Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/_mZrf2dV8bRI7Z2I-q5kERbdd-s.roa
File: _mZrf2dV8bRI7Z2I-q5kERbdd-s.roa (raw, json)
Hash identifier: Fs21ERuvljAGeHzK+cCtbCzEN/WM9gILstFqcpzGY90=
Subject key identifier: FE:66:6B:7F:67:55:F1:B4:48:ED:9D:88:FA:AE:64:11:16:DD:77:EB
Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680
Certificate serial: 019081FE821807F6AB09F9EFC8F708285F56
Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/_mZrf2dV8bRI7Z2I-q5kERbdd-s.roa
Signing time: Fri 05 Jul 2024 08:24:18 +0000
ROA not before: Fri 05 Jul 2024 08:24:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40092
IP address blocks: 194.146.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:81:fe:82:18:07:f6:ab:09:f9:ef:c8:f7:08:28:5f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680
Validity
Not Before: Jul 5 08:24:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe666b7f6755f1b448ed9d88faae641116dd77eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a6:be:0c:c0:6f:e4:0d:61:f6:bf:ee:73:7b:
6e:bc:07:81:24:da:36:0f:90:6a:8e:ac:3a:67:87:
b3:8e:f8:32:12:3b:f7:b4:2a:32:df:36:bf:00:15:
95:e2:2b:09:0e:3d:c0:1d:5e:ee:e5:fb:e3:63:ca:
df:fa:e2:db:33:cb:ef:da:0c:4c:01:27:68:4c:a6:
84:c1:66:41:35:bd:43:1a:c6:3e:91:3d:c4:a8:9e:
7e:08:58:7c:49:e8:6f:20:ea:e9:28:63:bf:cc:a3:
51:95:d8:4f:75:79:b9:e0:eb:98:96:ac:50:c1:4d:
ee:51:e8:9c:31:a3:00:fe:ff:fd:0b:34:40:46:9b:
27:3d:b6:64:6b:eb:0d:e5:21:a3:9b:b3:ed:0e:eb:
9f:a2:d7:36:0e:56:c9:d6:49:f4:b6:5b:7d:0c:f3:
3f:a4:e7:72:2e:59:60:1c:1e:4d:f8:76:1c:82:30:
a7:1f:0c:2e:fc:b0:3d:57:aa:6a:d0:59:ed:45:05:
8e:00:4e:15:b4:a2:41:3d:d7:72:c4:7f:07:05:be:
5f:77:a5:c0:93:30:ac:42:2a:fb:71:79:5f:2d:12:
fd:06:e8:a6:02:42:2c:f2:bd:d0:b5:fc:33:42:d4:
dc:78:66:82:e1:0a:2b:91:1e:82:38:76:6b:52:70:
d0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:66:6B:7F:67:55:F1:B4:48:ED:9D:88:FA:AE:64:11:16:DD:77:EB
X509v3 Authority Key Identifier:
keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/_mZrf2dV8bRI7Z2I-q5kERbdd-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.124.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:3b:83:2b:a4:07:de:39:c9:76:f6:f7:92:95:28:65:f9:32:
9d:23:57:7e:9e:16:9c:1c:b4:fa:f7:96:05:f6:07:8f:63:f2:
ee:0e:aa:2b:5a:0c:83:39:6c:a3:8d:a1:b8:7b:e6:0d:88:67:
5f:11:48:77:d6:5c:bc:64:7e:e2:24:12:ed:f7:89:02:73:28:
71:53:e2:65:8f:5b:6e:72:f5:c9:1b:2b:5f:ec:36:08:41:7e:
b8:97:7f:f5:f5:45:ef:f3:60:a8:2c:a0:6d:38:cb:3a:50:ee:
12:08:80:91:15:e5:a3:ce:a1:1c:73:6c:29:36:70:5a:5f:c8:
23:51:31:63:b0:95:9a:93:68:f1:5c:f0:cf:69:b9:be:52:2e:
9d:20:97:7c:d6:5d:39:40:da:11:61:9f:07:1b:07:2a:5b:b6:
4e:62:75:d7:13:ab:78:bc:a1:db:05:72:1b:eb:8d:a3:bc:16:
99:20:78:cc:d9:f5:62:a3:93:5d:90:af:84:6d:0e:46:56:2a:
bf:4e:87:74:c1:7e:ef:87:6f:c3:0e:7c:a8:d4:f6:92:13:ad:
2f:e2:09:e2:c5:65:21:49:ad:f6:7c:ee:36:23:47:9a:9b:fd:
de:ac:5f:63:63:01:03:02:82:d8:2a:8f:6b:73:da:84:b3:fb:
4e:0d:01:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:06:33 2025 by rpki-client