Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/Aka2PUVnyjiChlH9ccutQ-4jitY.roa
File: Aka2PUVnyjiChlH9ccutQ-4jitY.roa (raw, json)
Hash identifier: HadwLpBzofSoam6f3PbNXOfedRYBLGGn8GWGQzC+2sU=
Subject key identifier: 02:46:B6:3D:45:67:CA:38:82:86:51:FD:71:CB:AD:43:EE:23:8A:D6
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 0191DC6D2FEF29D8555C485DF67BB4342CF1
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/Aka2PUVnyjiChlH9ccutQ-4jitY.roa
Signing time: Tue 10 Sep 2024 14:53:48 +0000
ROA not before: Tue 10 Sep 2024 14:53:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205733
IP address blocks: 185.21.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Sep 2024 07:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:dc:6d:2f:ef:29:d8:55:5c:48:5d:f6:7b:b4:34:2c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Sep 10 14:53:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0246b63d4567ca38828651fd71cbad43ee238ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4c:25:ac:71:c5:68:a7:7d:e7:06:52:fe:75:
fd:0f:3a:fd:76:2c:a3:df:d4:6d:8a:63:b2:fe:d0:
a5:f2:9d:f7:e7:62:71:05:9c:4f:47:79:e6:9f:85:
70:92:7a:74:bc:11:f9:d1:98:a1:3d:67:6e:e5:e8:
5f:c6:6f:17:c2:c6:4c:09:f5:81:f0:0c:88:b4:7e:
02:fe:07:aa:9f:d4:fa:f3:8a:74:02:86:ea:92:f8:
72:30:d7:48:fa:71:ac:ab:5c:7f:e7:a4:a1:f9:c8:
fc:e8:cd:9b:5c:4a:2e:cf:27:60:bf:d0:a8:4a:55:
5e:01:44:31:87:95:d3:f0:08:4e:80:85:7c:a4:d8:
b5:c2:69:21:4e:4c:e0:41:00:63:8d:05:60:73:df:
d8:39:44:08:10:e6:28:65:df:eb:62:fc:d9:20:e8:
35:1f:1d:77:c9:2c:2b:65:dc:8d:06:19:e7:0c:a9:
2c:8d:13:95:f2:7f:a0:1b:ba:05:c4:ef:62:86:75:
f8:a5:1e:07:e2:c2:29:25:2c:95:7a:c7:22:e7:ed:
6c:36:d9:d1:48:7a:f8:8d:f1:d9:a1:a6:df:4d:7e:
bc:a3:2f:f3:fa:d3:94:fd:12:d8:ed:90:a4:18:26:
61:be:1c:ba:23:b8:9e:77:61:00:28:c8:bb:a4:58:
76:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:46:B6:3D:45:67:CA:38:82:86:51:FD:71:CB:AD:43:EE:23:8A:D6
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/Aka2PUVnyjiChlH9ccutQ-4jitY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.254.0/24
Signature Algorithm: sha256WithRSAEncryption
08:79:07:a6:73:11:38:4b:6a:00:0f:49:95:9f:2e:32:6a:8e:
95:b2:7b:d6:9c:e2:b5:f7:31:c0:a9:96:42:cb:11:d5:26:30:
50:b8:72:b9:16:db:55:80:e4:dc:2a:a9:ac:ca:6e:04:89:6f:
ec:7a:50:c1:75:d9:60:88:c7:ac:be:7e:7b:f4:29:95:70:08:
77:fe:0c:a0:e8:29:ae:21:9f:e7:96:08:3b:cd:63:43:a6:66:
c7:9b:48:be:6d:cd:79:3c:a8:4a:76:f4:41:81:41:fe:ed:94:
6b:20:ad:67:07:42:f1:ae:9d:21:21:b4:b4:05:12:68:c9:06:
c0:e7:b7:c0:b9:b4:0b:b0:8c:81:15:bb:98:35:32:18:5c:a1:
de:57:6e:d3:a0:de:2a:7a:0f:83:5b:47:e0:70:d6:3c:0b:29:
e1:8f:39:f6:19:72:8f:66:80:34:73:11:89:3c:25:8a:78:83:
fc:33:44:42:93:4d:07:c4:ef:ed:41:65:15:59:73:14:c2:ca:
f9:45:ab:48:3d:db:35:4f:b7:c8:81:08:a0:31:7d:6a:c3:7f:
7f:ce:ae:43:00:80:ee:01:3a:94:93:f7:e6:3f:80:55:f9:b9:
f2:77:6b:b2:ce:20:99:d4:7e:df:09:14:35:10:44:85:5e:8f:
b3:30:8f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:30 2025 by rpki-client