Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/EkllztaKLXu5Qpg-oc0O0m5G6Z0.roa
File: EkllztaKLXu5Qpg-oc0O0m5G6Z0.roa (raw, json)
Hash identifier: x7SK01d5vyU8bH+Batgqgh1PKBia2o/m1hfFC5gATsk=
Subject key identifier: 12:49:65:CE:D6:8A:2D:7B:B9:42:98:3E:A1:CD:0E:D2:6E:46:E9:9D
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01936DDE5F71697A193769B430DD7AC0A2A0
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/EkllztaKLXu5Qpg-oc0O0m5G6Z0.roa
Signing time: Wed 27 Nov 2024 13:45:10 +0000
ROA not before: Wed 27 Nov 2024 13:45:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60324
IP address blocks: 159.148.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:de:5f:71:69:7a:19:37:69:b4:30:dd:7a:c0:a2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Nov 27 13:45:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=124965ced68a2d7bb942983ea1cd0ed26e46e99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:44:4a:bb:41:2a:20:73:b7:d5:3a:6e:f7:
c2:57:b0:e4:32:6e:59:af:ca:e7:26:8d:2b:f3:0d:
d1:39:08:8c:88:e3:1e:21:b6:e7:91:9a:f7:4c:df:
93:78:a5:18:fc:1e:8b:bb:03:b4:38:8a:78:25:2f:
5b:22:8f:f1:de:f1:c2:94:5f:bb:90:0e:27:59:6c:
59:49:63:aa:f0:2a:d1:a9:b4:0b:59:56:a7:66:b7:
6b:37:3d:0b:97:64:e6:0f:f5:8e:4f:5c:e9:e8:10:
58:43:37:21:46:a6:68:e1:7a:64:03:32:82:d1:c2:
0b:da:58:7f:4f:4a:3a:b2:5d:6c:db:95:36:53:36:
c8:ee:ed:80:22:9c:8c:47:99:d0:1d:8f:c1:6a:25:
b4:0f:6b:fe:8e:7b:11:62:5d:94:fe:8d:9c:1a:75:
bc:27:87:08:a7:78:ff:d5:50:06:a9:35:1d:6d:e8:
c4:95:e7:de:30:9d:92:f9:92:30:ac:df:5e:8b:3d:
6d:0e:df:1d:85:5e:de:c6:f5:1e:77:c4:99:cb:6e:
b7:b4:4e:da:16:b4:a2:a4:49:e5:4d:44:c2:b9:4e:
65:7c:5b:bb:51:99:43:7f:8c:c9:49:76:c8:43:d0:
bf:ca:51:aa:a5:0e:2e:1e:ff:66:46:f6:2c:4d:2d:
54:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:49:65:CE:D6:8A:2D:7B:B9:42:98:3E:A1:CD:0E:D2:6E:46:E9:9D
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/EkllztaKLXu5Qpg-oc0O0m5G6Z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.191.0/24
Signature Algorithm: sha256WithRSAEncryption
46:43:b8:d9:b7:ff:64:77:d9:1d:fc:ee:0d:d7:43:7e:07:6d:
0d:2d:24:74:8a:02:d8:8c:e8:86:42:93:5a:80:d5:e1:3b:ca:
8d:2a:a2:22:f2:b6:72:52:a8:50:85:50:e7:f8:be:65:4d:87:
43:4e:ba:a4:a2:2a:93:a8:0d:c5:1f:ac:2d:11:b2:9b:e8:07:
db:9d:1a:0f:b9:4f:7b:77:a7:27:53:f1:56:37:92:46:54:dc:
47:54:da:63:91:eb:83:7b:c6:5e:4c:d5:ac:83:2f:78:04:cf:
e2:1c:e0:c9:5a:13:60:c8:8e:0a:8a:74:30:27:ca:11:a6:01:
08:40:91:d4:49:da:ff:31:a0:4b:3e:b7:5d:31:e8:1f:d9:55:
ee:2f:bb:73:df:df:9f:5c:4a:50:26:f0:f3:e8:b0:22:d5:de:
64:0f:9f:2d:4e:e5:f1:d1:a9:d2:bc:52:ac:84:5a:82:bd:ed:
c3:c5:c3:7b:76:ec:77:9a:91:e0:8b:96:cc:5d:8a:85:22:4e:
20:ec:29:62:6d:a5:6a:a8:b2:2c:07:5e:76:d2:3a:56:aa:8e:
ad:3b:ac:3e:c4:6f:9e:43:68:d2:36:20:2d:92:21:af:21:7a:
5d:24:c8:80:bd:b5:2b:bd:e9:f3:58:13:a7:d5:7e:16:99:22:
66:10:02:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:34 2025 by rpki-client