Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/B1ISv-Kf-5PUisT2gyLv2XYkvjw.roa
File: B1ISv-Kf-5PUisT2gyLv2XYkvjw.roa (raw, json)
Hash identifier: 3ik0XgTWkElheFZaSrdL6eLU8X8BcdX4LgQzL5ujWDs=
Subject key identifier: 07:52:12:BF:E2:9F:FB:93:D4:8A:C4:F6:83:22:EF:D9:76:24:BE:3C
Certificate issuer: /CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Certificate serial: 018FF2E4BBE995D9FAD20FABD76DD41FA3CB
Authority key identifier: 44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/B1ISv-Kf-5PUisT2gyLv2XYkvjw.roa
Signing time: Fri 07 Jun 2024 13:30:27 +0000
ROA not before: Fri 07 Jun 2024 13:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49747
IP address blocks: 188.64.141.0/24 maxlen: 24
2001:67c:c6c::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Jun 2024 12:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f2:e4:bb:e9:95:d9:fa:d2:0f:ab:d7:6d:d4:1f:a3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Validity
Not Before: Jun 7 13:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=075212bfe29ffb93d48ac4f68322efd97624be3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:ac:06:33:73:78:8b:75:a4:1e:bf:9b:ee:
6d:fe:56:57:35:51:23:69:b2:72:04:21:f2:7e:ab:
43:cd:d8:8f:0c:be:e3:0c:fb:6f:2f:81:39:8b:b5:
5a:92:a6:a8:c6:48:3b:4a:09:5f:33:ba:c8:68:c1:
4d:d2:2f:c7:d3:62:51:84:34:70:bd:74:32:32:ea:
43:2a:03:11:ae:8b:cf:2e:1a:f6:35:eb:97:9f:5a:
17:cd:33:03:8d:7f:7c:6e:b7:1a:e9:d8:27:bf:e5:
cd:5b:b8:c7:11:0f:4f:db:c6:e4:dc:6b:a1:8e:89:
85:5e:de:57:f0:5f:26:02:2a:9c:b6:c1:97:40:5e:
32:3f:67:4e:64:09:43:11:b0:d9:5f:c2:c2:6c:83:
8a:a1:10:81:31:c7:93:6d:9d:4a:19:b2:ab:87:aa:
f6:ae:81:02:18:23:bf:c6:57:cb:42:37:d4:e1:d1:
be:08:e4:97:0b:ce:34:7a:9b:b2:60:22:f5:7d:5d:
b0:75:ad:11:fa:3c:77:8f:b0:7c:4f:b1:41:a9:55:
c2:8d:5d:0e:f5:20:ca:f8:6b:99:5f:b5:12:ae:98:
d1:f6:c2:29:98:52:09:7e:12:71:55:a0:ce:47:33:
58:30:39:36:4b:22:e2:4e:7a:d6:74:b8:cc:5b:39:
a8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:52:12:BF:E2:9F:FB:93:D4:8A:C4:F6:83:22:EF:D9:76:24:BE:3C
X509v3 Authority Key Identifier:
keyid:44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/B1ISv-Kf-5PUisT2gyLv2XYkvjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.141.0/24
IPv6:
2001:67c:c6c::/48
Signature Algorithm: sha256WithRSAEncryption
05:07:26:b8:aa:d8:f0:75:22:7f:96:50:0f:23:be:f1:87:c1:
e5:0c:8f:3d:e5:76:0c:ff:0e:29:35:c9:55:70:1e:9f:96:5d:
df:54:34:82:81:1d:a0:95:97:3c:1a:7a:82:83:f1:be:9e:de:
01:1f:9c:76:77:f5:a7:aa:22:62:4e:aa:db:83:db:b8:b7:0d:
1c:9b:b5:80:c1:1b:39:96:21:31:53:ff:3c:4b:aa:30:b1:cf:
b8:95:cf:58:fc:92:3b:b0:a7:80:c8:c9:5a:a5:78:8b:a5:eb:
71:d1:99:28:0b:27:67:1d:92:42:60:d6:3b:f8:7d:de:b2:d0:
b8:29:20:d8:60:d1:6b:ff:a7:84:a7:ef:52:ac:0e:31:6a:09:
5b:c2:f1:8f:2c:6e:d7:37:ce:47:3c:1e:cf:2a:c9:e9:b9:63:
9c:28:5b:5a:d4:83:a2:c9:71:a1:fe:99:75:d3:79:1c:69:19:
60:c6:ea:d1:fa:dd:8d:22:86:67:00:89:5d:76:34:24:30:d2:
31:5b:79:fa:49:92:7b:38:5d:09:ba:37:3d:73:e4:b2:64:b1:
14:47:9d:27:93:57:c1:33:30:02:27:51:3a:a8:c6:ae:30:e0:
79:49:9d:4f:54:3a:11:61:dd:92:ef:de:99:f8:51:cc:c3:92:
fa:85:32:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:23:16 2025 by rpki-client