Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/v5NXgQivcE9OmUVlZFRpMASP5CA.roa
File: v5NXgQivcE9OmUVlZFRpMASP5CA.roa (raw, json)
Hash identifier: JceUHZwN/Q0xlHYxmsSTJ5scYaOCF9VuFG2EHRcfsMk=
Subject key identifier: BF:93:57:81:08:AF:70:4F:4E:99:45:65:64:54:69:30:04:8F:E4:20
Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial: 01936DD5372AB213931A85A2E29DD9240555
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/v5NXgQivcE9OmUVlZFRpMASP5CA.roa
Signing time: Wed 27 Nov 2024 13:35:10 +0000
ROA not before: Wed 27 Nov 2024 13:35:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 88.81.160.0/22 maxlen: 22
88.81.164.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 27 Nov 2024 13:38:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:d5:37:2a:b2:13:93:1a:85:a2:e2:9d:d9:24:05:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
Validity
Not Before: Nov 27 13:35:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf93578108af704f4e99456564546930048fe420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8d:c0:6a:df:cf:5f:34:24:a8:a7:4b:95:8c:
5d:dc:53:6f:39:8e:d1:70:17:0e:9e:da:fb:15:84:
84:e8:02:c6:93:d2:8d:65:c0:a9:a7:58:c4:dc:c4:
82:20:86:fa:35:63:1d:b1:9a:92:30:79:ef:ca:10:
74:de:ab:89:dd:9c:83:50:f3:0e:e0:0d:63:b1:70:
21:d2:ac:b9:a7:d7:28:13:59:e3:a3:a5:a9:91:cd:
97:ab:bc:6c:06:2f:b6:06:9e:e9:60:9a:c2:8e:5f:
d0:2e:8c:2b:1d:b4:1b:f3:65:5f:58:7f:cb:52:b0:
df:8d:08:8f:c7:51:07:7e:f6:cc:38:93:9c:88:cf:
91:e3:9a:98:b9:57:94:b0:cc:48:c1:d2:ce:3c:ad:
7d:dd:27:e9:66:f7:e6:ac:92:94:00:20:3a:29:b7:
bc:89:91:3e:e2:72:f1:87:a5:2f:a4:c1:c0:4a:80:
47:a7:74:fd:a4:0e:3f:93:e4:f8:96:75:01:6b:7c:
c4:1c:5c:42:46:29:f4:87:6f:db:95:59:51:7e:7e:
96:28:5d:c6:80:51:c6:bc:c4:4b:d5:18:95:18:b1:
ee:74:f6:e1:d4:07:1b:06:f7:10:4e:19:54:a8:40:
7e:e3:ef:98:87:a7:b6:69:ce:66:35:d3:01:40:4d:
06:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:93:57:81:08:AF:70:4F:4E:99:45:65:64:54:69:30:04:8F:E4:20
X509v3 Authority Key Identifier:
keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/v5NXgQivcE9OmUVlZFRpMASP5CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.81.160.0/21
Signature Algorithm: sha256WithRSAEncryption
25:84:bf:c2:b9:91:23:fd:87:64:a5:30:31:2f:c3:5e:0a:89:
4e:43:6c:6a:1d:2a:97:42:21:11:8a:0f:75:b8:ee:4a:5a:a3:
6a:b7:c5:af:bc:d8:a4:d6:e3:07:f5:2e:62:1c:a8:b1:97:d8:
b7:18:27:5c:7b:5c:6a:06:8f:59:28:22:77:94:3b:a2:ae:ea:
09:97:d5:67:1f:df:69:2c:48:e8:cc:2f:63:5e:40:82:d0:54:
5f:d7:fc:b8:3e:f3:5a:25:4e:dc:4f:ed:08:a0:e9:f8:db:96:
2e:eb:64:99:bc:f7:f0:7a:e2:cb:70:04:9c:40:a8:85:46:da:
4a:bd:c6:23:44:57:48:f5:4d:c2:f2:05:76:f8:94:2b:40:e5:
f0:06:51:56:ce:92:cb:f4:67:ab:33:47:4b:8a:b7:06:cd:16:
31:58:e6:e5:ba:6e:6d:9f:ae:bb:26:a6:78:63:e2:29:26:bb:
06:48:24:5d:42:94:72:02:db:5f:27:90:65:71:4c:9f:6a:5b:
f6:b0:3b:42:90:31:2f:7e:bc:df:4f:7f:c8:8e:e4:91:f3:35:
e9:4b:4b:e1:20:f3:cb:06:2e:76:71:e6:3b:18:c1:c9:ab:b5:
fe:8c:b3:35:eb:e6:5d:79:e2:4b:04:96:3c:70:78:49:17:ec:
c2:5e:96:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:19:07 2025 by rpki-client