Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1t-U8a9Teua0VgIP2uhK2-9YTng.roa
File: 1t-U8a9Teua0VgIP2uhK2-9YTng.roa (raw, json)
Hash identifier: VsZF8vGrwCQAq8tHJFJNHOAkirCSZPH69k72BYdqjRU=
Subject key identifier: D6:DF:94:F1:AF:53:7A:E6:B4:56:02:0F:DA:E8:4A:DB:EF:58:4E:78
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01934D690C6033A8FDA9678BDC1BF36DDCF2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1t-U8a9Teua0VgIP2uhK2-9YTng.roa
Signing time: Thu 21 Nov 2024 06:29:10 +0000
ROA not before: Thu 21 Nov 2024 06:29:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207388
IP address blocks: 192.145.28.0/22 maxlen: 24
193.168.198.0/24 maxlen: 24
212.87.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Nov 2024 07:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4d:69:0c:60:33:a8:fd:a9:67:8b:dc:1b:f3:6d:dc:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 21 06:29:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6df94f1af537ae6b456020fdae84adbef584e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0f:46:1e:84:ac:cd:db:8d:04:2a:9d:4b:f3:
1c:d3:8c:da:21:3e:75:f5:87:e3:3b:97:32:b4:18:
9c:f8:cb:77:c3:27:62:65:dd:8f:0c:f5:0b:89:72:
a7:da:af:0b:dd:e3:46:5d:84:a3:6f:23:d2:6c:63:
26:8c:a6:b5:cb:b6:cd:48:74:38:19:a3:ad:c7:15:
00:59:db:3e:a8:4d:41:32:9d:ca:f5:6b:bb:6a:91:
bf:07:26:94:ff:3e:1b:d4:ae:03:36:db:f4:3e:d3:
08:0e:e3:63:c1:ed:31:ed:d3:33:0d:f6:e5:01:ae:
ac:0c:8e:83:cc:e8:c8:8b:78:7a:e3:3e:59:a3:53:
44:fd:cc:43:b3:02:66:2f:f6:d0:17:76:cd:10:c4:
c1:ea:63:d3:8c:81:da:60:8f:2f:f5:ad:ec:8a:9c:
50:02:c1:f6:98:38:15:b7:2f:db:4b:6a:70:f1:e0:
e1:93:33:53:5d:58:11:f7:38:4c:40:7c:1b:65:07:
d6:a3:93:ce:9c:03:30:c9:34:eb:24:c3:6e:fa:33:
f4:d8:5d:f3:77:6c:cf:82:7a:37:3b:9f:a4:4c:ba:
2a:4e:61:07:55:ad:b2:c4:0e:d8:1e:26:15:80:4d:
7d:e3:dc:27:4b:49:29:d7:50:b4:cb:32:a9:10:63:
46:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DF:94:F1:AF:53:7A:E6:B4:56:02:0F:DA:E8:4A:DB:EF:58:4E:78
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1t-U8a9Teua0VgIP2uhK2-9YTng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.28.0/22
193.168.198.0/24
212.87.223.0/24
Signature Algorithm: sha256WithRSAEncryption
92:a8:ab:65:a5:da:51:bb:81:64:0d:6b:0b:a6:d7:c0:b5:e3:
cf:74:1d:58:19:5d:14:2d:39:04:92:a2:c7:b8:e4:1c:6a:08:
f9:26:89:ea:06:38:e2:f6:48:6b:f7:3a:f2:d0:e4:b8:3f:25:
78:c5:e2:d2:de:95:40:be:22:c9:e3:26:a1:7e:78:b3:d7:cc:
6e:94:36:f6:ef:dd:2c:2a:93:c1:d0:6e:2b:02:27:03:cd:3b:
72:4a:52:d9:ae:c8:54:04:29:4e:a7:9f:25:f0:b9:9a:eb:bf:
f6:64:cd:5a:dc:5d:61:1c:a9:b5:44:e7:d4:bf:75:21:f3:d1:
78:d6:ea:33:1f:73:12:8b:9f:87:7f:71:4d:c4:6e:ec:73:2e:
55:47:e9:4c:3c:1f:d9:90:85:e4:09:4b:d0:a7:90:31:b0:bf:
ac:15:4c:f9:1e:68:16:18:e1:86:30:cb:3c:f6:50:27:fe:93:
e7:bc:89:d3:f3:3c:36:f9:59:f0:0f:bb:1e:bd:fb:33:31:da:
b6:ce:27:ec:e1:a8:2c:76:2e:7b:cc:b6:a9:d1:16:52:a2:f7:
18:b3:cd:b0:86:93:97:f4:7f:84:61:f5:f4:43:55:b6:3c:52:
ad:99:d0:14:db:b4:59:15:69:85:ae:03:f4:69:9c:29:66:50:
54:f4:c0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:14 2025 by rpki-client