Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/C_uShZxNWB3vYvLMZwIc2RAuwLo.roa
File: C_uShZxNWB3vYvLMZwIc2RAuwLo.roa (raw, json)
Hash identifier: ThaoDi0GzxNexmKykZVlLdB9wmsFmRvsPHSGCMlZECU=
Subject key identifier: 0B:FB:92:85:9C:4D:58:1D:EF:62:F2:CC:67:02:1C:D9:10:2E:C0:BA
Certificate issuer: /CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Certificate serial: 0193DF39E245DE5F4A93ACA61AAC7DB79D42
Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/C_uShZxNWB3vYvLMZwIc2RAuwLo.roa
Signing time: Thu 19 Dec 2024 14:02:12 +0000
ROA not before: Thu 19 Dec 2024 14:02:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133210
IP address blocks: 194.15.115.0/24 maxlen: 24
194.62.244.0/23 maxlen: 23
194.62.246.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:df:39:e2:45:de:5f:4a:93:ac:a6:1a:ac:7d:b7:9d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Validity
Not Before: Dec 19 14:02:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bfb92859c4d581def62f2cc67021cd9102ec0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b7:5e:a5:c3:93:8d:5e:3e:5c:e6:0f:e1:62:
a7:2d:8c:dd:71:2e:df:ed:d2:58:00:4e:ae:e4:da:
2e:89:c7:96:5f:f0:b7:52:e2:90:e4:ba:58:08:5e:
a4:25:04:25:96:6d:01:87:ae:1e:92:69:ee:c9:69:
9e:48:82:db:9c:30:dc:a3:1b:93:fc:b9:a8:18:6c:
a5:19:f5:f8:2a:c3:24:f9:51:9f:41:e7:8e:d8:80:
fb:6a:16:35:6e:6e:83:a6:98:32:93:e4:2f:00:15:
2a:c4:8d:68:40:07:a0:1a:8a:8a:d4:08:d7:39:61:
a8:79:45:f8:47:ea:68:15:aa:7e:77:0e:94:b8:95:
ba:f0:d3:47:0d:fd:76:ac:82:f0:63:37:5b:41:43:
15:ab:ec:9d:5e:68:93:c5:a2:60:a0:1b:30:36:14:
62:0c:f8:e1:89:78:ef:56:58:cb:64:ab:82:19:e8:
ad:11:c9:fe:d6:09:d5:37:b7:54:4f:15:03:a7:42:
69:cd:ad:a9:71:c7:de:ae:ab:14:3d:ca:21:6c:53:
b1:06:88:f5:a8:3f:0e:42:2b:30:db:a9:5b:7e:1e:
2d:18:7e:a3:41:6a:a7:e2:83:f1:7c:47:dd:9d:fb:
e9:5a:fb:58:cd:fc:33:56:e8:6a:79:15:30:7e:72:
b4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FB:92:85:9C:4D:58:1D:EF:62:F2:CC:67:02:1C:D9:10:2E:C0:BA
X509v3 Authority Key Identifier:
keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/C_uShZxNWB3vYvLMZwIc2RAuwLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.115.0/24
194.62.244.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:fa:fa:e8:ca:da:74:9a:70:ae:46:76:43:af:27:ab:ff:a7:
a9:c0:54:8c:1e:bd:1d:be:e6:e1:85:4e:ed:1c:50:61:fb:cb:
42:2c:37:88:cd:a2:c0:ee:50:78:7a:6a:3d:ff:89:a3:e2:33:
14:2c:74:8c:65:ea:08:47:58:66:4c:7f:25:28:83:2d:60:e1:
c0:09:98:1c:7d:79:ec:3f:52:db:1d:dc:87:4f:14:c3:a6:24:
28:33:fa:17:8a:ca:c6:19:17:84:e1:80:32:d9:04:cd:ac:84:
b6:86:63:95:b3:54:e4:b9:32:f1:7c:91:22:d8:88:f1:ec:eb:
79:7a:af:98:d4:e6:82:0f:94:94:01:e9:1a:a1:c3:7e:94:5f:
1f:56:1e:ca:f5:c1:b5:a5:8a:e0:4f:87:80:5d:11:f0:d8:f8:
68:73:18:bc:69:78:2a:d7:ad:70:e8:38:06:7f:bd:31:da:5f:
9c:69:85:ec:99:80:59:7f:36:1b:f0:6b:19:a5:f3:c2:48:55:
86:76:5b:25:19:62:f9:c0:ef:5f:af:a8:6b:ae:8f:0d:eb:19:
87:0d:f9:ea:65:d4:2f:42:10:0b:66:3a:f9:92:4f:41:31:fa:
b6:cc:59:3e:2d:c4:1b:85:1c:68:e8:4b:4a:0e:5d:cf:cf:b6:
00:5c:37:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:11:42 2025 by rpki-client