Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/WdujVTQXMuJQbm4POzXJB1PWHkE.roa
File: WdujVTQXMuJQbm4POzXJB1PWHkE.roa (raw, json)
Hash identifier: bdjVRtX9IYyYqTtn4dLIgA998srFA3z2RYASpZQv45g=
Subject key identifier: 59:DB:A3:55:34:17:32:E2:50:6E:6E:0F:3B:35:C9:07:53:D6:1E:41
Certificate issuer: /CN=13230da70232f66784730fd6c1255135b7f8d09f
Certificate serial: 018CC348C8999B67CACD70A38BCE17F59FA1
Authority key identifier: 13:23:0D:A7:02:32:F6:67:84:73:0F:D6:C1:25:51:35:B7:F8:D0:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EyMNpwIy9meEcw_WwSVRNbf40J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/WdujVTQXMuJQbm4POzXJB1PWHkE.roa
Signing time: Mon 01 Jan 2024 04:29:36 +0000
ROA not before: Mon 01 Jan 2024 04:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51354
IP address blocks: 195.43.75.0/24 maxlen: 24
2001:7f9:8::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:c8:99:9b:67:ca:cd:70:a3:8b:ce:17:f5:9f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13230da70232f66784730fd6c1255135b7f8d09f
Validity
Not Before: Jan 1 04:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59dba355341732e2506e6e0f3b35c90753d61e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:53:71:e0:36:f2:62:6f:4c:a6:97:ab:eb:f7:
3e:9e:22:4f:d3:14:42:6b:17:43:8a:cb:c1:ea:75:
6b:7e:09:7f:c2:37:69:0b:c0:7f:ee:7e:ca:8c:1d:
57:58:68:56:4e:0b:5f:a5:9c:b3:62:fc:19:40:f1:
bb:2b:1e:22:29:54:bf:e2:21:04:f2:32:5c:9b:5c:
57:a0:98:da:50:4e:c3:4f:bd:20:f5:f0:fa:bd:80:
fa:71:68:79:95:f5:2d:3f:3e:40:80:a4:9a:2d:a3:
76:3b:ad:a8:fc:9f:f1:96:a6:90:58:94:80:e6:40:
2f:68:1b:e3:b4:ea:d4:27:04:3d:90:5a:02:1a:ec:
fd:05:87:06:79:9d:b1:3c:87:6b:0f:47:6b:9f:ab:
0a:9f:51:ef:21:18:2a:1e:cc:0d:46:a8:42:5f:ed:
48:d8:94:39:64:c7:8b:17:9d:4a:a3:f3:17:6d:04:
de:d2:86:ee:d7:d0:ee:1e:41:9e:62:fb:7e:cc:47:
c1:11:9d:d3:3e:fb:6e:bf:f5:4f:89:cf:e9:77:e8:
62:a3:c3:d4:95:a6:d1:a7:6b:bf:d5:02:6d:48:93:
2e:09:b9:6a:06:0b:d5:6c:22:e8:bd:3a:66:3d:f1:
fd:f5:b4:a2:8c:58:7e:69:5f:ef:8d:5f:dc:fb:d7:
d8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DB:A3:55:34:17:32:E2:50:6E:6E:0F:3B:35:C9:07:53:D6:1E:41
X509v3 Authority Key Identifier:
keyid:13:23:0D:A7:02:32:F6:67:84:73:0F:D6:C1:25:51:35:B7:F8:D0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyMNpwIy9meEcw_WwSVRNbf40J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/WdujVTQXMuJQbm4POzXJB1PWHkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.75.0/24
IPv6:
2001:7f9:8::/48
Signature Algorithm: sha256WithRSAEncryption
07:af:35:5d:93:0a:06:af:44:8b:3c:b3:ec:c0:8f:87:77:bb:
b2:c7:00:ea:23:05:c3:9f:67:65:08:98:a0:51:85:22:fd:df:
7d:d0:16:f1:e7:40:d8:85:c4:d0:cf:24:e0:fb:7f:aa:39:89:
22:98:b8:3c:12:06:cc:56:87:97:f3:e9:a1:6b:16:09:2d:e8:
01:9b:92:fb:d6:4b:9e:b3:1e:78:f5:26:86:eb:12:ce:96:e7:
bd:c0:d7:dd:84:38:20:0d:bb:28:db:5c:d8:97:58:dc:0d:ea:
07:3e:94:5d:53:6d:61:60:65:eb:8e:bc:dd:85:6f:bf:20:05:
55:d5:d8:58:0d:5e:e2:bc:8a:56:53:2d:c0:66:a2:9f:c1:39:
db:8a:28:31:b1:d8:4f:bd:21:22:bd:3d:5c:b8:bd:83:b2:e4:
cb:3c:8a:23:1e:e4:79:53:30:a6:0e:45:13:9e:21:2a:e6:4c:
c2:3d:72:af:ad:20:01:0f:d7:5e:c7:7a:84:15:35:23:63:c7:
dd:4f:fd:b5:2e:ba:a6:8e:67:b0:76:70:e4:3c:3a:4d:13:22:
af:f3:a7:7b:5e:46:98:c7:87:73:54:c5:1e:54:76:7f:72:a7:
7c:cb:b0:8b:65:ce:3d:1c:85:37:67:b2:59:78:03:12:b0:b3:
b5:cc:f8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:31 2025 by rpki-client