Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/R7OgzoAd8b8CKHk9GiXyRw2X2co.roa
File: R7OgzoAd8b8CKHk9GiXyRw2X2co.roa (raw, json)
Hash identifier: gDwWHBX5FmSBf+9O5w1N2Yo+daIf/zavKtJS1gevb6I=
Subject key identifier: 47:B3:A0:CE:80:1D:F1:BF:02:28:79:3D:1A:25:F2:47:0D:97:D9:CA
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 019417E3C19F395C81660655ED96C627CEE0
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/R7OgzoAd8b8CKHk9GiXyRw2X2co.roa
Signing time: Mon 30 Dec 2024 14:06:29 +0000
ROA not before: Mon 30 Dec 2024 14:06:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13763
IP address blocks: 195.180.150.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:17:e3:c1:9f:39:5c:81:66:06:55:ed:96:c6:27:ce:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Dec 30 14:06:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47b3a0ce801df1bf0228793d1a25f2470d97d9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6e:b5:91:d9:40:c8:93:0d:5e:97:bf:c9:d2:
bc:22:6a:d5:41:b2:e6:e1:f7:27:fb:ef:c8:0f:94:
57:a3:54:2c:07:c2:70:06:9a:13:d8:8a:c3:c8:31:
57:f7:a1:3a:dc:5d:46:57:96:56:1c:0d:48:fa:e6:
e1:70:57:58:4d:bd:86:b8:84:67:11:6f:e8:41:c9:
cd:65:e8:5e:b6:ea:3d:16:8e:06:c8:5c:93:70:ae:
66:2a:15:49:d8:74:b1:8c:ba:52:40:f2:a3:51:2b:
ac:7f:4d:23:3f:70:09:11:c8:0f:27:7d:c1:8b:30:
d2:00:4e:00:dc:f5:ef:95:d8:51:c7:27:8f:61:ac:
6e:88:53:6a:a1:d9:7e:71:6c:aa:6d:29:72:c5:0d:
39:d8:e8:b3:70:7c:8b:a6:d0:3a:2d:e5:9f:37:88:
19:a9:81:38:4c:48:11:4b:b1:70:d9:b2:30:7f:7d:
7b:55:12:b8:d9:fa:9c:1d:ba:e6:be:78:c6:88:73:
60:b7:0c:1a:f4:09:f5:ea:95:b2:a8:13:04:35:7d:
02:d4:87:fe:1b:45:55:57:e8:46:1b:58:d3:53:50:
7a:63:e3:90:25:08:60:fc:0c:c3:7b:06:a8:81:de:
b5:2e:93:e6:a4:30:96:52:7b:70:16:ad:4c:f6:51:
1e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B3:A0:CE:80:1D:F1:BF:02:28:79:3D:1A:25:F2:47:0D:97:D9:CA
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/R7OgzoAd8b8CKHk9GiXyRw2X2co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.180.150.0/23
Signature Algorithm: sha256WithRSAEncryption
59:35:45:fc:58:0e:77:12:74:01:1f:40:38:8d:a0:ec:3a:03:
0d:fa:4b:0a:1e:be:0f:4d:55:38:ed:72:c5:fb:41:55:01:81:
ad:a0:50:9c:1f:c5:c1:4d:8b:1c:a8:6c:60:1a:f4:46:15:bb:
5b:2f:99:ee:ac:de:a4:0f:96:9e:fa:f3:26:95:4c:15:68:2e:
7c:a7:ea:c7:52:ff:f2:63:a4:64:31:1e:83:19:29:4a:c2:15:
ac:7f:d5:9e:45:7d:bb:ea:e9:e6:3c:93:2c:3b:d8:45:ea:eb:
63:20:a3:1f:9d:0a:83:1c:47:e2:71:a5:e7:d8:2a:71:3f:af:
96:e3:02:28:49:82:b5:e1:e8:1d:17:f5:3d:ac:3a:0a:65:19:
c0:47:cc:30:e3:09:c6:e5:bf:63:84:d7:36:30:10:6b:be:59:
c8:3c:b9:68:93:6f:e6:3d:96:85:5a:8f:5c:05:10:6d:33:fa:
db:4e:96:55:21:44:ce:44:9f:a5:c2:23:ec:c5:d9:de:be:b5:
fe:30:4a:17:4e:5e:33:e2:f0:88:7f:ca:aa:2f:f6:fd:c1:d3:
d4:1e:cd:1d:d0:6c:e0:3c:5a:84:11:98:76:ff:f0:bf:ba:66:
f8:f9:a5:fc:7e:58:0e:85:d0:fd:43:64:e6:a6:73:62:f0:94:
cc:df:04:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:36 2025 by rpki-client