Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/_vejlNFy7ecKTY1gFcd1U0Hg5xg.roa
File: _vejlNFy7ecKTY1gFcd1U0Hg5xg.roa (raw, json)
Hash identifier: AS4fo0Jj5iTuQlHL9fRNlnFQ7mYZWOQW70yKMX5/d58=
Subject key identifier: FE:F7:A3:94:D1:72:ED:E7:0A:4D:8D:60:15:C7:75:53:41:E0:E7:18
Certificate issuer: /CN=04345b7638de9d2d2966527cb363e37c31d4a188
Certificate serial: 018FC965DF720542E6D52DC007EBE59CE835
Authority key identifier: 04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/_vejlNFy7ecKTY1gFcd1U0Hg5xg.roa
Signing time: Thu 30 May 2024 12:07:27 +0000
ROA not before: Thu 30 May 2024 12:07:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48954
IP address blocks: 195.85.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c9:65:df:72:05:42:e6:d5:2d:c0:07:eb:e5:9c:e8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04345b7638de9d2d2966527cb363e37c31d4a188
Validity
Not Before: May 30 12:07:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fef7a394d172ede70a4d8d6015c7755341e0e718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d4:76:ac:95:30:19:59:49:5e:aa:4e:aa:b8:
bd:e7:b6:d9:c0:63:9f:10:36:10:8d:af:a4:1c:7e:
f0:5f:d7:e6:5c:3d:ad:81:92:3d:b5:68:26:2b:ec:
d1:11:af:b8:d1:67:98:68:e2:50:39:95:3e:10:8e:
63:b8:f7:53:4c:45:d9:cd:10:94:e0:a1:1a:d1:77:
a0:3a:36:21:83:b6:3c:12:ba:23:21:04:7a:a5:c4:
40:df:c1:6a:8e:9f:98:03:31:46:20:d3:8f:f9:02:
db:c5:b5:99:e2:e5:6f:91:b8:f1:7c:a4:6b:d2:46:
5f:0d:3a:19:d3:da:7a:09:0d:b2:21:fa:87:bb:9f:
c9:ea:db:28:d7:23:cc:fe:0b:e9:0d:b4:f6:7c:94:
f7:88:d6:11:d6:7d:75:43:47:b0:6b:d6:d4:86:a9:
32:63:dc:83:ef:42:42:4a:23:98:71:a2:5d:5f:ff:
55:13:57:ec:ed:4d:f4:e6:a4:01:5a:82:08:fc:f6:
ae:19:91:a6:cf:03:c8:16:55:80:b8:3b:4b:c8:fb:
a7:8d:c6:47:37:78:65:27:97:39:05:82:5b:26:ee:
b6:ea:d2:50:1d:d2:c4:65:05:cc:cd:9b:7c:b5:48:
5c:30:bc:dd:e0:95:49:eb:f1:4b:f4:26:0c:8f:11:
1b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F7:A3:94:D1:72:ED:E7:0A:4D:8D:60:15:C7:75:53:41:E0:E7:18
X509v3 Authority Key Identifier:
keyid:04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/_vejlNFy7ecKTY1gFcd1U0Hg5xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.192.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:b4:e9:11:19:73:96:2a:38:8a:79:72:68:b3:84:56:2e:8b:
b1:1f:04:db:df:67:43:11:ee:e2:54:88:22:bc:b2:bb:3e:1a:
63:0b:94:0f:6b:68:ce:3a:1e:64:69:b7:65:f0:1a:b6:75:8e:
ab:af:31:08:5b:fe:89:1e:31:68:01:71:c5:2c:94:f3:96:8e:
1d:ab:ef:fe:51:72:08:a7:f3:ae:b9:30:f3:c9:e1:6d:b2:43:
d6:72:02:e8:db:c8:3c:35:76:7d:51:0c:50:28:30:06:f5:6e:
12:61:47:7a:27:79:2d:32:19:00:58:63:b6:46:c6:d4:26:51:
78:c3:58:73:e7:ab:cc:8f:e2:ff:8e:1b:bf:aa:21:bb:05:19:
90:c8:25:24:cb:47:57:13:27:f3:1f:7f:08:88:3a:2d:07:f4:
09:06:be:5c:3d:5a:b9:2d:43:78:35:a3:20:c1:5b:bd:52:ff:
cc:86:fb:28:9d:e1:d2:3b:e8:da:f5:d6:ae:5c:12:5f:1b:2c:
40:c2:ee:03:3d:6d:e1:a2:18:5e:cc:50:e4:32:13:d5:f5:50:
c1:95:0c:99:09:be:8c:8b:59:7d:d3:21:ed:01:f4:40:f9:79:
95:3c:8e:8a:72:f4:d4:2a:8f:93:56:30:5a:4d:05:3f:59:4c:
40:50:e6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:19 2025 by rpki-client