Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/jnTHBEKpVLDPUynFCI6oN2KmbxY.roa
File: jnTHBEKpVLDPUynFCI6oN2KmbxY.roa (raw, json)
Hash identifier: P9rSkZcqWG+f4GC2RkrxGkF9gzX2db2TsXHPwcpqw0M=
Subject key identifier: 8E:74:C7:04:42:A9:54:B0:CF:53:29:C5:08:8E:A8:37:62:A6:6F:16
Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Certificate serial: 0192C8A6F23FBC2F941586274EA42F9A94E8
Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/jnTHBEKpVLDPUynFCI6oN2KmbxY.roa
Signing time: Sat 26 Oct 2024 11:47:17 +0000
ROA not before: Sat 26 Oct 2024 11:47:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207684
IP address blocks: 194.92.64.0/21 maxlen: 21
194.92.72.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 28 Oct 2024 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c8:a6:f2:3f:bc:2f:94:15:86:27:4e:a4:2f:9a:94:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Validity
Not Before: Oct 26 11:47:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e74c70442a954b0cf5329c5088ea83762a66f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:02:a2:10:17:20:c9:16:b2:cc:d5:08:78:28:
69:f8:48:df:09:16:b9:39:9e:64:bb:5f:65:0e:da:
71:00:00:77:61:8a:80:3c:11:fe:27:39:a0:a6:4a:
86:4b:38:21:eb:62:7d:56:d0:e3:58:f1:f3:3f:5a:
28:1e:cb:bf:54:eb:97:e3:87:8d:37:03:38:b7:ad:
da:56:d5:20:ce:73:df:b8:ba:89:b0:ed:7b:7b:03:
cf:60:cc:4a:19:5b:ef:fe:20:01:83:b6:fa:74:df:
48:53:10:3c:2c:fb:fb:11:c8:17:a0:56:c1:ef:01:
1d:15:97:e4:d7:89:0b:22:0d:b0:e9:c9:8d:ba:24:
4a:7c:05:25:fd:37:c4:e6:fd:ae:9c:27:02:cc:98:
d8:4c:bd:b6:53:f3:12:aa:0e:e7:27:bc:4b:8a:af:
0e:d1:07:d7:fe:70:e1:b0:e6:d3:f6:ab:3f:2a:a7:
d4:8f:ec:23:af:ae:e4:18:87:ba:1f:b5:30:e4:a2:
9b:63:72:3e:be:48:ec:c6:be:2b:ed:e9:0a:48:4d:
29:78:26:ec:ab:ca:b0:36:c9:cd:67:94:c7:91:69:
de:77:91:f5:84:5e:88:68:1a:2c:c6:20:e7:a7:0f:
42:9c:22:b5:0e:6b:98:c0:32:c2:79:95:a8:1c:ce:
9b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:74:C7:04:42:A9:54:B0:CF:53:29:C5:08:8E:A8:37:62:A6:6F:16
X509v3 Authority Key Identifier:
keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/jnTHBEKpVLDPUynFCI6oN2KmbxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.92.64.0-194.92.73.255
Signature Algorithm: sha256WithRSAEncryption
96:63:6a:ca:41:02:6b:c2:e2:61:51:65:81:7c:1e:b5:5d:65:
f7:15:ea:f5:e9:eb:dc:9a:78:a3:14:a9:ab:63:6e:6e:c5:45:
09:9a:d4:0c:d6:8c:c3:b1:26:82:70:af:cb:92:5c:ce:4c:13:
0a:22:3b:5b:09:c1:34:75:07:71:59:d4:fe:bb:1a:c0:10:d5:
f9:e9:e4:05:c8:d4:0d:3c:e5:c9:38:8a:e2:22:82:5f:8c:21:
cf:76:ca:46:fd:c1:41:de:de:09:34:83:ad:b4:5b:cc:5c:d9:
50:84:dd:da:48:a1:71:fb:32:8e:f5:00:9c:21:95:5a:95:0d:
a6:b8:70:33:0d:33:0d:45:d7:4c:13:bf:0c:a8:dd:9e:53:28:
bc:fe:29:52:fc:1b:db:a4:66:59:f5:7c:19:9c:7c:70:09:a6:
76:53:59:5c:1b:6c:1e:33:10:ee:9d:2f:52:a9:71:b5:f0:50:
22:d5:9e:7f:7b:70:45:e2:43:e0:b6:ce:b3:85:2a:a4:b8:c8:
9e:c2:65:f1:cf:17:e1:ca:08:ab:88:97:85:e0:a3:46:37:5f:
25:e6:d6:4d:6f:37:9b:f2:48:63:38:59:58:d1:ba:51:45:75:
35:28:77:89:e0:a1:cc:7e:9f:7a:cc:a3:dc:49:9a:63:ce:6c:
27:53:5b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:40:37 2025 by rpki-client