Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/CX92Ug2Clx00uxM3lnDy07tJnu8.roa
File: CX92Ug2Clx00uxM3lnDy07tJnu8.roa (raw, json)
Hash identifier: 8ziAktnpt1qzI0+qHkdKU+YdIF2OtVejuyqlQi4weCo=
Subject key identifier: 09:7F:76:52:0D:82:97:1D:34:BB:13:37:96:70:F2:D3:BB:49:9E:EF
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01951D6FED72DC3CDBEFEC4BA03659803684
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/CX92Ug2Clx00uxM3lnDy07tJnu8.roa
Signing time: Wed 19 Feb 2025 09:00:29 +0000
ROA not before: Wed 19 Feb 2025 09:00:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 94.103.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Feb 2025 11:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:6f:ed:72:dc:3c:db:ef:ec:4b:a0:36:59:80:36:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Feb 19 09:00:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=097f76520d82971d34bb13379670f2d3bb499eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:91:be:6c:0d:27:12:cd:7b:08:5b:31:0a:8b:
8d:f4:59:7c:67:94:44:1f:5d:aa:a0:70:0c:09:cf:
bd:64:09:f8:eb:b1:1a:37:18:79:86:23:e7:33:a6:
95:ac:c1:65:fd:89:84:bd:29:26:c7:bf:63:d8:05:
f0:8b:2e:b9:43:04:58:06:fa:8c:d1:c5:20:5a:d8:
66:3f:71:5e:f9:b1:2c:c4:eb:3d:3c:c6:60:57:21:
ef:d6:35:72:09:6c:d0:69:01:c7:38:2e:75:70:26:
41:04:35:0a:69:06:20:a5:9f:39:c2:a7:e2:57:ef:
3f:a5:67:5d:21:ae:49:88:32:d1:a4:50:3d:61:1d:
a5:1e:f9:cd:33:6d:0c:8f:65:ab:eb:e7:90:c4:bc:
b3:26:e0:09:f2:de:e9:42:bb:d0:ef:58:9e:48:f7:
2c:ec:06:d7:61:01:cf:5e:ba:ea:a9:09:68:e0:13:
5c:58:3e:20:03:9b:6f:3a:45:fe:f8:2d:1e:f5:bc:
64:a9:b6:f6:c9:4a:87:54:b3:76:8e:04:d2:46:5d:
07:63:52:5a:f6:2f:87:be:e5:f6:4f:5e:ac:9f:11:
75:6f:4f:94:6c:19:8e:2c:ae:d9:1d:38:06:4d:23:
fb:bf:f9:a2:2b:1c:eb:a7:d8:7d:db:aa:b9:14:b3:
4c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7F:76:52:0D:82:97:1D:34:BB:13:37:96:70:F2:D3:BB:49:9E:EF
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/CX92Ug2Clx00uxM3lnDy07tJnu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.187.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:5f:70:3e:10:a0:d0:31:d0:e4:f8:54:28:47:10:ae:ab:3d:
3e:47:f3:df:75:ba:9e:dd:b6:a2:db:e0:fa:01:3a:8e:e2:7e:
22:3c:40:df:d9:0b:7a:0d:3d:35:3a:f7:d6:72:83:7a:da:7b:
be:b8:82:bb:ca:54:a3:42:25:75:a4:84:43:74:e1:68:5c:66:
83:92:7e:44:66:83:83:41:ce:a4:88:28:f7:17:a2:54:af:9d:
78:94:43:64:5c:88:d4:78:a0:13:4c:24:4b:ed:75:25:5f:04:
7a:e0:2a:3b:79:60:af:89:43:49:a2:d7:9d:21:c0:30:aa:bc:
e2:89:50:b4:06:7e:d6:94:57:d2:35:0b:49:c5:7d:92:67:7f:
4b:f1:dd:a9:ca:14:0e:40:8b:5d:fe:1b:c9:a4:75:7c:c2:1f:
88:95:1c:04:83:52:b3:51:2a:87:d5:8a:ce:2e:c7:72:7b:a8:
66:12:d0:0e:03:33:3a:96:3a:6d:08:c5:a4:c6:bf:1e:9b:70:
41:29:1e:9f:57:3e:e0:57:f9:fc:bd:72:1a:84:b4:57:18:46:
50:d3:61:dc:39:28:1e:87:bf:ab:74:89:7a:a9:d5:a7:b7:39:
64:d7:0d:ce:ea:b8:e7:51:91:40:a0:ff:c9:21:9d:de:02:0b:
71:67:f2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:14:41 2025 by rpki-client