Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/AVwlxre407hdrcWc-UtpPinn-1c.roa
File: AVwlxre407hdrcWc-UtpPinn-1c.roa (raw, json)
Hash identifier: Q+jIxHERuEWs3+3J0/GfP6c5lhv4IlGxtSv+gE2tzG8=
Subject key identifier: 01:5C:25:C6:B7:B8:D3:B8:5D:AD:C5:9C:F9:4B:69:3E:29:E7:FB:57
Certificate issuer: /CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
Certificate serial: 019358DC9006753158F69DA0E387E2CC9688
Authority key identifier: F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/AVwlxre407hdrcWc-UtpPinn-1c.roa
Signing time: Sat 23 Nov 2024 11:51:09 +0000
ROA not before: Sat 23 Nov 2024 11:51:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 195.225.128.0/23 maxlen: 23
195.225.130.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:dc:90:06:75:31:58:f6:9d:a0:e3:87:e2:cc:96:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
Validity
Not Before: Nov 23 11:51:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=015c25c6b7b8d3b85dadc59cf94b693e29e7fb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:35:98:15:f1:6e:49:12:31:c3:d8:74:5e:b6:
be:60:c2:ba:99:27:62:d4:e4:3f:5e:1a:e9:14:d5:
36:ba:43:6f:6a:53:7d:18:0a:a1:65:83:9b:fb:8c:
2a:76:61:f5:55:23:99:07:d1:a9:c2:c5:19:1c:23:
84:07:c7:4d:f8:4d:17:ab:50:7b:05:53:eb:09:6b:
2e:72:8c:14:6b:ad:f1:e0:d0:bf:28:14:36:4d:9f:
41:39:6d:f9:2a:7a:cc:73:28:3d:ba:75:3a:01:bf:
56:0a:ee:b5:1a:f2:98:89:f5:dc:57:2f:d5:0f:00:
1b:bd:2e:b9:31:5e:05:f9:35:14:6c:7c:df:33:8d:
83:2b:fb:07:a5:fb:e1:6c:38:fa:43:15:93:1c:9d:
8c:4f:ed:61:85:25:22:cc:a8:91:3a:5e:87:49:73:
d2:2a:df:02:6c:51:0c:7f:8f:7c:03:0a:ec:59:81:
3a:18:93:71:d2:d4:7f:60:8c:90:0e:47:73:ed:04:
15:91:03:86:34:59:56:03:80:e1:aa:6d:b5:4c:39:
68:d9:7f:42:92:f7:34:09:62:9f:a3:7d:d5:c3:75:
e8:7c:69:77:4b:bd:6e:5a:13:fa:3b:79:d9:92:b1:
8b:11:f1:cb:82:d5:d9:5d:d5:f9:00:a2:c7:8c:f5:
14:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5C:25:C6:B7:B8:D3:B8:5D:AD:C5:9C:F9:4B:69:3E:29:E7:FB:57
X509v3 Authority Key Identifier:
keyid:F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/AVwlxre407hdrcWc-UtpPinn-1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.128.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:f6:85:25:19:e6:2d:b8:f9:45:10:1b:ca:4f:68:fd:7d:51:
4c:85:5b:d3:4e:d4:d4:82:f9:87:2a:13:92:95:5f:39:a8:18:
c6:c5:6e:71:06:48:f3:96:11:62:c9:d9:b3:25:e4:5f:8c:d3:
37:dc:73:49:52:22:5a:93:29:d6:cb:9f:43:bf:cc:e4:f4:bd:
e3:1d:c9:41:3f:21:37:04:c8:1c:9f:f4:92:25:9c:e9:22:84:
5d:7f:0b:89:07:c5:b3:9b:a7:d4:47:ec:0a:eb:05:92:19:9e:
1f:71:92:38:e3:b7:0f:c1:26:c3:ef:6f:92:fb:60:d3:5c:0b:
10:d0:1f:3b:80:29:24:69:8a:1b:77:36:1d:5e:b6:43:75:d5:
32:cc:00:42:96:66:63:9a:09:21:55:8e:74:ee:6f:2f:12:48:
96:74:af:b0:31:70:1a:71:8d:93:fb:c6:5a:29:23:47:82:a7:
20:f7:67:dc:b9:fe:09:fa:ef:79:8e:9e:91:94:4a:27:12:3e:
0d:d1:b2:8c:95:dc:af:b3:be:89:bd:dc:f5:92:e4:f0:f4:a5:
d7:85:46:71:62:9a:cd:b3:ee:76:10:db:63:65:dd:12:b5:34:
b2:25:fe:ac:3b:2e:8e:19:8d:e6:6c:1f:8f:be:5b:28:f0:7c:
2b:a0:ee:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:49 2025 by rpki-client