Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/Udt3eyJgxf6fEMWVhdLWtqbRjjc.roa
File: Udt3eyJgxf6fEMWVhdLWtqbRjjc.roa (raw, json)
Hash identifier: HvNftuKpDvIU5TiVxfrFov24qMlwcX26H1wNh1/2WJ4=
Subject key identifier: 51:DB:77:7B:22:60:C5:FE:9F:10:C5:95:85:D2:D6:B6:A6:D1:8E:37
Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial: 0192FDF9384662DB972DF1F07B2B4196BA6B
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/Udt3eyJgxf6fEMWVhdLWtqbRjjc.roa
Signing time: Tue 05 Nov 2024 20:17:01 +0000
ROA not before: Tue 05 Nov 2024 20:17:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22773
IP address blocks: 195.64.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Dec 2024 14:53:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fd:f9:38:46:62:db:97:2d:f1:f0:7b:2b:41:96:ba:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
Validity
Not Before: Nov 5 20:17:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51db777b2260c5fe9f10c59585d2d6b6a6d18e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c8:df:a1:31:5c:92:86:1e:11:b5:07:de:b3:
e3:17:bb:30:3d:85:7d:61:7a:13:7e:f1:34:94:d3:
e6:16:55:96:0e:f8:cb:76:43:4e:ab:6a:a9:28:8a:
59:37:9e:7d:d0:1e:73:e0:31:af:24:e9:ea:0c:23:
ed:51:db:e3:0d:c1:32:a4:12:c1:2d:30:12:44:34:
1a:63:8a:3e:42:13:68:8f:92:11:09:ee:52:00:c6:
a9:d7:57:d9:a9:91:b2:63:1d:bb:72:c4:c8:8a:b8:
1c:50:c3:e8:ea:cf:e4:82:b2:c7:4a:b9:b4:36:8e:
71:26:be:c5:08:24:c5:8e:97:6d:b0:d1:27:62:97:
b8:44:7e:aa:14:31:3e:d3:ae:c4:25:f3:19:8f:84:
d0:6f:35:3d:93:78:e2:ec:2a:d3:74:ed:84:01:a6:
7a:dc:39:91:17:95:9a:ab:fa:82:e0:82:68:02:30:
89:1d:01:e4:ee:a9:2c:1c:85:9e:c7:0a:cc:9b:9c:
88:8f:a7:b0:b2:38:cf:36:8d:c2:ca:c5:89:31:cc:
1c:a2:75:1c:de:46:be:64:e1:0d:c9:2c:df:95:fe:
c2:2b:8e:a5:e0:03:4b:2d:e1:59:95:39:4a:36:9c:
7d:3f:f6:7f:ae:d8:aa:73:68:fa:40:f6:48:32:00:
64:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DB:77:7B:22:60:C5:FE:9F:10:C5:95:85:D2:D6:B6:A6:D1:8E:37
X509v3 Authority Key Identifier:
keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/Udt3eyJgxf6fEMWVhdLWtqbRjjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.122.0/24
Signature Algorithm: sha256WithRSAEncryption
10:cd:62:14:52:18:38:f6:68:d0:34:41:45:e7:91:a5:0c:ea:
0c:49:34:92:55:4b:3f:7a:5e:df:9f:c4:a1:43:2f:8f:f8:39:
ea:14:90:ca:76:28:88:25:86:2b:e6:7d:fa:97:a9:83:26:c7:
a3:86:68:26:23:09:7c:fa:e2:10:2e:ee:c1:85:20:58:ae:a5:
84:17:01:eb:34:f8:36:44:8c:5b:11:4d:ff:97:e5:c7:e3:3c:
f1:2c:07:52:49:a0:88:bc:93:0a:30:b6:fe:4a:9f:cb:44:7e:
0a:9b:fd:4e:50:e0:8d:6c:6b:08:ff:2e:6e:5e:cd:9d:68:79:
64:af:f6:5e:6f:52:07:1d:c7:50:2e:7d:0d:0a:50:30:82:a9:
f5:75:d0:c7:3f:36:be:4c:4a:a0:be:13:51:dd:2b:c2:54:d1:
e3:45:83:21:a4:1d:2c:73:fb:0d:a9:50:71:c8:cf:86:a6:fc:
7f:7d:85:1d:f9:63:1f:53:7d:b6:ad:3f:9c:cb:64:c9:8d:1a:
d5:41:2e:d4:37:30:01:aa:08:69:51:5d:31:65:fd:f5:f3:22:
84:fb:83:1b:27:28:35:0d:b6:e9:2a:9d:13:18:6e:9d:2c:cc:
a9:5e:a5:fc:ca:e6:9c:c8:f4:91:41:91:ac:5c:a1:cc:f1:fa:
8a:54:1c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:50 2025 by rpki-client