Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/Rww7TbmSP3o9MTPcf3LPBHSETAE.roa
File: Rww7TbmSP3o9MTPcf3LPBHSETAE.roa (raw, json)
Hash identifier: 7V2JwcyxjVSrbvSoZbbUrM8nzLpeGX15FL9wN00PGQ8=
Subject key identifier: 47:0C:3B:4D:B9:92:3F:7A:3D:31:33:DC:7F:72:CF:04:74:84:4C:01
Certificate issuer: /CN=efe15341d2afc6a857a584199fc7fb07c1701fc6
Certificate serial: 018CC726A826E2DD496DF9CFA0957C211BCC
Authority key identifier: EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/Rww7TbmSP3o9MTPcf3LPBHSETAE.roa
Signing time: Mon 01 Jan 2024 22:30:48 +0000
ROA not before: Mon 01 Jan 2024 22:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206926
IP address blocks: 194.1.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:a8:26:e2:dd:49:6d:f9:cf:a0:95:7c:21:1b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe15341d2afc6a857a584199fc7fb07c1701fc6
Validity
Not Before: Jan 1 22:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=470c3b4db9923f7a3d3133dc7f72cf0474844c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:32:91:73:01:5d:6b:d8:40:9a:1a:b8:1d:e7:
1f:b7:51:31:fd:a6:fb:94:78:13:f8:01:b0:4f:dd:
c2:58:02:84:06:17:1f:b5:45:e7:c1:80:ca:b2:4a:
73:f7:29:13:bc:78:a5:17:85:77:ab:52:8f:9f:4d:
d9:34:66:b5:dc:9c:79:18:57:01:82:a1:60:91:de:
9b:66:e4:64:9e:5e:76:85:ac:d9:58:34:46:10:03:
12:64:e4:99:18:d0:00:3b:e0:cd:a5:fc:2f:23:85:
e9:eb:57:b1:b5:bb:b3:93:97:6c:63:a6:1d:a7:6a:
89:82:2c:29:72:3c:a0:db:2f:fe:3e:d0:77:09:53:
a5:3f:69:36:93:3f:14:fa:9e:57:14:a9:5f:60:df:
93:ad:01:c9:ec:04:dc:92:17:58:56:9f:c1:7d:c1:
77:3c:1d:80:79:75:9b:e3:b9:bf:cb:14:3d:6a:8f:
53:1b:44:a4:4a:f8:75:ba:38:1a:4a:74:c7:47:9c:
01:83:69:82:d8:f9:c2:6d:46:d6:87:69:07:f9:d8:
84:7d:3b:0c:45:be:40:75:e5:c3:08:58:25:f9:9d:
d7:5a:5f:0f:db:8a:e8:b1:4c:04:96:19:ab:ef:2d:
c5:0a:b5:e5:34:50:7b:bd:8d:43:df:f6:14:5c:7b:
45:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0C:3B:4D:B9:92:3F:7A:3D:31:33:DC:7F:72:CF:04:74:84:4C:01
X509v3 Authority Key Identifier:
keyid:EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/Rww7TbmSP3o9MTPcf3LPBHSETAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.145.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c2:96:a3:09:af:1e:53:a1:5c:15:09:5f:0e:05:05:9a:a8:
fb:ab:75:83:3c:ce:34:83:6a:d1:44:ff:17:01:d3:42:39:44:
f1:bf:94:72:60:f0:c4:b9:9e:38:6b:be:58:ac:3a:be:82:13:
ea:be:77:9d:56:a9:fe:84:7d:64:fb:66:bc:3a:5d:36:8a:0e:
f2:19:92:f2:8b:72:90:4e:49:51:48:b3:a1:9c:f5:ed:d0:62:
97:28:b4:95:5b:27:c9:25:04:9e:f5:cb:12:11:d3:02:54:76:
7c:0c:8b:d7:9c:ff:40:7a:6f:e7:45:56:2e:95:ba:27:ba:3b:
6a:fa:e1:f4:33:76:58:1a:8b:7f:16:42:4c:d9:ae:7a:38:65:
b0:6f:9a:43:04:a4:ed:fe:55:73:72:ab:e0:7f:c0:32:e9:87:
4f:d4:e4:31:8e:06:c8:d6:ba:d0:d9:e2:13:80:a8:84:12:c1:
36:e4:a6:4c:07:95:83:ee:93:fe:e1:fb:87:62:98:d1:52:e6:
b3:07:6a:c1:22:ac:a7:41:1c:cd:5b:b7:1f:b1:ac:85:8b:4c:
66:29:34:20:a9:af:55:7c:09:0d:b8:fa:99:24:64:49:8f:68:
a6:f7:ba:17:80:1c:72:1a:90:e3:f2:98:ca:c5:9d:41:24:be:
b2:d2:b0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:15 2025 by rpki-client