Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/oMKi0beo5m5RYEkYnWgi6ZBdJFw.roa
File: oMKi0beo5m5RYEkYnWgi6ZBdJFw.roa (raw, json)
Hash identifier: ee5MO46QjqcU9jHRupyiUkXIGF9mFcuXzqA88sDV7ks=
Subject key identifier: A0:C2:A2:D1:B7:A8:E6:6E:51:60:49:18:9D:68:22:E9:90:5D:24:5C
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0191D78340F0B91A3D1166C960FA6B236A15
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/oMKi0beo5m5RYEkYnWgi6ZBdJFw.roa
Signing time: Mon 09 Sep 2024 15:59:48 +0000
ROA not before: Mon 09 Sep 2024 15:59:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208328
IP address blocks: 194.56.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d7:83:40:f0:b9:1a:3d:11:66:c9:60:fa:6b:23:6a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Sep 9 15:59:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0c2a2d1b7a8e66e516049189d6822e9905d245c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:13:fc:bb:5c:d3:a1:fc:16:bd:1d:ff:17:2d:
b9:73:8e:e2:b2:6e:dd:05:0c:73:8e:50:0e:94:06:
69:16:51:b1:7d:34:f4:01:e7:be:ba:33:ec:a4:42:
92:f2:f5:fd:d6:1b:c3:f9:8a:26:10:c8:1b:a4:2e:
a4:e2:8f:60:c1:ae:44:c2:cb:80:8e:00:08:4e:47:
02:44:25:12:f5:c7:6f:7f:a3:b5:63:06:b0:70:fa:
00:bf:20:3f:6e:bc:cb:2f:c2:d0:49:9f:a7:31:9f:
72:ad:e4:34:53:0e:7e:35:d5:f6:7f:bc:43:c8:d4:
71:13:33:0c:25:be:51:fa:92:79:0c:86:8e:29:52:
21:d9:6d:c2:9d:fe:a6:01:a5:72:a3:58:cc:11:9b:
2e:2c:d0:d8:e3:78:3e:8e:45:38:9b:b1:70:3d:ef:
7d:9e:65:5c:d5:e4:e8:dc:8b:4b:50:67:6c:0f:e7:
6a:e7:c2:5d:64:cd:ac:7b:8d:6f:e4:77:95:45:d4:
2d:44:8d:2a:1b:4e:05:c4:29:5b:4d:31:69:c2:a0:
ac:66:15:8f:d6:90:cd:31:e9:99:d4:66:25:28:ac:
23:35:c8:8b:51:2a:f8:1b:ab:75:9d:ed:83:1c:b0:
60:57:b9:20:fa:76:48:c3:16:0c:cc:1e:2e:44:c8:
93:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C2:A2:D1:B7:A8:E6:6E:51:60:49:18:9D:68:22:E9:90:5D:24:5C
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/oMKi0beo5m5RYEkYnWgi6ZBdJFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.224.0/24
Signature Algorithm: sha256WithRSAEncryption
69:1f:ee:aa:de:66:4d:3c:ec:9c:39:68:a4:b5:07:ed:2c:84:
cc:cd:12:2f:6b:61:6f:5e:67:ee:ab:32:fc:30:84:00:18:0c:
c3:f0:9c:22:fd:b7:b9:02:4c:bc:73:44:11:28:59:76:c1:09:
d9:3e:77:d2:a6:fb:3b:85:f8:3a:d5:dc:64:95:28:71:f1:37:
13:80:f4:16:1a:24:cc:14:b1:d3:7b:89:ef:2e:82:f0:59:0e:
e7:8b:07:bf:46:20:81:5b:50:bf:59:16:9d:ed:74:59:02:5e:
aa:bd:3f:88:ba:1b:92:e7:63:51:2f:7a:a3:58:3b:2f:f7:28:
be:bb:76:3f:7c:97:89:49:50:83:66:f9:66:2e:88:5f:5d:e6:
bb:5a:31:75:f4:db:6f:e1:a7:33:7f:e4:2c:2f:74:48:99:61:
68:42:c0:ab:97:a5:26:b7:ec:6a:da:d8:5b:11:67:ee:db:7a:
ed:e5:a1:40:4e:11:cd:6f:01:59:86:a5:48:a4:eb:13:7c:3a:
c8:7f:77:05:a7:56:86:04:8c:7c:45:fa:5a:6e:a0:da:1e:6a:
74:da:60:4f:b0:ed:ce:43:b1:b7:08:84:91:db:50:a1:17:a0:
63:48:04:88:1f:7e:9c:9c:26:ef:6f:f8:f4:09:66:b6:7a:90:
c2:6a:c6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:11 2025 by rpki-client