Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/27g9NcjGkfSK5PvRrvupKKA5-QM.roa
File: 27g9NcjGkfSK5PvRrvupKKA5-QM.roa (raw, json)
Hash identifier: QbKAvcnB59bk0aw6GCQpT0VcTadGFhydRxNlIoIJJAg=
Subject key identifier: DB:B8:3D:35:C8:C6:91:F4:8A:E4:FB:D1:AE:FB:A9:28:A0:39:F9:03
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018D9D4CF19D9DE75E8DDBEC090A302DD08C
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/27g9NcjGkfSK5PvRrvupKKA5-QM.roa
Signing time: Mon 12 Feb 2024 12:31:21 +0000
ROA not before: Mon 12 Feb 2024 12:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 37.49.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 04:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9d:4c:f1:9d:9d:e7:5e:8d:db:ec:09:0a:30:2d:d0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Feb 12 12:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbb83d35c8c691f48ae4fbd1aefba928a039f903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:cd:b1:a9:66:84:55:8a:dc:ae:cb:58:6b:
d0:c8:23:e3:87:bb:97:7d:b7:d3:ba:89:6f:f8:34:
b2:26:7b:63:6c:31:be:5a:a6:29:66:1c:21:0c:9f:
9c:0d:6c:10:74:ba:5a:87:a9:48:f2:07:a7:b7:0e:
27:7f:6a:ab:a1:3c:60:d3:42:77:85:8e:48:4a:43:
63:34:d2:6c:60:0c:70:05:80:c2:30:45:db:12:f4:
9b:65:ce:54:34:f9:3f:03:81:12:a0:a3:30:e3:e5:
08:3d:51:24:5c:78:8f:05:0e:35:90:b2:f3:f7:59:
ad:8d:e4:61:97:0a:32:cb:59:7c:2b:97:7b:4a:6c:
c7:a7:91:6a:00:00:ec:fb:13:02:ec:1a:55:fb:89:
b4:d0:10:5a:92:32:15:29:b9:98:d9:98:01:e5:a2:
b9:fa:55:80:45:9c:4c:14:94:23:11:04:c9:c6:47:
32:bd:99:a4:81:1e:43:35:8c:1e:8b:ec:dd:74:94:
31:5e:09:20:d5:9d:66:33:ad:5d:41:a3:f0:a8:c2:
05:3d:69:8e:06:c1:5d:7f:25:c6:c2:73:9b:bd:dc:
78:28:a8:27:b1:b9:27:a1:3e:83:2c:30:5f:4e:1b:
89:ee:0c:86:16:b6:a7:22:eb:e4:91:d7:2a:ac:ce:
86:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B8:3D:35:C8:C6:91:F4:8A:E4:FB:D1:AE:FB:A9:28:A0:39:F9:03
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/27g9NcjGkfSK5PvRrvupKKA5-QM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.150.0/24
Signature Algorithm: sha256WithRSAEncryption
75:c2:44:1b:cc:da:b7:6e:2e:69:e5:9d:4e:7a:27:77:00:05:
6a:da:49:28:f8:6d:a0:6b:a1:1b:53:26:cb:c8:2a:47:02:58:
29:d5:c6:60:e7:65:25:3d:98:16:74:40:cd:9d:38:58:ca:98:
23:45:e7:a5:3f:5d:45:57:0f:a2:fb:4a:a3:ce:13:0b:27:d0:
c0:1f:72:c3:09:b1:c4:a4:80:ac:74:d2:e5:84:17:68:35:fc:
16:ee:bf:5f:a2:d8:74:ff:f2:f1:0a:e2:c3:d3:a8:8b:61:1f:
9f:18:51:05:98:3c:87:f1:f6:f7:2f:c8:e8:b9:e7:aa:c7:2a:
00:28:ff:80:f3:f2:12:2f:48:f4:b0:f8:cb:e0:d7:a7:3b:8d:
56:ca:ed:65:9d:24:ee:78:ba:d0:ee:2c:44:1d:e3:10:90:bd:
95:a2:5c:93:d3:40:bc:20:92:49:85:b4:0d:78:c4:40:b0:d3:
ff:66:e2:ee:a8:be:70:d1:b3:f9:2a:51:bd:a9:45:80:44:f9:
29:cc:64:fa:58:0a:d4:de:6b:74:99:f0:54:44:48:d8:0d:cd:
57:5a:88:b4:49:6c:01:6f:4c:72:11:2b:63:f2:0a:13:9b:9f:
65:6d:45:01:6d:97:73:c8:2c:45:74:5a:95:9f:a5:6f:e3:4a:
84:4c:68:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:06 2025 by rpki-client