Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/69eddb-2df1-4990-9c96-d06599ba7e5b/1/eLModSsA4qRoEzSjgxZd38FPtsQ.roa
File: eLModSsA4qRoEzSjgxZd38FPtsQ.roa (raw, json)
Hash identifier: YY4Qy5tpuugBYDQsXg6PnP7bVLKkhmHa0yZ0+tSOfFc=
Subject key identifier: 78:B3:28:75:2B:00:E2:A4:68:13:34:A3:83:16:5D:DF:C1:4F:B6:C4
Certificate issuer: /CN=b64e100c903d85c9661f21b41f641994903a45cc
Certificate serial: 0193AED71F577E594B1F3AE57BCA7D090E75
Authority key identifier: B6:4E:10:0C:90:3D:85:C9:66:1F:21:B4:1F:64:19:94:90:3A:45:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tk4QDJA9hclmHyG0H2QZlJA6Rcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/69eddb-2df1-4990-9c96-d06599ba7e5b/1/eLModSsA4qRoEzSjgxZd38FPtsQ.roa
Signing time: Tue 10 Dec 2024 04:32:33 +0000
ROA not before: Tue 10 Dec 2024 04:32:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48955
IP address blocks: 194.169.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ae:d7:1f:57:7e:59:4b:1f:3a:e5:7b:ca:7d:09:0e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64e100c903d85c9661f21b41f641994903a45cc
Validity
Not Before: Dec 10 04:32:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78b328752b00e2a4681334a383165ddfc14fb6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:06:66:b5:04:05:ec:22:ff:05:4e:af:1c:68:
f3:05:aa:fe:79:ad:15:96:42:f6:c0:17:74:0a:fe:
8b:7e:87:2c:3d:a2:7c:87:d6:d1:bb:ee:8b:a2:fe:
1d:ed:a4:57:8f:b8:06:d2:ec:60:fe:c6:fa:f8:a5:
01:ef:e2:cb:0a:b5:79:39:19:6e:80:5a:b8:ce:e7:
de:70:0f:87:d3:f9:7c:9f:45:69:89:af:b8:a9:96:
80:66:a1:a7:e8:c7:6f:70:84:63:66:1e:ec:ce:52:
26:91:a5:3b:fe:c2:96:21:e6:00:0e:f7:6c:63:cd:
42:8b:75:74:f2:d7:31:5e:62:0a:ef:73:71:38:29:
b0:b9:6b:16:49:25:ff:10:a9:2e:92:68:66:aa:57:
75:af:be:78:ba:7b:48:04:29:03:1e:24:fd:fb:5a:
a8:f5:5a:25:96:6f:40:01:3a:8b:83:33:4e:62:ee:
b0:d3:90:d1:59:0d:d3:2a:60:8d:38:f8:e1:8a:5c:
97:47:73:dd:5d:0a:d4:c6:86:8b:bc:ff:88:84:9e:
f3:db:23:6c:2f:43:72:8d:3f:af:6b:f5:96:26:78:
b0:ef:36:98:aa:d7:51:0a:0d:6b:b7:aa:f7:75:22:
f3:d7:59:f4:32:d8:48:b0:2a:77:d9:5a:da:23:0c:
73:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B3:28:75:2B:00:E2:A4:68:13:34:A3:83:16:5D:DF:C1:4F:B6:C4
X509v3 Authority Key Identifier:
keyid:B6:4E:10:0C:90:3D:85:C9:66:1F:21:B4:1F:64:19:94:90:3A:45:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tk4QDJA9hclmHyG0H2QZlJA6Rcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/69eddb-2df1-4990-9c96-d06599ba7e5b/1/eLModSsA4qRoEzSjgxZd38FPtsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/69eddb-2df1-4990-9c96-d06599ba7e5b/1/tk4QDJA9hclmHyG0H2QZlJA6Rcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.202.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:95:73:2b:1d:c9:fe:8a:31:ba:41:8c:ec:32:c3:71:ce:c7:
ab:29:b6:02:1c:ae:97:0d:e3:95:5f:72:04:b8:7a:83:b4:27:
2e:7e:58:79:21:e2:64:f8:f1:45:a8:71:93:cf:4c:72:98:85:
14:95:d6:26:dc:42:e4:28:d5:d2:1b:bc:75:26:0c:9f:19:55:
29:9f:08:d0:28:28:be:ef:47:68:41:83:bd:a1:3d:d2:90:21:
bb:89:c9:36:1b:92:95:61:6c:c9:65:41:f5:a0:7d:dd:49:2c:
11:92:0b:94:eb:cd:f9:49:01:87:45:cf:44:3b:42:d3:64:c2:
6a:30:bc:4d:dc:a6:9a:19:36:bf:36:37:c8:a0:32:3a:17:75:
1e:cd:9b:97:b3:3f:5e:8f:37:45:a5:67:5a:a4:67:13:e1:d9:
26:b4:f1:48:0e:1c:c9:03:c0:1f:d8:bd:af:b0:2f:33:80:1d:
8d:48:31:06:bb:5b:f1:86:2b:60:71:a3:fa:a0:ef:13:32:e4:
75:3c:a5:93:23:28:46:ab:c1:76:2f:68:d1:38:bc:f7:12:6c:
e3:be:c3:9e:1a:da:4c:8a:e3:29:1f:c1:d3:52:0b:99:cb:cb:
26:b1:3f:cf:ad:82:89:30:19:c6:6a:83:df:73:37:20:47:40:
cd:0f:c9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:49:30 2025 by rpki-client