Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/SN3UVApQtrepQ9SgvVn6x4M5yiA.roa
File: SN3UVApQtrepQ9SgvVn6x4M5yiA.roa (raw, json)
Hash identifier: SEVU9CyDkL7waakw9ae+ikqmPslQU/mTnz1VBU/lwEo=
Subject key identifier: 48:DD:D4:54:0A:50:B6:B7:A9:43:D4:A0:BD:59:FA:C7:83:39:CA:20
Certificate issuer: /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial: 0194244538BACBCEABFC80CB1FBC64222D91
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/SN3UVApQtrepQ9SgvVn6x4M5yiA.roa
Signing time: Wed 01 Jan 2025 23:48:23 +0000
ROA not before: Wed 01 Jan 2025 23:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46427
IP address blocks: 192.189.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 07:28:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:38:ba:cb:ce:ab:fc:80:cb:1f:bc:64:22:2d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Validity
Not Before: Jan 1 23:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48ddd4540a50b6b7a943d4a0bd59fac78339ca20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:0a:9d:9d:ee:d4:b0:bc:58:b6:8c:cd:d7:
5d:41:78:d8:38:ee:7d:97:c9:37:eb:fa:fc:18:21:
c5:73:88:7a:6e:a1:d9:47:1a:3d:38:53:31:76:09:
ae:ae:0b:fc:92:84:6b:33:55:4b:b2:41:42:c6:72:
17:8a:72:62:7b:eb:99:f3:19:3b:ec:4a:ab:06:6a:
28:04:fb:79:4d:0b:b4:02:e0:2b:b0:83:d2:7f:a0:
0c:da:85:7c:c7:59:86:ab:fe:5b:5f:b5:8c:4f:d9:
1d:0a:bd:4e:21:cd:1b:73:04:30:ef:8b:57:35:c0:
38:e1:87:4c:ce:87:81:e9:17:bf:1b:aa:4d:84:c1:
7c:74:d1:8b:92:6c:71:ec:d3:b5:b5:5e:ce:d4:48:
85:08:7c:40:c8:5d:e9:e3:02:79:e2:7b:c6:5f:25:
7e:1b:c6:32:30:1f:7d:99:d8:20:d8:68:bf:1f:c7:
35:74:d9:2d:60:e1:fb:66:8b:3a:f6:d4:4c:49:56:
87:9b:97:f6:8d:19:7e:93:df:70:f7:61:35:02:6c:
34:1d:bc:cb:da:0f:3a:9b:46:09:63:86:e4:a2:f2:
a8:52:c6:68:92:16:9c:e1:25:c7:9b:e3:9b:64:1a:
4d:09:9a:74:9b:65:16:d3:7d:38:21:dd:e9:0e:91:
f7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DD:D4:54:0A:50:B6:B7:A9:43:D4:A0:BD:59:FA:C7:83:39:CA:20
X509v3 Authority Key Identifier:
keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/SN3UVApQtrepQ9SgvVn6x4M5yiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.189.157.0/24
Signature Algorithm: sha256WithRSAEncryption
00:53:43:0c:c4:28:44:55:07:ad:75:71:20:e9:d2:24:f1:4e:
1b:39:eb:ed:96:b0:72:2b:1d:6a:9a:5a:e5:61:8a:ef:16:c7:
85:6f:a8:42:a0:4c:5b:b5:51:49:57:b1:dd:53:5b:56:7e:db:
c9:4c:48:f4:a5:f9:51:6f:75:51:6a:7d:86:4f:89:05:e7:e9:
a5:f3:fa:25:db:78:59:ba:14:88:64:72:27:95:24:ef:ad:cb:
22:61:83:2f:55:1d:c2:98:c2:44:1c:59:4c:7d:d4:ae:e3:c6:
18:c5:74:76:ad:2b:a1:f4:22:2e:91:aa:7d:fb:f7:46:29:3b:
3c:e4:e6:6c:1f:f6:b5:03:f7:6e:47:31:70:49:11:0b:21:72:
50:02:4b:7a:b8:e0:f6:55:d0:ed:a3:5a:28:28:25:f6:bc:4f:
8e:f4:c4:ac:24:4f:5b:e4:63:95:6b:64:c5:2b:ee:2d:ce:fa:
dc:f4:81:bd:0b:17:6f:97:8e:64:0e:23:ab:7d:9e:3c:08:d9:
b0:51:48:b7:05:ce:5c:59:c6:04:71:3e:d1:66:7f:4f:28:eb:
b6:7b:4c:ca:34:af:63:7a:59:cf:f6:a0:7b:2b:46:c0:8c:53:
28:8b:7e:fd:f9:d1:e7:a8:09:61:4e:68:85:bf:6a:61:1d:3d:
37:22:b2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:54:40 2025 by rpki-client