Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/pH5-pJ5lzxRXupAGSuoZdHNqgXc.roa
File: pH5-pJ5lzxRXupAGSuoZdHNqgXc.roa (raw, json)
Hash identifier: Sd6m+i33btxrWhX57PpsIjag/iKKTIahxhRHBFknVfA=
Subject key identifier: A4:7E:7E:A4:9E:65:CF:14:57:BA:90:06:4A:EA:19:74:73:6A:81:77
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0191BD58DBE61F6AE22C1FC8F7A643337210
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/pH5-pJ5lzxRXupAGSuoZdHNqgXc.roa
Signing time: Wed 04 Sep 2024 14:03:22 +0000
ROA not before: Wed 04 Sep 2024 14:03:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44620
IP address blocks: 194.87.246.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 14:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bd:58:db:e6:1f:6a:e2:2c:1f:c8:f7:a6:43:33:72:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 4 14:03:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a47e7ea49e65cf1457ba90064aea1974736a8177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c8:d0:7b:46:0a:d6:c9:30:54:48:5b:00:94:
56:61:b0:45:e2:e3:0f:55:10:ec:63:aa:5b:e8:36:
b3:db:d4:08:70:43:29:fb:43:0a:61:77:21:87:f8:
ab:a0:9b:3d:72:e1:61:e6:24:79:f2:1a:b2:b7:11:
49:c9:74:90:13:70:16:da:13:fd:43:47:b6:34:25:
85:c7:21:ab:b2:13:73:14:0c:9e:3e:7b:37:3d:ff:
35:55:b7:2b:cf:77:a0:a1:2f:0e:12:ac:16:4a:d8:
56:79:2b:43:57:cc:7d:6b:fd:a5:b5:72:92:b3:1e:
e8:4e:44:0d:23:e6:68:e1:93:3d:5d:e7:ff:69:31:
94:dd:36:dc:a8:95:52:20:f1:75:a7:12:14:89:70:
3a:e7:63:d5:45:39:8c:7f:59:e5:f3:23:c9:77:64:
56:fb:20:9d:53:0c:f1:e9:3f:6c:38:06:a2:96:ef:
af:39:e3:21:d0:9c:f3:32:52:1e:47:7f:fc:62:fb:
91:fe:8f:73:21:94:68:6c:0b:92:84:29:33:31:8a:
7c:99:26:df:0f:d9:73:12:e5:e7:e5:c1:05:c1:5a:
0e:e6:a7:3a:a0:19:2f:6b:5e:d0:b2:29:1f:7c:4c:
0a:33:69:25:b0:7d:33:ba:bd:30:6e:ac:72:b1:1a:
49:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7E:7E:A4:9E:65:CF:14:57:BA:90:06:4A:EA:19:74:73:6A:81:77
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/pH5-pJ5lzxRXupAGSuoZdHNqgXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.246.0/24
195.133.76.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:c4:ea:ef:6b:f3:11:f6:25:d0:1d:f4:c2:b3:52:ea:f2:bb:
80:af:62:0c:3f:ef:41:45:18:69:87:40:7e:f1:7e:3f:de:a3:
0f:ee:43:86:43:e4:25:7b:69:f0:36:75:9b:e6:1e:c9:dd:d9:
59:0d:54:21:1b:d4:ce:7b:8b:fb:5c:c6:7e:f6:b1:38:44:18:
8d:b2:80:e7:ba:ba:24:90:02:6d:96:6d:3a:61:6b:3c:c9:d1:
97:ea:57:0a:e5:9e:24:c2:3b:5d:8d:9b:a2:d0:7a:9c:bd:cd:
0c:58:b4:15:de:49:aa:1f:63:d9:76:b3:35:42:b1:ca:e6:21:
db:1b:f4:91:69:08:94:97:cd:58:f2:d6:b0:a6:8f:57:be:f1:
80:95:d8:17:3f:10:ab:25:8b:83:32:0c:85:d4:9e:01:e8:22:
2e:af:41:eb:9a:31:15:08:1a:92:b8:31:c4:a8:0d:e1:14:e8:
08:72:34:8e:33:7e:6b:ec:8d:7e:d7:c5:63:ae:86:8a:ea:7e:
45:1a:12:16:c1:74:b7:55:5f:ab:7b:b6:06:a2:dd:12:6e:fb:
a8:09:fe:30:57:76:82:f6:46:c4:67:b3:25:00:cf:1e:d0:8f:
28:51:81:a3:fa:f5:af:05:0e:6c:08:43:5e:0b:e1:b2:85:d6:
ab:7b:c5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:14:04 2025 by rpki-client