Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/fZkJ8LnxI1KVqJJ0LTA_dq21fB8.roa
File: fZkJ8LnxI1KVqJJ0LTA_dq21fB8.roa (raw, json)
Hash identifier: llipMj2DhUUn7p6FtOuOxGJ0oBzPK96wbkC2GxM23b0=
Subject key identifier: 7D:99:09:F0:B9:F1:23:52:95:A8:92:74:2D:30:3F:76:AD:B5:7C:1F
Certificate issuer: /CN=a4947a653dec53d179d5724f2514c7256db69df8
Certificate serial: 018CC794CA043CD9C2FD272C27AFE51F1D41
Authority key identifier: A4:94:7A:65:3D:EC:53:D1:79:D5:72:4F:25:14:C7:25:6D:B6:9D:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/fZkJ8LnxI1KVqJJ0LTA_dq21fB8.roa
Signing time: Tue 02 Jan 2024 00:31:06 +0000
ROA not before: Tue 02 Jan 2024 00:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52160
IP address blocks: 194.247.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:ca:04:3c:d9:c2:fd:27:2c:27:af:e5:1f:1d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4947a653dec53d179d5724f2514c7256db69df8
Validity
Not Before: Jan 2 00:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d9909f0b9f1235295a892742d303f76adb57c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:07:de:96:a7:c8:8b:36:e6:aa:11:57:df:80:
74:ba:23:4e:f5:19:78:9a:70:ac:9b:f5:49:78:78:
d0:17:c6:93:72:1d:05:62:de:c6:09:8f:64:4d:b2:
51:f8:33:a5:f3:eb:97:d6:48:c7:93:c1:eb:be:66:
9d:ea:a4:98:3a:f3:90:16:85:c9:b8:de:b6:96:81:
5f:e5:e4:cd:80:0b:4f:f5:ab:43:03:89:aa:ef:6e:
4f:7a:4f:a6:d8:a0:18:f7:b7:af:d4:e9:83:32:d3:
6c:fb:df:1c:3a:27:36:0c:2f:ce:45:a7:e4:53:c1:
8f:0a:b3:27:23:53:2a:aa:0b:40:70:0e:c7:43:96:
d1:45:21:2a:8a:f0:c6:6e:50:5c:ec:c0:0e:80:fc:
59:d5:89:63:f1:b1:e6:85:a2:86:dc:fa:62:fe:36:
65:45:24:46:aa:7e:cc:bc:4e:e6:63:1a:a8:b6:5c:
a2:10:3e:36:ef:90:89:b6:4e:2e:27:88:54:c0:5e:
54:8c:0f:c9:b5:a1:db:df:99:fd:14:22:ad:d1:6c:
45:01:06:66:db:3b:2f:e1:f9:a5:b1:39:88:df:2c:
33:aa:95:09:14:8d:2d:b4:70:09:b1:8b:99:fa:4f:
89:45:30:e6:6f:5a:c7:d1:74:1e:7f:01:36:9f:ca:
30:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:99:09:F0:B9:F1:23:52:95:A8:92:74:2D:30:3F:76:AD:B5:7C:1F
X509v3 Authority Key Identifier:
keyid:A4:94:7A:65:3D:EC:53:D1:79:D5:72:4F:25:14:C7:25:6D:B6:9D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/fZkJ8LnxI1KVqJJ0LTA_dq21fB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.50.0/24
Signature Algorithm: sha256WithRSAEncryption
00:58:d9:41:0c:bc:b0:20:e0:7a:c8:28:2b:cb:b8:ec:93:c4:
45:7b:21:a5:52:ce:af:09:a4:bf:df:7d:7d:ca:fd:83:09:9b:
82:4a:85:d1:55:81:a5:93:92:c6:80:aa:6b:51:b8:6b:62:4a:
7a:4f:af:82:4a:4d:e8:2e:53:95:a7:3f:71:8a:f3:58:a5:68:
27:a8:90:97:a7:40:77:c9:1f:b3:ba:1a:68:be:84:f9:f6:80:
b0:ac:2d:06:a8:72:0d:46:6e:33:1a:bc:91:16:64:8f:74:01:
60:60:ef:5c:f8:2e:b2:7a:7d:b7:27:a0:b9:b1:0d:d6:2e:43:
85:07:bb:83:41:77:06:fb:a6:49:db:27:ae:92:ce:03:69:3a:
f5:2e:01:f4:46:62:de:ed:ca:c2:68:0e:d2:e1:d9:9e:de:47:
40:f3:ac:e4:cf:40:0a:6a:92:c1:cf:f4:99:c1:db:8a:a2:f8:
ac:de:7f:59:a9:be:78:96:36:2b:02:1b:ac:7f:77:72:ed:96:
64:0c:74:a8:ca:3a:37:c0:c9:6e:0c:3c:43:70:e5:18:ed:8d:
09:6f:24:3e:66:50:cc:98:27:c7:e9:11:2f:c2:b1:ae:ea:f9:
6d:c5:8f:46:34:05:c2:38:3f:f4:83:d6:f5:04:19:1f:fd:f0:
4d:10:17:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:33 2025 by rpki-client