Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/Ess9b4kG4mCoRz2DGRKFXPbYM1U.roa
File: Ess9b4kG4mCoRz2DGRKFXPbYM1U.roa (raw, json)
Hash identifier: yFOES2cxg3U8UxZSottM+rF32PiYcNwyR9a2V+z42CQ=
Subject key identifier: 12:CB:3D:6F:89:06:E2:60:A8:47:3D:83:19:12:85:5C:F6:D8:33:55
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 018CF31220B3E6B3C63596C6B08D77E3105E
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/Ess9b4kG4mCoRz2DGRKFXPbYM1U.roa
Signing time: Wed 10 Jan 2024 11:11:40 +0000
ROA not before: Wed 10 Jan 2024 11:11:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22364
IP address blocks: 87.238.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 11:32:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f3:12:20:b3:e6:b3:c6:35:96:c6:b0:8d:77:e3:10:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: Jan 10 11:11:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12cb3d6f8906e260a8473d831912855cf6d83355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8f:df:c1:fb:16:93:0e:7a:d3:db:d0:05:2b:
c9:34:0c:1b:43:18:f9:e7:55:fe:5a:96:72:2a:bd:
d9:65:c0:23:ad:4e:9e:79:bf:03:af:74:b9:f4:f9:
42:cd:00:ef:cc:4f:ea:0a:09:45:17:67:c2:3d:2e:
eb:e4:f6:61:ce:57:bc:ce:da:b3:89:11:47:39:b4:
eb:1f:b2:12:d1:6a:34:a4:22:60:92:8a:c6:0c:9d:
31:f1:c7:30:ce:77:e6:23:8c:66:b3:a1:82:66:28:
46:3d:ad:9c:51:b0:62:3f:f1:4c:0c:aa:6a:b2:69:
36:c9:c4:01:2a:2c:93:eb:89:c7:59:a9:bb:fb:fc:
8b:40:8e:e9:46:2f:c6:ce:8a:d4:0b:81:fe:01:b4:
96:33:99:0d:9a:6b:34:39:f3:da:7c:12:ba:71:c9:
fc:9a:46:5b:f3:5e:14:1d:0d:d8:89:af:85:39:82:
31:b4:d5:75:b0:e1:c2:6d:66:13:07:f8:69:36:ff:
70:b7:e3:94:ac:0c:05:70:40:b4:01:33:a3:92:cb:
04:90:fc:c9:5c:70:df:1c:93:7b:a4:24:4b:b5:a6:
3a:49:c5:19:03:f5:e9:df:4d:5d:a0:a7:e1:48:45:
b8:bd:d3:5d:0b:a8:47:9b:3a:3d:2d:de:fc:f4:de:
0c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CB:3D:6F:89:06:E2:60:A8:47:3D:83:19:12:85:5C:F6:D8:33:55
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/Ess9b4kG4mCoRz2DGRKFXPbYM1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.243.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:fb:73:29:40:f0:55:df:69:f3:ed:b2:8a:e0:b7:10:4d:ce:
a3:c0:0d:bc:35:1f:d6:82:14:13:83:45:64:bb:04:d9:77:45:
0c:14:52:20:93:fd:4e:77:bf:81:88:a9:ab:dd:6e:75:c6:c7:
8a:68:1e:da:3b:f0:7a:94:d0:bd:7d:28:0d:bf:bd:ef:58:ae:
1e:de:ec:34:d4:aa:93:ac:43:07:ff:64:52:8b:7e:0c:8c:49:
d1:6c:b1:5d:98:42:c3:a8:c2:65:cc:3c:a1:c8:86:77:c3:94:
9b:2f:20:27:e7:56:bf:72:28:4b:ae:59:ea:02:43:2b:7d:de:
8c:81:6a:b2:03:a3:28:c0:3d:7b:8d:22:4b:52:5b:08:a5:ad:
9a:c8:c4:ca:aa:12:52:f9:e7:35:24:8a:db:13:83:37:ec:62:
d1:45:4c:44:a7:7c:9b:b9:ef:32:e1:8b:0f:d9:26:37:d7:d6:
b6:2b:72:39:82:d8:3c:09:d8:82:77:66:ac:3e:ef:17:f5:46:
24:61:14:ad:a2:91:72:f8:f0:06:36:42:57:cb:1b:b1:b2:75:
01:f2:21:3f:24:b9:f2:16:92:89:b0:d5:4c:b5:ef:c2:ec:c5:
b7:f9:26:cc:ef:e9:2a:d1:db:68:72:71:67:90:69:e8:7e:be:
5f:a5:f8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:36:56 2025 by rpki-client