Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/1-Kb9wVPnJhje4TDBHhPbndKS4rw.roa
File: 1-Kb9wVPnJhje4TDBHhPbndKS4rw.roa (raw, json)
Hash identifier: OeoV35lVP3Y2luxK6ZL4YHXGBL9az/Xe/BoB50S53Ak=
Subject key identifier: F8:A6:FD:C1:53:E7:26:18:DE:E1:30:C1:1E:13:DB:9D:D2:92:E2:BC
Certificate issuer: /CN=460d3149fc50ca9797f50fde9e02a083134c5019
Certificate serial: 01913BBF16FE59B82C229DA48EB1890AA2B0
Authority key identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/1-Kb9wVPnJhje4TDBHhPbndKS4rw.roa
Signing time: Sat 10 Aug 2024 10:04:24 +0000
ROA not before: Sat 10 Aug 2024 10:04:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206858
IP address blocks: 193.228.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:3b:bf:16:fe:59:b8:2c:22:9d:a4:8e:b1:89:0a:a2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=460d3149fc50ca9797f50fde9e02a083134c5019
Validity
Not Before: Aug 10 10:04:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8a6fdc153e72618dee130c11e13db9dd292e2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1c:76:db:19:cf:23:39:a1:89:99:a7:3c:ac:
ba:06:e3:f2:47:2f:19:93:fb:db:f4:36:c7:50:0a:
24:3f:aa:f1:47:be:e2:1f:71:d4:a5:35:f8:df:3d:
58:18:54:47:e6:a9:1f:f2:2e:cc:e1:41:0f:0e:e3:
88:76:6b:2d:b3:12:9e:f0:65:92:cf:90:8d:4c:c8:
a2:9e:07:1d:9a:61:6f:76:98:4b:aa:8b:60:0b:e3:
ac:06:82:5d:c2:92:3e:ed:be:53:ef:ff:8b:85:f4:
95:a5:9f:e5:77:2b:92:e7:29:cf:0d:08:80:f1:70:
c1:38:fe:dc:b3:b6:68:42:cf:9e:18:08:a2:3d:ee:
05:b6:42:d3:d4:07:cf:e4:ff:53:33:ec:1b:bf:28:
4b:e6:b4:9c:6e:77:ad:06:d2:99:7a:52:23:18:95:
81:4a:fa:d0:4a:83:bc:75:fa:ae:96:3b:2e:a9:37:
a5:37:0b:06:7e:79:c2:f6:e3:1c:96:81:09:1a:11:
0c:a9:43:76:14:29:0e:67:33:98:e5:a6:87:e2:2c:
91:7b:db:3e:ac:35:a5:d1:eb:a8:09:19:aa:ea:56:
d5:07:02:43:80:5b:2b:6c:bc:d3:7a:8d:8d:54:a3:
6f:3c:e9:d6:f9:ce:a6:4a:0f:14:81:be:3d:9f:17:
5e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A6:FD:C1:53:E7:26:18:DE:E1:30:C1:1E:13:DB:9D:D2:92:E2:BC
X509v3 Authority Key Identifier:
keyid:46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/1-Kb9wVPnJhje4TDBHhPbndKS4rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.143.0/24
Signature Algorithm: sha256WithRSAEncryption
98:71:3d:d0:c0:67:c7:6f:49:5a:41:10:94:d1:dd:fa:33:ec:
9d:50:30:da:76:be:31:5a:50:5f:e1:b7:d3:dd:b9:b4:c2:12:
c4:7f:52:59:ab:cf:77:c0:ba:78:47:68:b5:1e:60:75:a1:88:
3e:8f:e9:e9:3a:e5:98:d5:a2:86:0e:5f:6d:86:05:a9:55:29:
fa:18:49:e4:b3:1d:ed:ff:d7:8a:4c:0d:09:5c:d5:fa:b1:99:
08:fe:ff:2a:a9:f0:2d:2c:1c:0e:2f:4d:2c:c2:2c:a9:bd:c9:
cb:5b:4b:f8:c8:31:70:e2:fb:81:5d:c0:bc:2f:0a:09:a2:73:
c3:dd:bf:4a:77:2f:c4:c2:23:9a:b8:b1:6d:c5:79:18:be:7a:
44:8f:ce:29:aa:22:2c:1e:32:87:9f:ec:2e:c0:0c:6c:81:40:
bf:a1:07:af:b0:86:a8:d7:25:0a:a6:29:b9:93:3e:56:71:00:
45:07:6d:9d:7d:9d:64:b0:a8:fd:38:9b:ec:de:21:7d:80:70:
d6:9b:a3:13:07:e0:de:5a:01:60:f5:89:5d:64:b8:26:ff:e1:
f8:f9:4f:32:bc:f6:b0:56:20:a7:89:4c:10:cd:ed:fb:3e:4e:
78:6d:ea:55:6d:d1:5a:91:4d:76:89:91:5c:e0:90:f2:c1:0c:
d7:fc:9e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:22:24 2025 by rpki-client