Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/S2fSeP3EqhvrKpRxHny4FxsoaVE.roa
File: S2fSeP3EqhvrKpRxHny4FxsoaVE.roa (raw, json)
Hash identifier: y3brV/U+9zFqk64AqS1AEecyvWn37x9byOWNP6/kpUI=
Subject key identifier: 4B:67:D2:78:FD:C4:AA:1B:EB:2A:94:71:1E:7C:B8:17:1B:28:69:51
Certificate issuer: /CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Certificate serial: 018CC56DEAE4BDB6AEC4CFC15979546CEEF3
Authority key identifier: C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/S2fSeP3EqhvrKpRxHny4FxsoaVE.roa
Signing time: Mon 01 Jan 2024 14:29:24 +0000
ROA not before: Mon 01 Jan 2024 14:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204357
IP address blocks: 194.114.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 May 2024 06:27:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:ea:e4:bd:b6:ae:c4:cf:c1:59:79:54:6c:ee:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Validity
Not Before: Jan 1 14:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b67d278fdc4aa1beb2a94711e7cb8171b286951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:54:c8:6d:6d:a6:5f:0d:7f:ea:f3:46:6e:29:
1c:0c:c3:28:50:8f:0a:ee:60:8f:29:8f:a8:1e:43:
f5:c6:ea:89:5d:97:4d:58:cd:53:f9:c0:7f:66:be:
06:d4:16:0f:0f:91:ee:77:61:e4:67:f4:33:15:c2:
47:b8:a3:7d:f2:19:92:4d:5f:d9:5b:86:ea:ac:90:
5e:df:f7:d4:db:86:6f:40:21:2d:e4:21:61:f6:40:
bb:42:ed:0b:61:b4:4e:5e:c0:a6:bf:c6:78:fb:9c:
cb:39:eb:a5:22:f3:eb:7d:9d:bd:08:97:70:95:20:
e6:5d:02:22:fc:89:65:02:a8:f2:91:ad:c6:4b:84:
9e:92:06:99:ca:7d:f2:bb:33:d7:b5:43:0a:5a:7a:
e9:39:79:bb:37:01:73:6c:ee:5a:7a:ba:0a:a1:79:
b0:32:f4:31:c7:38:4f:7f:29:e7:55:ef:67:51:f5:
15:e7:d4:ea:e5:fa:69:08:25:74:6a:e2:81:a9:fb:
e0:70:6e:d8:39:7a:78:37:89:f2:7d:41:b8:9f:9f:
51:3b:f1:29:f7:4f:2e:86:83:cc:ff:e5:a9:ab:e7:
3c:4a:96:9b:12:ce:b1:0b:56:23:dc:84:7a:b5:85:
28:c2:bc:2d:9e:58:54:b9:43:3e:9e:01:2b:fd:11:
8b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:67:D2:78:FD:C4:AA:1B:EB:2A:94:71:1E:7C:B8:17:1B:28:69:51
X509v3 Authority Key Identifier:
keyid:C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/S2fSeP3EqhvrKpRxHny4FxsoaVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.114.82.0/24
Signature Algorithm: sha256WithRSAEncryption
63:ec:81:7a:6d:4e:f1:62:eb:5e:5d:92:32:ad:ad:b1:32:15:
a3:e9:74:a1:7a:d5:67:f9:de:b7:21:50:9f:f1:51:73:f7:9b:
46:4c:ae:a2:45:ad:a5:c1:fe:85:f9:aa:fd:90:50:91:40:a1:
6c:35:76:cb:9c:0d:b5:96:ad:0b:3b:3a:45:e5:3d:0b:59:99:
a0:6a:e0:a1:ee:48:8c:59:20:f7:e5:83:ea:a9:c3:1b:93:73:
6a:61:56:61:fb:8b:2f:ba:ac:1d:db:f3:5c:56:66:e6:cb:a1:
5f:90:28:3e:42:8e:eb:de:04:64:09:14:bb:eb:ea:36:37:3d:
f5:59:cc:6a:c0:9b:b0:60:09:21:22:e8:9f:f7:85:02:68:d7:
33:a6:dc:04:62:90:a3:ea:1f:c7:81:ba:f0:53:14:7a:8a:17:
e4:04:7c:b4:d0:19:f8:31:a8:70:fe:df:1d:4e:31:df:63:5a:
42:82:f7:72:f5:2d:2c:17:a6:ac:ac:e4:bd:be:ea:ed:1f:c1:
20:97:70:bd:9f:7f:cb:0c:60:78:f4:97:b3:83:a2:6a:d4:f3:
db:8f:f4:a5:78:0f:10:bc:77:6c:de:21:ea:78:45:eb:ba:e8:
cd:5c:3f:aa:60:0b:d8:3a:34:ce:f5:6c:d9:96:fd:1e:0b:13:
15:03:12:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:47 2025 by rpki-client