Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDSESPusFv5714M6IfLUAk46RyI.roa
File: tDSESPusFv5714M6IfLUAk46RyI.roa (raw, json)
Hash identifier: CUkjWtkJJE+EhalMLpEHmPw8rMFWeLTh1pnIvq+meH0=
Subject key identifier: B4:34:84:48:FB:AC:16:FE:7B:D7:83:3A:21:F2:D4:02:4E:3A:47:22
Certificate issuer: /CN=b436c0f0ec8bbedf0f60844dfe4fe939369a4b40
Certificate serial: 0193D1D1B7DA68AE7FC158A55AA9A76AAC54
Authority key identifier: B4:36:C0:F0:EC:8B:BE:DF:0F:60:84:4D:FE:4F:E9:39:36:9A:4B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDSESPusFv5714M6IfLUAk46RyI.roa
Signing time: Mon 16 Dec 2024 23:33:22 +0000
ROA not before: Mon 16 Dec 2024 23:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50782
IP address blocks: 91.215.240.0/22 maxlen: 22
194.127.214.0/24 maxlen: 24
2a07:b6c0::/29 maxlen: 29
2a0d:6680::/29 maxlen: 29
2a0f:afc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 17 Dec 2024 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d1:d1:b7:da:68:ae:7f:c1:58:a5:5a:a9:a7:6a:ac:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b436c0f0ec8bbedf0f60844dfe4fe939369a4b40
Validity
Not Before: Dec 16 23:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4348448fbac16fe7bd7833a21f2d4024e3a4722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:82:e5:d8:bc:94:c1:96:7a:e1:81:ee:3d:0a:
07:69:de:70:53:13:05:01:7f:8e:36:70:af:81:02:
a3:b3:d5:1e:58:9e:a3:16:18:61:cf:51:45:5e:6c:
05:35:ae:50:b3:5e:50:79:d6:21:28:40:75:8a:65:
0a:c0:94:cb:4e:8e:cd:1e:42:bc:00:1f:7f:1d:84:
7f:26:eb:dd:90:70:df:ab:95:7f:c8:21:8c:b3:f1:
1c:8b:1c:a1:47:42:fe:5d:89:c8:40:b8:20:13:90:
b5:6a:69:9f:96:ab:d9:8c:23:a1:42:52:0f:56:19:
3b:ce:ec:0c:6c:db:8b:c4:43:ee:73:de:4d:8a:8d:
60:72:05:f8:07:9a:3c:d3:b0:4b:44:57:5a:86:1e:
00:84:7a:56:6f:af:06:20:1d:39:0b:eb:b5:f9:98:
b0:2c:d7:f4:ea:8a:56:c8:98:82:b6:cc:f1:ae:82:
74:b5:ea:d9:6d:de:5b:af:27:98:27:8e:41:dc:a8:
e6:e6:37:d0:ed:39:7a:63:83:eb:9f:a6:49:30:2f:
e3:b3:15:9c:9c:b7:4e:c1:0e:00:2f:e0:84:5c:0c:
77:94:d1:13:a2:9c:d8:0b:80:67:24:3b:93:da:9b:
f5:a8:74:5e:a2:f9:dd:f9:9c:6f:ed:e5:fa:3f:8e:
b2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:34:84:48:FB:AC:16:FE:7B:D7:83:3A:21:F2:D4:02:4E:3A:47:22
X509v3 Authority Key Identifier:
keyid:B4:36:C0:F0:EC:8B:BE:DF:0F:60:84:4D:FE:4F:E9:39:36:9A:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDSESPusFv5714M6IfLUAk46RyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.240.0/22
194.127.214.0/24
IPv6:
2a07:b6c0::/29
2a0d:6680::/29
2a0f:afc0::/29
Signature Algorithm: sha256WithRSAEncryption
69:cf:7b:43:01:0e:8a:78:e8:d8:57:6f:66:35:bf:89:64:00:
a3:27:20:56:af:21:8f:f4:20:98:7c:13:80:03:7b:94:83:d3:
f6:ab:aa:78:d7:9d:01:e3:11:32:8d:82:52:c7:76:47:36:57:
4c:09:fe:a0:26:01:9c:f8:c9:78:1b:57:46:5e:e3:a4:5f:36:
b4:f0:38:77:43:5e:51:07:bd:76:a6:5f:7e:b6:56:3f:e2:7e:
4d:c7:a8:10:d6:7c:21:45:a8:63:03:b1:79:a0:65:b6:19:d9:
ad:ac:db:9b:78:db:24:7c:67:a5:f9:a1:ac:f0:2a:6c:ce:87:
8b:ee:af:3d:8a:a9:f9:9e:a5:54:4c:29:16:7a:85:23:0d:94:
9e:5c:b5:2b:59:c0:64:a8:59:46:ad:a5:50:77:fb:71:48:98:
0b:12:44:7b:2e:b6:49:b6:cb:39:60:b8:5a:4e:69:90:62:52:
35:b1:47:bc:fb:cc:8f:80:1d:a1:c9:bb:cd:10:2b:a3:c8:68:
d9:6b:fe:71:00:f5:c1:74:3e:84:f0:d1:6c:74:6e:63:d8:cb:
57:01:cc:c9:67:ce:04:65:d7:53:84:0e:fc:c6:88:e4:dd:91:
42:cc:66:11:25:60:2d:dc:4c:10:d6:59:3a:d3:93:7d:83:7c:
5f:56:c3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:17 2025 by rpki-client