Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/lo9ecQi40clHgHRocpNrRNNF5wU.roa
File: lo9ecQi40clHgHRocpNrRNNF5wU.roa (raw, json)
Hash identifier: tmVTtoWtRGySfeVplfdH0UPDCNdiZpVDbYR3AjGr9k4=
Subject key identifier: 96:8F:5E:71:08:B8:D1:C9:47:80:74:68:72:93:6B:44:D3:45:E7:05
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 01952386A98B3F665D3933F621D31E68244C
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/lo9ecQi40clHgHRocpNrRNNF5wU.roa
Signing time: Thu 20 Feb 2025 13:23:02 +0000
ROA not before: Thu 20 Feb 2025 13:23:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 94.124.160.0/24 maxlen: 24
193.160.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Feb 2025 00:13:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:23:86:a9:8b:3f:66:5d:39:33:f6:21:d3:1e:68:24:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Feb 20 13:23:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=968f5e7108b8d1c94780746872936b44d345e705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3a:b3:7b:63:3b:91:e7:a5:17:82:d1:30:42:
d5:36:4f:b9:16:ee:2c:b4:46:fe:d2:e8:12:0f:bc:
bf:da:47:a9:c8:f7:c5:84:3d:db:a1:1a:64:44:cd:
06:73:af:36:15:cd:61:fb:94:eb:50:6e:e2:15:e9:
62:b0:7b:b6:61:f9:72:76:fb:9e:a3:72:a3:23:2a:
b0:c1:6b:b6:2c:97:ed:8a:d6:24:9c:78:b6:21:ad:
99:61:3c:8b:4e:f5:69:d3:59:d0:4f:c9:c2:56:c2:
fa:fb:94:85:87:8c:f3:0c:6c:9b:25:2c:22:22:bd:
04:04:4a:d7:9a:76:94:f1:af:00:9c:f1:6c:65:3e:
b6:72:91:8a:c3:89:47:01:b0:0b:70:85:17:08:df:
c4:f5:e9:02:2c:05:52:23:62:03:6f:7b:a4:f7:93:
0d:bc:1f:19:d3:00:f4:85:28:e0:89:d0:31:26:0b:
19:e8:6a:c2:16:8c:ad:0c:79:b0:61:fa:86:b8:92:
f2:86:c0:e5:d5:7c:2d:7d:d6:0d:9d:fb:c7:d5:cb:
af:46:eb:08:33:49:e8:fb:c2:6f:e8:c4:3f:eb:2d:
3b:47:a4:86:2e:a9:83:e9:59:ef:41:1a:63:ba:85:
51:4c:a8:e9:53:ba:7a:68:75:f8:17:5a:a5:6b:19:
7c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8F:5E:71:08:B8:D1:C9:47:80:74:68:72:93:6B:44:D3:45:E7:05
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/lo9ecQi40clHgHRocpNrRNNF5wU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.160.0/24
193.160.8.0/24
Signature Algorithm: sha256WithRSAEncryption
48:ff:81:23:04:74:7e:b8:fb:07:16:17:d7:78:3e:ec:e9:4d:
56:00:15:14:c1:b3:2e:8a:50:b2:ac:df:bf:3d:3d:16:d1:e2:
8d:bf:e1:f5:44:6b:26:0d:d6:11:5f:97:c7:e9:5f:78:6a:1c:
63:35:75:41:2d:31:83:31:e4:1e:a9:ca:52:41:cb:a3:df:19:
e8:a3:34:38:4c:cc:2a:c7:86:47:ba:cf:70:8f:36:36:51:65:
72:79:0a:bd:a9:c1:8a:06:8d:be:9a:36:c6:4b:25:da:d1:13:
e2:24:42:92:6d:50:ab:fa:78:0d:8d:0c:b1:96:0c:96:31:7b:
a0:aa:bc:8d:8c:83:7c:94:73:e3:9b:47:df:d0:12:3d:23:1a:
f3:67:4e:bc:51:46:16:46:73:79:9e:26:33:4a:5e:5e:7a:ee:
0d:7c:fa:80:3e:bf:3a:88:8b:e6:8f:b3:9b:29:53:7c:a0:e1:
6f:53:2b:88:df:2e:bf:83:8d:b3:be:10:ea:62:f3:df:b5:aa:
75:32:d7:94:08:36:ad:32:1f:a9:a8:34:f1:47:d1:39:6d:09:
46:7d:cf:10:7a:ab:27:1e:19:e1:20:55:7e:ab:53:fc:5c:2f:
a7:66:4f:db:b6:22:1b:2b:5a:5e:44:af:6c:58:94:cf:03:58:
50:66:d2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 05:16:15 2025 by rpki-client