Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/rPFtUULWA-TO0xI7jcKzWdnv2YQ.roa
File: rPFtUULWA-TO0xI7jcKzWdnv2YQ.roa (raw, json)
Hash identifier: Ox/0TByajLrgBw0tXJB+jlEnpsKJBCsvXdyS26rsrGM=
Subject key identifier: AC:F1:6D:51:42:D6:03:E4:CE:D3:12:3B:8D:C2:B3:59:D9:EF:D9:84
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0194206859740A38BC22C6A509FEDB03C0C0
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/rPFtUULWA-TO0xI7jcKzWdnv2YQ.roa
Signing time: Wed 01 Jan 2025 05:48:17 +0000
ROA not before: Wed 01 Jan 2025 05:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213893
IP address blocks: 147.45.198.0/24 maxlen: 24
147.45.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Feb 2025 14:42:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:59:74:0a:38:bc:22:c6:a5:09:fe:db:03:c0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acf16d5142d603e4ced3123b8dc2b359d9efd984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3b:a1:a4:b7:8e:94:15:fa:d2:fb:ee:b9:eb:
8d:a4:08:4a:c1:fc:bb:3f:29:2a:8c:33:81:81:c7:
2e:3e:35:fe:a9:86:7b:af:42:68:f6:d4:0a:3e:61:
31:01:dc:80:fc:b5:87:85:64:cd:a7:fc:49:2e:e6:
49:74:46:f1:c3:11:33:19:20:87:1c:39:87:7a:a4:
54:2c:36:2f:55:fd:08:ec:32:2e:79:b9:69:ba:06:
37:fc:e4:cc:22:9f:89:df:dd:a4:3a:11:8a:22:20:
7d:ad:1c:73:fc:d8:cd:fa:50:98:49:a1:19:f8:6e:
85:03:03:24:38:a0:03:b7:8a:96:94:46:ab:a0:ec:
aa:e4:a8:bc:2c:8c:6c:92:96:49:ca:29:47:4b:b3:
9e:8b:23:60:b8:ee:8c:aa:53:b5:de:00:db:7e:90:
7c:fc:c1:5f:7f:19:13:bb:b9:c4:a0:b5:1a:b8:0a:
c9:ff:87:80:ba:a3:17:a3:fc:13:a0:44:8e:a8:12:
90:a5:13:36:96:9b:25:77:27:7d:80:05:ef:49:63:
52:ed:a0:59:7d:4f:cd:e5:21:67:fc:ca:ee:3e:1c:
88:33:75:6e:73:a9:95:20:3d:6a:0e:cb:05:f8:fe:
65:c2:47:bf:eb:56:d6:3c:a7:e4:ec:0f:97:7d:49:
00:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F1:6D:51:42:D6:03:E4:CE:D3:12:3B:8D:C2:B3:59:D9:EF:D9:84
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/rPFtUULWA-TO0xI7jcKzWdnv2YQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.198.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:c4:75:12:f7:c6:b9:ed:3d:57:f4:af:69:26:a0:b4:1e:c3:
05:d5:4c:56:a1:5b:6c:ce:5c:ff:66:6c:3b:10:f1:32:5a:8e:
e8:5c:57:57:43:f0:ab:dd:b8:45:13:33:a2:7a:f5:8a:e6:73:
e3:fa:da:35:1b:ea:b8:4a:4b:79:c5:93:b9:7f:14:79:ee:97:
dd:22:7f:d5:6f:4f:be:7f:62:14:4d:86:ea:35:a0:8f:8a:47:
ac:47:29:f2:70:f3:55:1b:31:ab:a9:03:ed:60:f5:a0:19:3e:
93:1c:e0:8e:3f:8b:68:88:6a:45:3f:6c:4b:22:3e:0c:40:63:
3c:92:55:c6:4e:18:2a:5c:1f:08:66:53:61:11:26:27:df:bf:
75:4c:bb:dd:74:63:5e:46:c7:3c:79:67:b6:8d:d9:3b:69:89:
28:f3:ab:ab:16:16:c1:23:59:28:5b:06:e2:1a:55:23:69:06:
54:82:15:1d:47:ad:d6:05:0a:bb:31:f4:db:89:0e:58:c3:6c:
b7:9b:31:fc:3d:33:01:d4:f5:4a:ad:ea:e5:f0:82:59:b6:0b:
31:53:5e:4c:0d:d6:19:76:d1:b7:24:30:0e:d0:0e:89:7c:53:
a9:49:63:76:f5:3a:9c:25:d8:b7:cd:ce:a8:b8:74:9d:c7:15:
4d:b5:5c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:03:01 2025 by rpki-client