Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/bRgei_kzIQsXuSaxjlkYS4aQUrE.roa
File: bRgei_kzIQsXuSaxjlkYS4aQUrE.roa (raw, json)
Hash identifier: TCbQ3jRo6TRuW/v5YfI3iPIAOOrsp3nTMDhgL3ozAlk=
Subject key identifier: 6D:18:1E:8B:F9:33:21:0B:17:B9:26:B1:8E:59:18:4B:86:90:52:B1
Certificate issuer: /CN=39374019a54d4bde23f0da28a252150d5cb473ad
Certificate serial: 018CC72736B3E577F168ECDE38A4C877ACD0
Authority key identifier: 39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/bRgei_kzIQsXuSaxjlkYS4aQUrE.roa
Signing time: Mon 01 Jan 2024 22:31:25 +0000
ROA not before: Mon 01 Jan 2024 22:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211752
IP address blocks: 195.8.125.0/24 maxlen: 24
2a0a:fcc0::/29 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:36:b3:e5:77:f1:68:ec:de:38:a4:c8:77:ac:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39374019a54d4bde23f0da28a252150d5cb473ad
Validity
Not Before: Jan 1 22:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d181e8bf933210b17b926b18e59184b869052b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:06:d4:a4:0b:69:b6:e6:ab:44:20:98:68:66:
94:b6:cd:ed:e9:38:db:9f:19:1d:33:bf:73:3a:57:
43:96:6e:e1:2c:ca:ce:d3:4e:bd:78:c4:07:32:a2:
60:e9:3f:fe:1d:1f:41:dd:74:5c:f6:84:af:dd:c9:
18:51:e4:11:44:0e:1c:67:58:08:1e:ea:69:ff:e0:
15:df:d2:60:54:07:b3:cd:c9:79:9d:d5:fc:23:4f:
a7:ec:df:e5:66:cc:98:b4:ae:f4:32:93:3e:5f:0a:
9e:0d:22:52:31:d9:2a:71:dd:16:fd:82:99:3a:c4:
d6:42:89:e7:76:f4:f0:6b:68:7d:83:71:f0:5f:a1:
ad:d9:ff:c2:bf:1b:01:3b:94:7c:54:09:5c:cf:2f:
c3:72:b4:95:07:3b:3e:3e:d6:66:57:23:4b:32:5c:
89:4f:3f:fc:f4:40:15:2f:ab:23:90:22:51:48:c8:
83:23:e5:8e:5d:29:d5:99:af:ab:3a:6e:cd:9c:96:
6c:88:4a:56:c6:7e:de:ac:3f:ce:a1:3b:4c:64:e2:
4c:78:ae:42:09:0e:b9:f9:ae:0b:85:af:0e:0b:65:
1f:ec:e4:de:b3:db:3b:48:42:68:08:67:e9:b6:f0:
e6:d5:db:62:78:1b:47:76:6b:4f:95:39:99:1e:9b:
83:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:18:1E:8B:F9:33:21:0B:17:B9:26:B1:8E:59:18:4B:86:90:52:B1
X509v3 Authority Key Identifier:
keyid:39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/bRgei_kzIQsXuSaxjlkYS4aQUrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.125.0/24
IPv6:
2a0a:fcc0::/29
Signature Algorithm: sha256WithRSAEncryption
39:b9:90:50:bb:75:b2:4c:d3:42:f0:77:95:06:b3:36:e8:8c:
20:30:b5:9c:b1:d8:7d:f2:9c:77:72:6c:79:2c:60:13:d8:dc:
e5:40:6c:7c:8a:da:38:7d:94:33:c5:32:4d:79:11:06:51:61:
a1:4d:82:9d:96:9f:4c:35:41:a6:35:4a:d9:67:eb:39:4e:8a:
18:66:af:fa:9f:74:91:6e:a0:7f:4a:04:49:a1:03:c9:fd:54:
53:3f:04:01:ff:4b:43:33:b9:60:16:2f:bf:66:1a:18:8e:b4:
f6:b4:6f:f3:56:c9:90:ae:bb:47:ff:79:7f:f2:7b:40:72:6c:
dd:e2:09:ab:a7:db:b0:1c:42:ae:eb:95:5d:3f:1b:70:77:00:
cd:25:6b:7a:6c:13:4c:64:f8:5e:03:0b:62:05:7c:f5:1c:57:
06:d1:4f:ce:63:26:0d:83:ce:33:16:c7:60:fd:41:25:8f:c5:
2c:01:47:85:0e:94:da:96:28:5c:34:6e:4c:fb:a3:33:43:fd:
ea:31:2f:32:e5:49:36:5c:d1:e0:d9:8c:95:28:08:3d:72:27:
3f:40:d3:0a:a3:9e:74:30:3f:f6:6c:08:83:4d:3f:94:a4:12:
d1:df:cb:59:2a:d3:ce:92:7b:98:4c:be:e0:d7:04:63:3f:34:
78:1c:fc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:13 2025 by rpki-client