Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/1-B6x0ciRfZC3bw-ZfXuaH3Pf_B4.roa
File: 1-B6x0ciRfZC3bw-ZfXuaH3Pf_B4.roa (raw, json)
Hash identifier: uhUCpwi4/HkUtsImUNdLNiUfOzhtoMNpqnYVQGGSxIM=
Subject key identifier: F8:1E:B1:D1:C8:91:7D:90:B7:6F:0F:99:7D:7B:9A:1F:73:DF:FC:1E
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 0194266C21E886A5014843F6C8CE1775EA09
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/1-B6x0ciRfZC3bw-ZfXuaH3Pf_B4.roa
Signing time: Thu 02 Jan 2025 09:50:08 +0000
ROA not before: Thu 02 Jan 2025 09:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 138.124.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 18:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:21:e8:86:a5:01:48:43:f6:c8:ce:17:75:ea:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Jan 2 09:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f81eb1d1c8917d90b76f0f997d7b9a1f73dffc1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ff:e1:04:c6:cd:88:19:0b:ff:1f:50:26:26:
c9:2a:19:79:66:fe:71:4f:23:f5:e9:1d:4c:5f:88:
a6:18:b6:eb:69:47:a7:02:c5:88:33:c1:a9:0a:9b:
c6:3d:8a:39:6c:46:89:a3:e4:01:38:27:11:a6:f2:
74:fb:2b:19:45:79:6b:56:55:66:87:a7:1d:c8:0d:
4f:b8:37:f9:f4:c6:4f:88:a9:04:2c:e4:2b:c8:a5:
97:eb:27:ad:35:ee:53:05:9f:cd:89:34:7e:0d:73:
5d:03:3e:63:86:8e:07:a8:07:02:7e:84:af:81:76:
4a:4b:72:33:92:6f:6d:bb:9e:11:2d:c1:f0:3e:71:
6d:4a:ea:9c:e1:bb:34:bc:a2:e3:6c:58:7b:1a:a4:
bb:f0:61:95:b4:33:44:64:47:02:ab:38:ae:cd:8c:
19:aa:da:ec:1c:3a:f7:39:39:01:45:31:6f:76:2e:
1f:06:15:80:67:d1:b1:2b:0b:bb:bd:3b:cd:99:6f:
98:3a:c5:6c:48:62:44:e9:03:d1:d6:77:75:bd:47:
06:eb:f0:be:e3:18:89:9e:52:4b:37:4c:1c:23:2c:
11:46:4f:91:bc:78:88:41:65:2c:a8:d7:63:e7:dd:
c5:9d:d5:2c:b7:c5:01:9d:21:fe:86:86:c2:36:84:
28:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1E:B1:D1:C8:91:7D:90:B7:6F:0F:99:7D:7B:9A:1F:73:DF:FC:1E
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/1-B6x0ciRfZC3bw-ZfXuaH3Pf_B4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.126.0/24
Signature Algorithm: sha256WithRSAEncryption
64:63:cf:c0:9c:27:fb:bf:13:1b:c1:8b:e7:4f:d5:a2:ba:f3:
fa:43:1a:d5:4c:a4:c9:3e:e4:c4:6f:6d:f8:64:47:d3:96:4d:
80:28:e4:52:29:99:f6:1d:ab:79:b0:67:05:d5:3e:86:c6:5a:
8c:73:81:64:6b:ae:83:65:e8:61:cb:33:c6:37:fd:0d:88:77:
80:f9:b7:40:1c:4f:0c:97:8e:2f:48:41:0f:40:dd:43:07:9b:
8a:56:1c:a6:f0:23:99:2e:d8:fe:a7:61:0f:b7:59:a3:a6:41:
9b:50:85:60:21:ec:a5:fa:8a:49:e1:c0:43:f4:dd:14:76:89:
80:d3:ca:9c:2d:44:a4:fd:6e:b4:2c:07:b9:0f:52:9a:b7:db:
c6:7e:99:7c:8b:f3:eb:62:2a:ef:ba:f4:61:2b:ed:21:7a:74:
f8:fa:a6:a2:3a:9f:0f:62:54:b0:6a:d4:41:77:45:97:3f:43:
99:b9:cf:ee:0d:94:64:6e:76:61:6d:88:37:a3:0c:31:d5:22:
25:46:e1:a0:5e:f1:74:af:29:ae:57:8d:e5:5a:74:c2:f7:4f:
55:b9:c5:5b:47:25:fe:23:bd:6e:7f:92:ad:ab:5b:18:38:d2:
ad:2f:19:b3:9e:c1:93:b0:85:9f:91:fa:16:88:16:02:47:a6:
5c:87:7d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:57:05 2025 by rpki-client