Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/_snnEtf6aMLSololPm-sDC2Pz1Q.roa
File: _snnEtf6aMLSololPm-sDC2Pz1Q.roa (raw, json)
Hash identifier: T2wIZdQkoDs99RqjeA9KMXkViz88fzf1WtDj3XkWgAo=
Subject key identifier: FE:C9:E7:12:D7:FA:68:C2:D2:A2:5A:25:3E:6F:AC:0C:2D:8F:CF:54
Certificate issuer: /CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Certificate serial: 018EA077F5E22DDD3D6018A1526693BC2A5C
Authority key identifier: 06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/_snnEtf6aMLSololPm-sDC2Pz1Q.roa
Signing time: Tue 02 Apr 2024 20:20:00 +0000
ROA not before: Tue 02 Apr 2024 20:20:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199760
IP address blocks: 195.66.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 May 2024 08:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a0:77:f5:e2:2d:dd:3d:60:18:a1:52:66:93:bc:2a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Validity
Not Before: Apr 2 20:20:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fec9e712d7fa68c2d2a25a253e6fac0c2d8fcf54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d4:9f:47:e6:f0:e2:8a:5b:85:17:b5:5f:90:
ed:11:d0:c0:ab:09:d2:a0:d7:73:3b:dc:ba:37:b5:
85:b9:5c:8c:18:96:55:c5:5d:24:30:d3:9c:b3:f6:
7b:ad:f4:13:05:20:f1:98:4b:92:69:e2:cf:62:41:
75:4e:d0:2f:56:64:09:9e:22:08:21:4c:9b:82:2f:
e9:17:86:aa:2a:a5:72:84:4e:49:3d:8b:8a:68:c5:
ca:30:1b:b0:5b:e5:fa:10:8b:0a:3a:28:1f:c7:d7:
ea:fe:01:27:d3:ac:5d:cf:93:04:31:de:84:44:5d:
6d:e5:ae:ed:1f:5d:c1:e2:8b:e4:e3:ea:06:23:e0:
2d:62:62:5d:73:e7:75:a0:1f:bc:ca:51:4e:0a:82:
2b:2d:07:46:44:ff:0e:fe:f8:d3:fc:4c:1b:61:75:
2a:9e:88:25:30:9a:54:cb:79:b1:5c:fe:82:b0:c9:
3a:0b:9f:9c:6d:b6:f7:fa:36:0e:04:42:67:31:49:
4b:bc:9f:fe:ec:de:1c:fb:dc:67:cc:88:96:07:ce:
20:02:9e:ac:95:37:c1:1b:14:e8:04:f6:9b:d9:10:
44:cf:36:78:8d:85:1c:c1:78:7b:04:71:dd:9f:ff:
27:4e:55:89:57:12:cc:04:6a:03:3f:e9:f3:74:7c:
57:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C9:E7:12:D7:FA:68:C2:D2:A2:5A:25:3E:6F:AC:0C:2D:8F:CF:54
X509v3 Authority Key Identifier:
keyid:06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/_snnEtf6aMLSololPm-sDC2Pz1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.101.0/24
Signature Algorithm: sha256WithRSAEncryption
49:29:35:b5:ca:87:f5:2a:1e:ab:a0:8a:2d:d9:84:0f:3d:62:
2c:a3:0b:f4:a6:98:75:75:50:ce:86:a4:93:bc:93:20:34:0a:
77:70:2d:31:fe:1c:26:4d:65:fc:2c:a2:c0:2d:a6:10:d9:28:
7b:06:e8:63:6d:1e:4f:cf:47:c3:03:8b:44:4b:d4:9b:1a:cf:
d9:87:68:1d:92:c1:34:95:d2:f1:09:16:ca:30:fd:9b:63:83:
ad:c6:9f:44:90:06:3e:50:38:12:64:69:64:71:c8:fc:82:d5:
54:55:18:1a:26:26:13:27:99:f6:77:ef:ae:8b:f4:85:95:2d:
48:c3:ff:95:62:5b:26:36:a7:c3:e7:b5:52:e0:d0:63:94:ae:
0b:dd:9e:79:56:39:f8:f8:cb:6f:84:bb:cd:ee:30:cf:07:3c:
41:7a:72:d6:61:1d:50:b5:68:fa:fb:74:c9:b2:d5:06:97:6f:
c1:02:9c:c4:8b:f0:da:d1:2b:a5:ee:0a:85:0b:0e:22:66:a4:
b0:83:6b:ad:a7:6e:a1:27:dd:4f:8f:f3:79:8c:1b:bc:b4:9f:
6d:fc:1c:52:63:26:ba:28:60:43:65:f7:67:27:aa:08:7a:44:
3d:96:a6:e1:b9:7d:25:8c:f8:ef:24:d8:0f:11:00:04:4b:15:
e7:45:7e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:38:56 2025 by rpki-client