Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/tgevymSH8nBRrYTfJZyN9F2IfqY.roa
File: tgevymSH8nBRrYTfJZyN9F2IfqY.roa (raw, json)
Hash identifier: aO2p5W+afUO0zlJ+S0cVqNaKjyL2yOgmsrTmcx2uIrQ=
Subject key identifier: B6:07:AF:CA:64:87:F2:70:51:AD:84:DF:25:9C:8D:F4:5D:88:7E:A6
Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940
Certificate serial: 018CCA99B2DBB2DD779D6FA5A52577AA14B6
Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/tgevymSH8nBRrYTfJZyN9F2IfqY.roa
Signing time: Tue 02 Jan 2024 14:35:19 +0000
ROA not before: Tue 02 Jan 2024 14:35:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133466
IP address blocks: 149.226.192.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:b2:db:b2:dd:77:9d:6f:a5:a5:25:77:aa:14:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940
Validity
Not Before: Jan 2 14:35:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b607afca6487f27051ad84df259c8df45d887ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:34:92:50:b5:d9:c7:57:ca:39:db:c9:25:75:
ed:d7:96:c5:79:1f:1b:76:75:2c:5d:fe:62:99:5b:
04:41:5c:82:d4:02:18:11:6a:75:5e:de:ae:ed:33:
a3:0a:01:c7:8c:00:5b:95:47:e9:fc:56:84:56:19:
b6:11:e4:a5:7c:69:e3:35:19:b6:d8:56:9e:d6:bd:
2b:a8:70:65:4c:40:64:63:5d:8a:2c:a6:51:96:02:
d6:01:f1:92:99:ce:5c:2f:22:55:ef:c3:b0:44:cc:
b2:64:bd:a5:78:63:8f:07:59:b0:59:87:5f:d2:5b:
2b:f9:63:b8:0d:46:2e:e5:b3:d8:ce:55:ac:a9:8f:
2a:12:98:00:e0:e7:40:57:43:a2:f8:e4:7e:83:99:
31:64:c1:9f:36:16:b2:c7:0b:44:de:83:1b:b5:96:
e5:a5:5f:e1:40:fe:ec:8e:65:1a:f8:db:07:f2:2a:
37:0e:48:a3:1e:d2:31:ac:96:5e:6c:53:46:c6:49:
ee:77:e0:06:98:68:85:e5:0d:1a:d1:4a:95:ef:02:
63:d9:bd:b6:86:de:55:4c:85:c9:7c:24:cd:00:27:
67:cb:d8:82:91:2d:a1:2b:78:1a:26:bd:8d:68:06:
c0:11:34:84:b8:57:6e:f5:74:25:f2:68:79:a8:d3:
65:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:07:AF:CA:64:87:F2:70:51:AD:84:DF:25:9C:8D:F4:5D:88:7E:A6
X509v3 Authority Key Identifier:
keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/tgevymSH8nBRrYTfJZyN9F2IfqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.226.192.0/21
Signature Algorithm: sha256WithRSAEncryption
60:de:a7:b5:31:8e:f6:1c:81:11:2b:d7:76:a8:9a:d3:84:8a:
b6:36:2d:07:2a:10:e0:db:8e:9c:4b:46:8c:13:b4:59:f4:37:
54:b7:a9:6e:65:dc:84:72:16:7d:e6:ae:1c:48:f2:06:75:9e:
a8:5f:c7:e2:5b:7d:2a:8f:dc:96:b2:92:ab:8c:75:dd:5e:80:
f9:b2:40:04:57:83:81:3a:dd:4c:ea:d3:76:8a:95:ee:7a:b2:
1e:37:cc:bd:ad:97:7b:e2:f7:a4:ec:26:ca:83:0b:44:b7:b7:
ce:b0:f9:c5:bc:ea:07:cb:a1:26:3d:d8:a1:84:13:21:5f:1a:
d2:5b:25:83:da:cb:84:b2:18:e3:e4:ae:3b:77:a8:2f:3c:b0:
1d:34:6c:b9:4d:f0:80:55:0b:e3:77:7f:dd:67:75:24:3d:41:
a6:ef:b3:5d:ef:72:2f:8f:d6:9d:41:b4:27:a1:d2:38:4b:33:
35:35:4e:09:c0:8e:9a:3e:47:5b:43:15:1f:e4:46:87:11:ef:
bb:cf:59:5a:65:95:a7:6f:97:63:48:e7:59:5a:25:68:1b:ad:
32:0a:38:a4:a9:be:69:c1:1f:e9:7c:bb:63:40:c3:5b:80:99:
b8:3a:2e:ab:86:64:9b:52:b3:1c:e4:c9:0b:08:74:60:1c:ac:
5b:63:a2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:28:32 2025 by rpki-client