Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/IZcmL7WRGjDsm4Sy5o-h_tBslok.roa
File: IZcmL7WRGjDsm4Sy5o-h_tBslok.roa (raw, json)
Hash identifier: n+UglrjziGq2MwWB3jnt+d9ce176M9PoBrQEnWwGZUo=
Subject key identifier: 21:97:26:2F:B5:91:1A:30:EC:9B:84:B2:E6:8F:A1:FE:D0:6C:96:89
Certificate issuer: /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Certificate serial: 019271162E768C32FD3365BE030B3C50033D
Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/IZcmL7WRGjDsm4Sy5o-h_tBslok.roa
Signing time: Wed 09 Oct 2024 11:42:11 +0000
ROA not before: Wed 09 Oct 2024 11:42:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39011
IP address blocks: 194.102.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Dec 2024 17:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:71:16:2e:76:8c:32:fd:33:65:be:03:0b:3c:50:03:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Validity
Not Before: Oct 9 11:42:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2197262fb5911a30ec9b84b2e68fa1fed06c9689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c5:5e:f7:21:34:38:f4:84:6c:46:f6:36:d7:
7d:e4:df:b2:a1:31:07:c1:22:3b:52:d7:8e:e1:96:
de:68:43:cd:6b:df:8f:cf:49:03:02:65:eb:b0:e6:
4e:55:5a:90:8f:ea:a8:c4:e5:f4:c5:a1:5e:f6:bb:
d6:cf:0f:11:f0:18:ec:dc:38:59:06:7f:bf:21:7c:
84:dc:55:86:77:fb:5d:4c:e2:bd:dd:e3:15:7e:69:
e6:0c:5e:61:4c:a9:c0:9a:c0:d7:52:97:7d:d2:52:
a0:32:23:80:cf:cf:fb:5c:5e:f1:46:7a:67:76:71:
45:c9:d0:3d:f0:1e:04:d0:d6:80:4a:21:f5:b3:04:
87:69:ba:39:00:4d:6d:42:4c:34:27:7b:cf:17:9e:
6c:ca:55:d2:0b:36:7a:93:cf:04:e9:48:36:f9:8c:
7b:fa:de:14:79:e6:f0:ec:92:e6:cf:f2:a8:65:b7:
7c:36:7e:7d:4b:a2:9a:89:b5:b6:ac:d5:98:a2:d4:
e8:03:ce:54:bd:09:6b:80:50:8d:48:5b:69:dc:de:
58:2d:3f:88:a4:6e:4e:85:b9:16:d7:cb:a0:bf:66:
73:bf:38:be:a2:1c:75:e9:dd:0a:a4:2a:eb:e2:ce:
65:3f:8c:fe:30:9f:dd:f4:84:a8:91:48:de:5c:f0:
c0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:97:26:2F:B5:91:1A:30:EC:9B:84:B2:E6:8F:A1:FE:D0:6C:96:89
X509v3 Authority Key Identifier:
keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/IZcmL7WRGjDsm4Sy5o-h_tBslok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.204.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a6:bc:88:46:eb:b4:d0:d0:39:1f:67:f0:e3:c0:cb:1a:a7:
52:3c:09:ab:a0:f7:4c:52:7a:77:2d:9a:b0:96:d5:7c:98:27:
62:d8:45:21:04:81:5f:82:9f:2a:b6:d4:a5:05:36:43:a3:6c:
cb:16:3b:9b:d3:fa:6d:d1:3a:ea:4d:24:16:a4:3e:40:82:87:
37:92:69:57:14:a5:c1:7f:86:78:8f:58:71:2b:89:b1:df:75:
db:0f:e8:f2:18:5e:15:af:76:1c:3a:02:29:75:71:bd:b3:f2:
72:ed:cc:aa:6f:50:bd:04:29:f2:02:5a:ee:f2:49:63:3b:0e:
d5:65:d6:b9:4e:3d:4b:ed:0f:d2:d6:50:f4:a8:76:b7:52:ca:
64:07:a5:ce:d3:17:84:87:d4:93:65:5c:42:9b:b0:ad:f0:37:
71:30:84:cb:cc:df:94:46:d2:e9:f6:88:3a:9a:34:5c:76:dd:
20:c8:08:6f:5a:4c:ba:d4:4c:75:65:b3:8e:b5:51:17:d2:94:
0f:b4:a0:cc:24:05:33:b5:76:3d:ee:f3:7f:b3:b2:fa:a0:c7:
f9:cd:d5:5f:1e:13:ed:cf:58:4e:63:a4:62:d5:0f:0f:88:cf:
2e:0d:dc:98:bd:c0:98:37:dc:32:61:df:72:ec:b9:4e:c3:96:
23:9e:94:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:35 2025 by rpki-client