Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/Ic-u24aNdkMdE0xtpojKmIhAGXg.roa
File: Ic-u24aNdkMdE0xtpojKmIhAGXg.roa (raw, json)
Hash identifier: 9CuGqkLGq7Iw9i8uRHj1o4NDPIQMahS9frHepmZBZz0=
Subject key identifier: 21:CF:AE:DB:86:8D:76:43:1D:13:4C:6D:A6:88:CA:98:88:40:19:78
Certificate issuer: /CN=90694a622866ae158ed287d2533d40baabea6d7d
Certificate serial: 018FE347C58B0FC8BEAF2ADD7FE512FF25EF
Authority key identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/Ic-u24aNdkMdE0xtpojKmIhAGXg.roa
Signing time: Tue 04 Jun 2024 12:44:42 +0000
ROA not before: Tue 04 Jun 2024 12:44:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30781
IP address blocks: 195.189.36.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e3:47:c5:8b:0f:c8:be:af:2a:dd:7f:e5:12:ff:25:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90694a622866ae158ed287d2533d40baabea6d7d
Validity
Not Before: Jun 4 12:44:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21cfaedb868d76431d134c6da688ca9888401978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:79:ab:c1:99:5d:19:5c:87:24:b2:3d:43:
78:9f:c7:81:ed:5a:4f:06:1e:69:1d:12:84:a5:0d:
b7:1a:72:1e:2b:cc:40:4e:67:a9:44:60:f6:53:5f:
b6:61:aa:e9:64:ef:6f:3d:1c:48:e5:dd:80:09:ef:
62:ff:6f:92:1b:aa:a9:c7:f3:02:30:89:5a:8c:10:
84:c3:ab:38:7b:76:65:40:8b:08:33:41:3e:88:1e:
ac:61:4f:64:cb:5e:8d:95:89:21:5f:56:2a:85:d4:
39:38:46:7c:53:fb:91:52:87:94:bf:08:ce:7a:cd:
85:2e:39:10:8c:54:71:87:35:8d:fd:02:83:25:93:
d2:51:03:8b:93:a4:28:73:c0:b2:d6:42:de:29:27:
91:32:6d:ba:17:f0:3a:ad:ca:84:f6:8d:83:77:da:
55:5b:cd:5e:44:60:d1:f7:06:d2:89:8e:9d:a2:71:
40:17:cc:e5:9f:63:11:2a:b3:97:5c:10:0c:60:01:
ca:f0:e3:1d:4d:90:3e:44:14:e2:93:8c:6c:8a:1f:
ef:e4:04:13:a7:35:9e:9e:c9:7e:cf:e1:d4:32:69:
e4:02:61:90:e3:dc:bd:42:85:30:f5:52:00:bc:7d:
47:26:95:dd:c0:3c:29:ee:30:fa:ac:69:26:dd:37:
18:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CF:AE:DB:86:8D:76:43:1D:13:4C:6D:A6:88:CA:98:88:40:19:78
X509v3 Authority Key Identifier:
keyid:90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/Ic-u24aNdkMdE0xtpojKmIhAGXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.36.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:ff:da:f7:47:54:2c:12:7a:db:a2:64:57:32:a3:c6:83:a8:
3c:03:3b:4e:5f:c7:d5:7c:aa:9e:0a:a1:5b:0d:46:1e:e6:a9:
13:8e:6f:85:ff:4b:10:d7:06:77:d4:45:86:98:29:5c:78:cb:
3e:38:b3:db:06:0f:f6:5b:ec:44:a9:51:f6:42:40:3b:9a:23:
97:89:71:aa:c5:d7:0e:4a:a2:8e:1c:c8:3c:32:3d:f6:98:34:
83:7e:fc:15:bc:f9:45:75:8c:1f:5a:84:f3:da:91:a8:15:fc:
81:38:2a:57:9b:68:19:e5:fb:8a:4e:79:b5:37:a2:51:83:d0:
6d:50:fc:e3:b2:85:b0:65:d8:b2:0e:33:30:d5:64:7f:3c:2f:
0f:cf:71:8a:24:b6:ba:b0:5f:d7:cc:e2:03:bf:58:27:6e:7c:
d4:8d:3d:b5:80:b1:f4:89:4d:fc:11:32:de:c8:99:7f:6f:f1:
19:b3:6d:ec:d5:e7:42:ec:0e:6e:24:ad:62:7d:55:df:26:f1:
58:a9:ba:98:42:e0:73:94:85:17:e4:f6:f8:3e:eb:89:7b:4b:
77:54:81:6a:08:6c:b8:3d:b5:0b:31:c0:b8:12:38:f9:5a:04:
6d:05:fe:7b:f4:46:62:82:b1:f3:80:1b:56:7a:39:9d:e5:70:
44:c2:d8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:38:50 2025 by rpki-client