Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/_51ANrOhpJUAMgD23GYEQnQdjjM.roa
File: _51ANrOhpJUAMgD23GYEQnQdjjM.roa (raw, json)
Hash identifier: Dzs+IxQ5ygUd8ZCnPlJ/KdfopJldkKt60seHyjjhbAc=
Subject key identifier: FF:9D:40:36:B3:A1:A4:95:00:32:00:F6:DC:66:04:42:74:1D:8E:33
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 0194404210A7F76CD6604C8587E569CC12B2
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/_51ANrOhpJUAMgD23GYEQnQdjjM.roa
Signing time: Tue 07 Jan 2025 10:14:19 +0000
ROA not before: Tue 07 Jan 2025 10:14:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203020
IP address blocks: 45.142.24.0/24 maxlen: 24
185.233.124.0/22 maxlen: 32
Validation: Failed, certificate revoked on Tue 21 Jan 2025 13:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:40:42:10:a7:f7:6c:d6:60:4c:85:87:e5:69:cc:12:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jan 7 10:14:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff9d4036b3a1a495003200f6dc660442741d8e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:53:1a:6e:1b:25:f7:3c:10:e6:90:0d:90:e3:
00:94:16:da:50:63:9d:cd:50:7d:6a:9d:06:58:06:
42:b1:a6:e0:ab:68:2f:37:32:78:13:48:b7:11:93:
e0:43:9e:9f:ca:e4:67:b2:13:51:32:36:bf:5a:f4:
b3:9a:cc:74:8c:2f:bf:90:00:0d:e1:f5:2c:03:cb:
65:25:e5:65:a2:ca:63:58:e8:55:62:1e:85:b0:7c:
42:aa:70:3d:76:cb:d4:8a:35:e6:4a:b7:49:de:60:
7f:7d:d0:ac:eb:e7:79:36:5b:82:9c:d2:5e:63:2f:
54:c9:a9:7a:19:e4:1e:34:d4:82:df:3b:d6:5c:d4:
53:e9:0a:47:43:9e:cb:2b:8e:96:5f:1b:ee:8e:9a:
21:72:c8:86:bf:92:10:52:56:d5:72:4f:70:4f:94:
65:3f:74:56:60:b6:e1:b8:40:7f:03:33:62:39:8b:
69:b8:d8:34:df:88:a5:64:43:1c:18:4c:fa:42:18:
74:73:dc:21:9f:7e:91:b9:a7:e3:5a:d9:65:d9:ff:
d3:c5:aa:f8:d3:a2:28:ef:f4:03:3a:37:f6:50:40:
c3:bd:89:6c:e9:09:db:9b:17:d4:9d:b2:af:ef:02:
40:ee:0d:73:ae:0b:68:c8:26:d2:cb:3e:33:57:e0:
fe:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9D:40:36:B3:A1:A4:95:00:32:00:F6:DC:66:04:42:74:1D:8E:33
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/_51ANrOhpJUAMgD23GYEQnQdjjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.24.0/24
185.233.124.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:39:c6:5f:c8:7e:e4:8d:e1:51:47:b7:15:62:57:d5:62:23:
48:09:3c:83:16:76:c5:97:0f:4f:9d:6d:5e:a9:18:f3:96:97:
5c:fa:a8:5c:7f:e8:5a:ae:22:a9:c0:f4:63:be:82:2b:f5:fa:
7d:7a:fc:86:0e:fd:d7:66:fd:3e:c7:22:0e:af:f8:46:54:1c:
8f:19:64:fa:50:fd:f2:af:92:a1:13:96:34:fd:10:17:47:43:
5b:bc:cc:6b:23:a5:70:82:d7:08:62:a8:b2:73:a4:61:79:19:
01:53:52:95:e3:82:82:c2:60:6d:d1:96:32:d2:5a:14:3c:12:
8b:2d:c7:88:06:67:f1:32:f4:36:1e:2f:98:fe:50:0b:b5:b8:
34:b4:03:56:2b:29:d5:31:c7:73:ee:09:fe:98:8a:1e:af:65:
1e:e7:0d:e4:d7:9b:d7:8a:d3:f5:06:35:f6:12:63:03:4d:81:
a0:d2:c9:02:80:9b:64:19:17:42:b7:51:8d:7d:b9:74:0f:c7:
d0:3d:e8:07:0c:f0:ff:05:96:af:12:b7:98:06:4d:9e:3d:56:
57:46:98:49:bd:1b:2e:db:2d:c0:a4:58:df:f3:5f:0e:88:c5:
1c:df:c8:4c:d2:e1:64:1b:9f:be:bf:1d:20:d7:0b:3b:be:b9:
50:d3:e7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:24 2025 by rpki-client