba:e7:89:14:62:a6:e1:e5:d8:15:ae:
45:e1:fa:43:87:ad:09:ae:d2:75:f1:f2:9f:aa:74:
29:cb:55:02:a0:2d:d7:6d:e4:a9:5e:fd:f6:bc:65:
e6:a4:e0:6a:d0:69:e4:87:f6:6d:f7:f8:a0:3d:ee:
19:b1:3f:eb:46:4c:3e:0f:04:37:1b:42:10:71:60:
2e:44:75:6a:80:af:9b:34:c7:2a:0f:82:ee:95:23:
c7:0f:43:56:c9:a0:52:c6:ab:23:ae:eb:4e:de:f1:
a1:a7:56:5a:78:4d:62:6c:77:86:ad:9c:08:49:d0:
28:76:b3:05:1a:96:ce:fe:bf:16:61:87:f9:bd:51:
90:51:e1:04:84:e5:31:73:0a:47:16:bd:21:0f:66:
4e:fe:13:d6:e5:4b:b9:f4:dc:9f:f4:b3:d8:e2:49:
12:a7:b6:ec:08:38:ec:81:cf:69:16:f2:31:30:95:
12:1d:34:19:d4:9f:ea:77:32:da:5e:8c:80:cc:1c:
6a:bb:d0:b2:cc:ee:d7:cb:b4:a9:b4:45:2f:cd:7d:
a7:38:05:89:f4:64:d5:01:46:f3:d3:b0:6a:4a:4d:
63:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F0:74:75:7F:78:D2:BC:95:ED:C1:69:45:93:43:A0:FE:15:AE:80
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jfB0dX940ryV7cFpRZNDoP4VroA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.11.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:09:87:6f:ba:df:db:5a:55:2a:7c:4f:4f:12:4a:bd:eb:52:
db:bb:27:6f:14:25:5a:09:73:b1:a5:d4:07:e6:39:89:de:e3:
35:a8:bb:1b:da:b0:aa:05:a1:26:46:7c:e2:47:1c:c3:83:3a:
99:37:9d:ac:c3:a3:3d:a7:7a:a6:51:1f:91:19:d1:81:87:35:
75:77:0c:f7:3e:f0:20:46:86:0e:a1:43:2c:2a:d0:99:a2:3d:
d3:4b:1d:78:54:8e:20:16:57:55:b4:04:e5:a4:a1:ef:bc:c1:
02:1a:01:03:6c:25:57:37:d7:cd:6b:6d:55:18:02:3d:03:97:
e0:41:19:5e:65:4b:dd:b1:0c:e3:45:84:b3:6a:16:52:f3:b6:
db:91:4c:c6:49:43:5c:2d:00:0f:58:1d:4a:b6:1f:70:b7:7d:
36:2f:15:d3:1d:e2:34:01:2b:07:a6:4f:0d:e4:4d:ff:f2:f4:
36:76:01:73:3e:27:39:71:b7:e3:f6:82:e6:52:b3:a4:5a:e3:
ed:bb:34:b3:27:85:20:7d:83:c6:34:47:72:30:68:49:59:fc:
4c:eb:7a:bf:c4:7e:c9:82:a7:60:f2:50:8c:c7:b8:04:57:4d:
4f:2e:4e:cc:53:f3:fb:ee:d8:d4:65:8f:c1:f6:ce:43:cf:9d:
9a:8d:4e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:51:40 2025 by rpki-client