Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/r5Wii6AC-eSj5bOJg3ynLb2VlzU.roa
File: r5Wii6AC-eSj5bOJg3ynLb2VlzU.roa (raw, json)
Hash identifier: 7qJQGXp+AvkIXCk5k0dwAbyGKm69AKIj2g18z8vbhjw=
Subject key identifier: AF:95:A2:8B:A0:02:F9:E4:A3:E5:B3:89:83:7C:A7:2D:BD:95:97:35
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 018CC79443A067816B450BDBBBDFDEE9C6EB
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/r5Wii6AC-eSj5bOJg3ynLb2VlzU.roa
Signing time: Tue 02 Jan 2024 00:30:31 +0000
ROA not before: Tue 02 Jan 2024 00:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25038
IP address blocks: 194.121.123.0/24 maxlen: 24
62.132.115.0/24 maxlen: 24
194.45.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:43:a0:67:81:6b:45:0b:db:bb:df:de:e9:c6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 2 00:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af95a28ba002f9e4a3e5b389837ca72dbd959735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:85:75:b7:aa:8e:9a:13:47:41:f8:91:6c:d7:
ff:9c:a6:5c:9b:58:22:37:88:87:61:8c:49:92:6a:
07:0e:c8:35:a3:de:e2:34:e4:a7:91:c3:00:4a:71:
2a:8e:68:ae:eb:ac:53:b0:2a:ae:04:4a:8f:13:e0:
87:3c:97:1c:90:39:d5:cc:46:03:21:29:77:7a:3f:
40:25:77:fa:41:e3:85:ca:ba:da:b1:5b:2a:69:c2:
82:79:d4:99:30:49:49:14:bb:a1:47:f1:17:c3:2b:
c5:4b:1d:a2:c2:93:5d:89:61:0a:38:ca:28:41:6e:
84:3d:d2:0a:39:3b:9e:6a:75:b7:19:9a:c0:f1:d2:
bd:2e:76:e6:e6:c7:b5:46:01:1f:c5:f8:47:95:70:
55:39:e9:a2:59:fc:6a:79:dd:c9:07:c6:67:3e:ca:
e1:17:4f:73:61:f2:44:08:5f:d0:60:78:bb:a5:98:
6d:48:91:31:53:5c:21:07:b4:7f:02:99:c5:4f:27:
06:53:ec:5d:c4:e5:84:1f:e8:34:40:12:75:61:4c:
c0:18:76:95:11:ca:71:2e:54:45:fb:ff:79:04:cb:
67:6e:d8:25:f6:e4:bc:0b:e8:1c:e4:ef:d4:cd:10:
a1:cc:b5:0a:e5:84:d9:a3:4d:0c:d6:c9:e2:7c:78:
02:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:95:A2:8B:A0:02:F9:E4:A3:E5:B3:89:83:7C:A7:2D:BD:95:97:35
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/r5Wii6AC-eSj5bOJg3ynLb2VlzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.132.115.0/24
194.45.13.0/24
194.121.123.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:12:90:68:78:f1:c3:8b:89:b8:7e:c4:8a:88:61:00:ee:d0:
f8:a5:65:80:4c:85:a0:31:2c:15:cd:a4:f5:4c:1f:10:85:23:
1e:5c:77:73:32:01:da:aa:f9:8f:46:9b:cb:90:09:5e:f9:cf:
41:c7:1d:5b:f5:67:8c:61:2d:58:3a:28:97:32:1d:4a:e5:42:
99:7c:88:cc:ef:53:32:3d:81:c4:c4:a4:91:fa:fd:ed:1e:0c:
a1:5e:17:2e:85:53:d0:fc:be:fc:ee:1a:54:e1:5a:e4:7b:1e:
45:cf:c3:85:ee:62:1e:b1:e8:1d:e3:0a:a9:89:d6:81:7d:e3:
67:c5:74:12:db:09:6a:40:af:d0:86:82:bd:ba:b2:b1:ed:75:
d4:de:07:3d:ce:b2:81:d5:9e:c5:a3:21:a1:60:23:1a:43:cd:
67:d5:42:46:ba:0b:72:97:c5:fa:0b:63:41:c4:cc:41:4b:ab:
78:e1:01:68:dc:1d:9d:a1:34:4a:02:ee:f7:f0:73:e1:10:7a:
1f:f5:9f:43:93:4c:98:95:df:3e:6f:5d:6c:7b:89:6c:71:4a:
fb:5f:2a:f5:e1:c0:2d:56:4e:83:3a:80:cb:11:2b:0b:5e:b5:
67:9d:67:c7:47:43:af:e9:90:01:3c:89:0d:8a:f9:93:e7:ea:
b4:26:bc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:31 2025 by rpki-client