Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nFfyp8cTqLI0qj1BmhoBZoqX06g.roa
File: nFfyp8cTqLI0qj1BmhoBZoqX06g.roa (raw, json)
Hash identifier: K1VjKwZytIHQCarVHQjbhvqjQsPRxUJ1QAv/l0W2Cbs=
Subject key identifier: 9C:57:F2:A7:C7:13:A8:B2:34:AA:3D:41:9A:1A:01:66:8A:97:D3:A8
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0192AFECFCF9E58042FE4FA29E4175E7023C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nFfyp8cTqLI0qj1BmhoBZoqX06g.roa
Signing time: Mon 21 Oct 2024 16:33:16 +0000
ROA not before: Mon 21 Oct 2024 16:33:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214046
IP address blocks: 150.241.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Oct 2024 23:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:af:ec:fc:f9:e5:80:42:fe:4f:a2:9e:41:75:e7:02:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 21 16:33:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c57f2a7c713a8b234aa3d419a1a01668a97d3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fc:8b:3f:9f:d7:46:c6:69:1c:69:81:91:b5:
47:7b:59:0d:66:d7:74:c4:9e:d6:2a:18:f6:33:8d:
87:56:36:17:2b:64:c7:5a:dc:bd:63:67:ef:c9:fc:
82:06:35:47:25:4a:cd:ff:be:c7:11:9c:e4:15:2c:
87:20:6b:98:1e:a8:79:88:e2:c7:65:20:81:1d:47:
46:e4:94:22:ff:51:49:16:f8:6c:80:97:a9:81:8f:
b2:cc:63:be:24:78:71:17:dc:53:c5:9d:a4:1d:74:
73:9a:5c:92:70:7d:d8:d3:93:63:5f:27:91:db:39:
e3:1d:6c:90:a6:53:6b:46:b4:99:11:2a:ca:91:69:
2a:2f:ec:1d:a1:65:6d:a1:3e:ef:8e:f4:01:f2:e2:
64:79:7c:8d:45:49:87:06:6c:75:0a:55:bf:28:10:
cf:d0:ed:bf:db:77:25:23:93:cb:87:c9:ce:3c:f8:
28:16:52:99:3c:5f:28:a0:79:08:d7:72:96:8f:0d:
4b:7f:73:24:8d:be:41:97:51:63:62:48:a1:25:c3:
9c:d6:06:c2:3d:a0:03:d9:f4:28:e3:79:ff:a4:29:
52:30:65:e0:7d:f7:03:07:a0:b4:e0:d3:e8:fe:24:
5e:3f:72:13:71:e5:ee:26:f4:9b:4d:c4:24:2f:f1:
10:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:57:F2:A7:C7:13:A8:B2:34:AA:3D:41:9A:1A:01:66:8A:97:D3:A8
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nFfyp8cTqLI0qj1BmhoBZoqX06g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.105.0/24
Signature Algorithm: sha256WithRSAEncryption
45:eb:7d:1f:4a:77:a3:ac:bf:75:8b:b2:2c:5f:3c:5d:f5:12:
ee:fe:49:42:40:e1:df:ab:63:bf:e5:c0:06:cd:0d:00:18:1d:
fa:4b:a9:0f:86:1a:2b:f5:c6:2b:b0:60:6e:f7:a0:4f:dc:b9:
41:60:44:6b:ba:14:73:a9:65:26:c7:e5:d7:9b:23:d0:5b:6e:
70:4c:66:ef:25:d0:07:80:20:be:fb:2a:86:72:e7:e6:5d:ac:
60:e2:af:98:5e:59:3e:16:bc:0d:a7:ba:78:a0:a9:a6:b0:52:
ea:1b:2a:68:6b:4a:b6:7d:39:89:ad:dc:9d:cf:c7:17:1f:3c:
61:2e:5e:be:14:bf:23:e5:93:f6:73:c6:78:ab:9d:dc:b2:ee:
f7:f2:65:e8:0a:4b:58:fd:a8:d9:a5:c0:58:14:38:88:42:1b:
67:ec:c2:6d:12:34:3d:21:64:33:1a:ef:b2:45:34:d6:4d:fb:
bd:b0:12:3d:67:7f:d2:cf:ef:4c:7f:20:ca:30:19:50:12:69:
bc:77:00:c4:8d:51:1f:83:c4:bf:85:0c:8c:11:56:b8:b5:7b:
ee:75:f0:5c:45:54:8a:ec:e2:74:cd:79:7a:60:ec:f0:c8:69:
81:27:9b:70:77:51:72:c0:b8:d0:bc:83:ff:88:2d:78:08:13:
32:88:35:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:40:06 2025 by rpki-client