Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/0WQj8QemIBciuFnlyaSJVTdGUdU.roa
File: 0WQj8QemIBciuFnlyaSJVTdGUdU.roa (raw, json)
Hash identifier: LS155yvZy02luu5sI2m9w8KT1/NKNOmHDX5satp4W7M=
Subject key identifier: D1:64:23:F1:07:A6:20:17:22:B8:59:E5:C9:A4:89:55:37:46:51:D5
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0193E2FCE1EF4062B81CCA2AA4AEE9E83D46
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/0WQj8QemIBciuFnlyaSJVTdGUdU.roa
Signing time: Fri 20 Dec 2024 07:34:03 +0000
ROA not before: Fri 20 Dec 2024 07:34:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 151797
IP address blocks: 149.126.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e2:fc:e1:ef:40:62:b8:1c:ca:2a:a4:ae:e9:e8:3d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Dec 20 07:34:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d16423f107a6201722b859e5c9a48955374651d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:52:b5:1c:75:3d:76:cb:65:cc:5f:3b:e9:c7:
64:a7:a4:83:17:49:cb:a1:a3:cf:53:00:32:69:19:
08:94:57:81:df:99:2d:14:66:1b:05:36:5a:42:da:
c3:b0:83:1b:9e:0c:50:ea:ac:9b:b5:73:9f:22:9b:
57:a6:7b:99:f6:7a:d6:4c:6c:f4:87:0d:8c:63:37:
f2:8e:a2:a8:9a:16:eb:dd:ef:52:62:2d:6c:e5:3c:
94:f1:b1:46:9d:4f:ec:63:d7:4b:e3:78:cd:6d:5c:
98:08:5e:fc:cd:18:be:f4:73:d4:7b:b9:56:e3:0d:
9e:c3:36:5c:9f:f4:69:55:ea:f8:05:9d:84:6a:82:
64:19:7a:87:8b:96:51:00:b8:1f:00:66:d6:a8:7a:
c0:e8:68:1e:e8:55:68:28:61:d7:a9:04:ef:8b:18:
2b:a7:ed:04:27:77:70:5a:83:e0:2f:60:81:04:71:
5e:ef:64:64:29:6f:c2:33:d1:d0:78:bf:3d:bc:a6:
c2:71:af:a2:0b:98:76:e2:6d:93:68:1e:9c:2b:51:
ba:b9:a1:74:b7:67:a9:86:2d:4e:da:f8:3d:ab:d9:
f5:3f:b0:d7:14:af:7a:51:d0:ed:19:f4:eb:af:74:
83:5e:3c:8f:3d:d2:9f:ff:aa:3a:a0:39:e8:09:3d:
2d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:64:23:F1:07:A6:20:17:22:B8:59:E5:C9:A4:89:55:37:46:51:D5
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/0WQj8QemIBciuFnlyaSJVTdGUdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.232.0/22
Signature Algorithm: sha256WithRSAEncryption
16:23:39:65:ac:32:28:49:88:cb:97:94:25:9c:f0:cc:86:e9:
c3:a0:b0:fa:c0:e0:91:63:13:96:18:3c:3c:62:dc:37:a5:e6:
b3:d7:4e:99:fd:50:83:e5:01:fd:18:fb:78:7e:bf:ec:d7:6d:
4f:ef:17:2a:37:c9:f2:a4:3b:d8:a2:71:56:8d:fb:86:4f:4b:
ff:c3:4a:ae:cb:c0:72:78:bd:32:6b:4c:76:78:45:d5:e6:a2:
e5:ab:56:3d:67:5c:5f:cd:13:66:0b:03:42:66:a1:3a:12:36:
5c:fd:f0:fa:a9:0b:f3:40:f6:e7:b1:43:74:72:ec:43:44:d1:
8e:2e:fc:30:2e:3c:7b:da:86:94:78:d8:f4:bf:c0:2f:bf:fb:
7d:57:ee:f6:0b:40:55:ef:45:f7:4b:95:e6:bc:62:fc:1c:55:
0e:a9:21:77:53:ed:c8:3f:49:f9:95:3d:39:e9:52:a9:40:27:
2f:ee:bf:32:30:f7:90:31:cd:9c:4b:81:c2:6c:8b:83:bb:c4:
6d:ca:78:c0:95:6c:5d:1d:52:e8:25:b7:33:c8:8f:00:b0:78:
2c:ff:32:cc:a3:81:ac:74:a9:92:1e:9d:32:8e:8f:fd:98:4d:
5c:9d:19:c8:23:6b:d0:29:d0:c1:c6:00:1e:d5:42:e2:80:03:
69:0d:2f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:26 2025 by rpki-client