Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/stT1ETmjQ2biAAK1-LqmKL9vdPQ.roa
File: stT1ETmjQ2biAAK1-LqmKL9vdPQ.roa (raw, json)
Hash identifier: Wio4rFe2jtaak0atny/xXsV7BK80ebMKLTQLQlos77k=
Subject key identifier: B2:D4:F5:11:39:A3:43:66:E2:00:02:B5:F8:BA:A6:28:BF:6F:74:F4
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0194F19BB372FE747F9DE78688B8EC15D346
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/stT1ETmjQ2biAAK1-LqmKL9vdPQ.roa
Signing time: Mon 10 Feb 2025 20:45:00 +0000
ROA not before: Mon 10 Feb 2025 20:45:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207388
IP address blocks: 80.244.15.0/24 maxlen: 24
212.46.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Feb 2025 22:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f1:9b:b3:72:fe:74:7f:9d:e7:86:88:b8:ec:15:d3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Feb 10 20:45:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2d4f51139a34366e20002b5f8baa628bf6f74f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:58:13:41:fe:96:7f:b7:e2:bb:87:8b:a9:59:
0a:4b:88:c5:2c:5d:8f:bb:a8:38:ac:d0:9e:31:8c:
a1:f2:50:f6:77:23:84:ec:d5:92:95:87:14:06:09:
d4:21:50:b7:b9:ce:f2:64:ee:cc:69:77:22:99:1f:
c8:d7:21:72:d6:c1:1e:41:76:71:19:33:54:bb:e5:
80:2a:72:ba:35:ad:ff:21:00:f9:f4:0c:5b:e1:21:
c0:0f:5f:a1:05:66:9d:0e:07:13:9e:05:5e:93:d8:
bd:68:f2:a3:f9:32:0d:d6:0c:88:55:62:71:07:cf:
a6:8e:d5:8c:ac:f2:b2:3a:0c:63:b4:73:88:fe:ec:
fb:31:68:03:67:cb:2a:62:58:3d:0b:c9:6e:62:b7:
47:f6:7a:12:cf:bd:3d:4d:d6:f3:23:d2:bf:98:ab:
26:dc:22:93:93:84:5b:18:60:96:e9:67:cf:89:71:
fb:dd:e4:8e:da:db:64:c7:d7:c8:65:08:21:b0:80:
1c:85:d5:2f:fd:f6:e7:ef:e6:48:3e:5f:1c:cd:fe:
35:dc:b8:16:56:7b:b9:3f:2e:4e:4b:be:6f:65:13:
50:ce:17:01:65:f0:0c:f1:db:1e:c7:a2:cd:c3:d1:
94:96:d9:83:41:d6:00:0e:c6:27:79:d0:a0:23:8e:
8d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D4:F5:11:39:A3:43:66:E2:00:02:B5:F8:BA:A6:28:BF:6F:74:F4
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/stT1ETmjQ2biAAK1-LqmKL9vdPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.15.0/24
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:6b:64:23:b9:63:58:55:c1:b8:0f:39:d1:c9:2b:27:b0:32:
80:3c:ed:bf:73:d7:77:ae:8d:8d:e4:15:2d:05:ee:ee:fe:fd:
8c:88:9e:3b:3a:56:de:e9:30:99:e5:b2:b4:a5:ca:b1:66:d0:
f6:21:af:b1:3d:31:92:e9:81:fa:91:7b:dd:8b:54:78:e7:b1:
8c:7f:84:54:db:94:bd:d9:cb:80:3a:08:a1:ea:8e:2f:68:19:
d3:58:5f:d3:5c:61:3c:0d:b2:2a:a7:15:8e:63:d8:26:4c:3c:
c6:94:e0:0d:9e:83:dc:0d:1a:12:cb:c3:da:e4:5d:7c:88:c1:
b1:29:14:1d:76:e1:5c:fd:67:6c:2f:aa:ae:bc:ea:02:55:87:
93:0f:d8:a3:f1:f4:f4:5d:73:c7:24:3f:df:92:39:8e:1d:2a:
24:0e:5b:9e:ff:d2:1e:97:40:95:41:6d:7b:d4:d8:5b:af:41:
f3:95:6d:be:61:ef:34:34:68:7f:78:80:5e:a1:c1:38:a9:37:
c5:13:1a:71:8b:4e:c9:d5:cc:75:74:9f:db:2a:77:48:f4:77:
19:95:fd:9a:d4:9b:e8:a4:53:da:09:91:da:d1:bc:c3:be:4c:
5c:56:da:f4:df:37:78:0b:82:66:23:c9:7d:16:7c:45:96:b8:
52:23:ba:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:44:33 2025 by rpki-client