Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/psUvVyJfkvggd6FqAc4CYtFz-bQ.roa
File: psUvVyJfkvggd6FqAc4CYtFz-bQ.roa (raw, json)
Hash identifier: JEKQYTfqNn+O+OC9ulS9dSLGE06OJ5surhL9ty6Vwvc=
Subject key identifier: A6:C5:2F:57:22:5F:92:F8:20:77:A1:6A:01:CE:02:62:D1:73:F9:B4
Certificate issuer: /CN=06c44b821ab5db542cc536c1f88b84baf0621654
Certificate serial: 0190A7B5E60B55AA5320D6887AEEC996D75B
Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/psUvVyJfkvggd6FqAc4CYtFz-bQ.roa
Signing time: Fri 12 Jul 2024 16:10:34 +0000
ROA not before: Fri 12 Jul 2024 16:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215917
IP address blocks: 185.128.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a7:b5:e6:0b:55:aa:53:20:d6:88:7a:ee:c9:96:d7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654
Validity
Not Before: Jul 12 16:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6c52f57225f92f82077a16a01ce0262d173f9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9b:c7:ae:3b:1e:4f:81:fc:35:0d:f4:a7:57:
cf:3f:f7:69:91:63:c4:b8:0e:c9:d0:28:f9:f6:78:
8d:75:63:a9:0c:6d:fa:51:7a:05:92:42:c9:31:18:
df:d4:93:c3:4a:72:6a:a7:fb:72:9c:31:64:fe:99:
a7:45:4e:cc:f3:6a:07:5f:e8:4f:2e:1c:0b:1c:e3:
e0:78:82:00:89:ef:9f:f6:60:05:bd:6a:da:4b:11:
b6:db:3f:5c:f1:a5:11:57:10:11:ba:d0:60:94:fd:
ea:86:04:6e:5d:d7:2b:63:6b:62:79:74:74:4e:3f:
a5:78:d7:d1:69:6d:2c:0b:e4:ee:fb:02:63:69:d9:
7a:6a:77:e9:65:9d:10:7c:1e:42:80:47:9c:e7:3b:
d2:3b:22:1b:23:a1:2c:84:21:8c:c3:46:f8:a6:38:
92:46:d8:0e:60:12:d3:7b:a4:c2:88:d0:39:b3:01:
3e:09:a5:64:b4:7c:04:73:16:32:f0:72:65:90:84:
62:00:fd:8c:c9:48:a4:75:31:51:e8:40:d6:44:18:
1d:8d:f1:f5:d2:25:58:30:a2:1d:64:94:80:a6:69:
39:da:85:7c:c5:6d:26:d8:16:65:85:95:d9:e1:66:
4c:a4:23:82:bb:b0:1e:e8:08:5d:aa:97:2a:99:61:
b2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C5:2F:57:22:5F:92:F8:20:77:A1:6A:01:CE:02:62:D1:73:F9:B4
X509v3 Authority Key Identifier:
keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/psUvVyJfkvggd6FqAc4CYtFz-bQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.38.0/24
Signature Algorithm: sha256WithRSAEncryption
46:fa:bc:a2:45:80:bd:26:54:37:e7:3e:9b:68:e3:25:d8:ba:
88:bc:85:6c:34:49:00:51:9f:ce:a3:05:8d:72:f5:87:39:b9:
1b:6c:b2:92:80:0a:f7:09:b6:06:8b:e2:91:90:62:21:62:59:
6b:1e:93:50:c6:7d:6c:c8:51:6d:a4:8b:b4:45:19:b2:bd:0e:
ca:21:c0:91:6f:1f:42:03:bf:ec:80:3f:d6:54:0a:18:2a:f3:
ab:b3:ff:b7:f5:88:53:d6:3b:9e:be:0b:d2:40:ea:8b:79:da:
86:0d:ba:f0:e2:8e:50:d2:ef:f5:77:a3:44:bc:e4:9f:2c:31:
29:b6:6a:a4:89:03:d3:81:2f:6d:00:da:3a:dd:bf:3f:cc:11:
b0:4b:fc:31:a0:ea:51:af:c7:36:c8:c2:f1:6d:fb:5e:73:bb:
39:3b:ff:49:a1:9a:d8:0a:35:89:51:3e:48:ed:4a:c4:44:c5:
7f:c2:2b:c9:69:98:13:3f:a6:b4:0d:e5:33:dc:dd:28:93:7a:
28:d3:09:8c:57:01:72:9e:d3:f2:8f:b3:df:25:8e:47:f1:69:
69:4d:98:45:0e:58:47:c5:5f:e6:de:74:01:85:df:2d:b8:5e:
ed:ba:bb:fa:ef:84:4a:03:3d:d1:0c:a7:68:40:8c:c1:73:96:
01:d8:ee:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:32 2025 by rpki-client