Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/WqImFURLOEBFxdoRY4F5BJIHAfM.roa
File: WqImFURLOEBFxdoRY4F5BJIHAfM.roa (raw, json)
Hash identifier: lzfmsX47hOhQZuhz3oytgbsl+wZjYajDFmAR9OfTBAU=
Subject key identifier: 5A:A2:26:15:44:4B:38:40:45:C5:DA:11:63:81:79:04:92:07:01:F3
Certificate issuer: /CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Certificate serial: 0194081322EFDD42707C6057E4E5E0B2874D
Authority key identifier: 46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/WqImFURLOEBFxdoRY4F5BJIHAfM.roa
Signing time: Fri 27 Dec 2024 12:24:19 +0000
ROA not before: Fri 27 Dec 2024 12:24:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207906
IP address blocks: 195.189.184.0/23 maxlen: 24
195.189.190.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:48:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:08:13:22:ef:dd:42:70:7c:60:57:e4:e5:e0:b2:87:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Validity
Not Before: Dec 27 12:24:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5aa22615444b384045c5da1163817904920701f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:06:34:33:4c:bf:ec:fb:ca:46:9e:86:32:0b:
23:bf:03:cb:95:17:33:89:c9:71:87:2a:58:5b:3f:
9b:12:3d:1d:62:c4:c6:50:02:16:ac:88:b9:aa:ac:
60:f4:7d:45:cb:b6:bd:24:16:0c:7e:45:5e:fc:29:
9d:72:c6:ac:ff:36:c3:74:c8:e9:24:b0:6f:0b:3a:
7c:76:d4:09:88:67:6b:13:53:fd:88:2c:c8:59:5a:
96:6e:4a:ff:6d:c9:72:f3:47:d2:21:dd:ee:9d:d9:
65:97:25:93:d9:f3:c5:32:b4:98:b1:8f:75:9c:e9:
a9:4a:3e:71:20:f3:1a:de:33:65:30:57:09:65:dd:
08:72:cc:ad:87:82:b7:42:c0:e2:a5:24:e6:2b:19:
6e:36:1b:8f:d3:17:be:e5:49:14:fa:b5:2d:87:de:
aa:2f:2a:8d:59:57:46:d6:63:ac:ae:f6:4f:d5:d2:
10:5d:9b:30:b7:cb:d2:ed:2f:ee:db:4a:81:7f:ee:
59:6f:3a:5c:16:91:30:16:88:7a:af:40:ce:52:e0:
d9:df:d4:93:39:43:db:9a:e8:7a:88:c6:6c:41:ae:
1b:ed:45:33:eb:c6:60:b2:38:c4:63:cd:e0:c4:f5:
31:18:b4:69:87:61:b4:9e:8d:d4:32:bc:7c:5c:30:
3b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A2:26:15:44:4B:38:40:45:C5:DA:11:63:81:79:04:92:07:01:F3
X509v3 Authority Key Identifier:
keyid:46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/WqImFURLOEBFxdoRY4F5BJIHAfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.184.0/23
195.189.190.0/23
Signature Algorithm: sha256WithRSAEncryption
76:58:9d:ac:49:fc:d8:53:ab:a1:85:e6:e9:2f:77:80:f2:98:
4b:5d:e0:61:43:ec:b6:f3:95:83:46:37:f6:5f:49:07:cf:97:
cb:20:94:13:c2:6d:ea:43:36:6a:f3:d9:aa:d2:dc:98:a3:a1:
67:f5:43:26:24:ab:5b:54:2c:d9:cc:42:39:d8:04:3a:fa:65:
42:5c:ba:8f:27:b5:9e:a7:f5:dd:f6:34:c3:12:67:eb:60:cf:
a8:e0:f2:b8:ec:81:b3:6a:1b:42:97:07:6e:5d:6d:c6:80:1d:
5e:7a:0b:3e:ea:f0:f9:89:fc:24:e8:b7:b2:ae:e3:10:40:28:
09:d8:81:bc:cc:e0:e3:ad:50:17:1a:ca:14:e9:42:3f:de:55:
52:cc:91:2a:fb:63:e8:a6:03:b8:ca:c1:b2:00:24:d9:51:40:
1a:77:63:65:a9:28:7a:50:f3:f3:d2:98:7f:5f:35:95:2b:2f:
ed:ec:5e:fa:c4:0e:86:92:a8:65:aa:f9:ea:89:5c:d3:bf:2b:
4a:a9:be:c1:df:bd:85:b1:0e:3d:8e:87:45:e1:bb:09:55:0e:
bd:63:e9:d0:f2:03:c1:e6:16:e1:ce:01:e7:6b:52:da:5d:6c:
0b:01:5a:8e:a6:b4:40:5f:55:9b:6d:0a:8a:82:3b:61:67:1b:
24:2e:d9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 08:38:46 2025 by rpki-client