Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/PrKmRFe8MPfFStG95dnmQhtiAT4.roa
File: PrKmRFe8MPfFStG95dnmQhtiAT4.roa (raw, json)
Hash identifier: 2It/JHDEK+e24dsw1dCnW4pAxyVe/Ju83edYJedi4bU=
Subject key identifier: 3E:B2:A6:44:57:BC:30:F7:C5:4A:D1:BD:E5:D9:E6:42:1B:62:01:3E
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0193E2FBF7C179BF2E3B859C53C8BC667B01
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/PrKmRFe8MPfFStG95dnmQhtiAT4.roa
Signing time: Fri 20 Dec 2024 07:33:03 +0000
ROA not before: Fri 20 Dec 2024 07:33:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140042
IP address blocks: 149.126.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e2:fb:f7:c1:79:bf:2e:3b:85:9c:53:c8:bc:66:7b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Dec 20 07:33:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3eb2a64457bc30f7c54ad1bde5d9e6421b62013e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:ec:cd:49:89:ed:dc:b5:66:19:77:29:37:
66:f9:c3:a9:70:47:92:6c:ab:21:8b:62:56:1a:61:
8b:5d:6b:4a:26:fa:1f:5c:1e:06:86:78:85:b5:12:
ed:54:5f:48:36:9b:df:52:12:64:e8:00:b3:11:36:
c8:11:d3:fe:bc:59:b9:e0:16:51:d1:e2:64:91:3e:
cf:11:9e:0f:b8:d5:41:96:36:07:3a:51:65:65:8d:
d6:5f:11:79:72:f4:31:dd:c1:f2:f8:70:3c:c8:e9:
6c:79:bd:c2:a1:e1:4c:c5:a6:e2:76:f2:52:17:31:
ad:60:4a:e5:bc:b3:a6:72:c1:45:be:70:d7:6c:14:
0b:95:1d:c4:a9:a9:17:84:09:0e:8b:60:e6:de:26:
e6:42:e7:58:a8:b7:5e:b3:51:e1:2d:02:38:d9:8e:
2a:95:83:63:87:87:30:96:8d:3e:97:47:f1:43:ef:
02:d4:13:55:e0:c0:2d:68:b6:df:61:5b:42:77:ce:
c0:97:7e:8a:09:4a:70:07:e1:f9:aa:60:39:03:78:
50:6d:e7:69:1f:a5:6a:43:48:0c:80:32:7f:07:62:
66:9c:5e:2f:7d:30:28:4a:4a:be:e3:ba:9c:a0:75:
1e:b6:f3:64:67:1c:d3:f2:d1:e7:16:35:ad:ef:b3:
20:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B2:A6:44:57:BC:30:F7:C5:4A:D1:BD:E5:D9:E6:42:1B:62:01:3E
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/PrKmRFe8MPfFStG95dnmQhtiAT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.232.0/22
Signature Algorithm: sha256WithRSAEncryption
92:29:5f:48:e8:59:b9:e6:a3:c6:8e:b2:4f:13:31:a6:a8:b5:
5d:8f:33:9b:a0:72:f7:93:59:17:96:d6:be:b4:5b:6a:f0:76:
94:52:d8:9c:ee:c5:a5:32:98:98:b2:71:59:90:3f:dd:72:e0:
7b:17:5b:14:47:6b:14:a4:dd:24:bb:b2:42:0a:5b:b5:14:42:
9c:ce:50:7f:c5:21:0c:08:12:68:cc:58:da:84:7f:84:44:f2:
ff:94:f8:a9:93:9d:4f:66:fe:47:73:b5:35:8f:45:b4:e3:d6:
75:92:1a:3e:3b:f0:9e:b9:93:6e:85:d4:16:5b:e7:35:17:39:
47:49:d3:73:4a:e2:09:bf:57:43:f1:92:17:03:7a:53:f9:f8:
2a:20:02:8d:09:55:9c:d3:2e:4d:c0:69:5c:90:91:01:d5:9a:
55:11:a6:40:fd:ba:5d:e4:11:bd:40:49:fa:df:f3:3d:2a:16:
8f:25:a9:88:f2:16:3e:dd:17:85:b9:96:d2:50:e0:f8:2d:b2:
2c:fe:87:91:24:db:75:21:48:cb:7f:1a:a9:ad:68:18:ae:8c:
6e:53:ba:4b:01:8a:5f:fe:35:40:72:c1:ee:56:74:1a:92:76:
49:df:49:37:22:3e:7d:fc:d6:e6:74:fc:7e:c3:84:e8:a9:85:
48:4c:19:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:55 2025 by rpki-client