Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/m6i3L3rsNoFflT7V8M0Osl_HFVg.roa
File: m6i3L3rsNoFflT7V8M0Osl_HFVg.roa (raw, json)
Hash identifier: /l/WPVT/Eh7kFbcJvLfnFD9xPA4325w8s14WhCF9jK4=
Subject key identifier: 9B:A8:B7:2F:7A:EC:36:81:5F:95:3E:D5:F0:CD:0E:B2:5F:C7:15:58
Certificate issuer: /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial: 0193D683CE0A33B46B43BD7DD2E8E226493F
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/m6i3L3rsNoFflT7V8M0Osl_HFVg.roa
Signing time: Tue 17 Dec 2024 21:26:22 +0000
ROA not before: Tue 17 Dec 2024 21:26:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3356
IP address blocks: 194.146.133.0/24 maxlen: 24
194.146.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d6:83:ce:0a:33:b4:6b:43:bd:7d:d2:e8:e2:26:49:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Validity
Not Before: Dec 17 21:26:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ba8b72f7aec36815f953ed5f0cd0eb25fc71558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:51:bb:03:80:82:24:d9:02:9d:33:53:5e:d6:
b3:b2:fe:ba:a9:04:3c:37:aa:d4:d3:63:78:13:a0:
21:3a:0a:0e:78:85:fe:f8:04:9b:c7:a3:50:64:5b:
a2:4d:fc:03:46:b0:2d:54:f2:d5:e3:3a:87:cb:11:
3e:da:0b:2e:e3:e8:22:7b:1f:6e:4e:80:a7:35:ac:
70:18:36:7a:86:15:bd:e1:bb:a2:79:ec:2d:12:8c:
00:17:d9:b1:43:bb:db:a3:7d:5b:05:7f:80:09:5a:
b2:30:79:a5:22:d4:fb:2d:4a:ff:11:9b:9f:7b:86:
2a:de:c3:84:6d:bd:e4:52:e1:28:e9:a6:36:db:91:
c4:f3:c1:96:86:49:91:f2:91:0b:63:18:97:2f:58:
ce:79:ce:d3:42:db:cb:e7:be:e3:b5:c2:09:05:87:
14:a0:c5:24:dd:23:08:9e:1d:cb:1f:f9:07:bb:a0:
5b:f2:26:fa:ac:d4:37:06:25:cb:a9:a7:48:08:60:
cd:71:30:84:d4:75:3b:89:f4:60:5a:3b:41:82:d2:
0e:4e:c5:f0:e8:a3:2a:2e:d7:1e:ec:07:2c:1c:64:
ba:14:f1:17:e7:8d:41:2f:14:40:d3:53:8e:64:1e:
9c:dc:dd:bc:28:e3:b0:c5:4d:91:fe:52:0e:51:00:
f2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A8:B7:2F:7A:EC:36:81:5F:95:3E:D5:F0:CD:0E:B2:5F:C7:15:58
X509v3 Authority Key Identifier:
keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/m6i3L3rsNoFflT7V8M0Osl_HFVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.133.0/24
194.146.135.0/24
Signature Algorithm: sha256WithRSAEncryption
81:dd:73:3a:2b:b5:d1:66:41:dd:de:a6:72:94:ca:06:c3:cf:
60:b6:64:ce:15:f0:1d:16:14:15:b8:e5:72:be:9b:6b:96:8d:
08:39:75:71:d0:ec:02:75:a8:a1:2e:23:6e:3e:59:ee:b4:45:
23:35:39:cf:93:b4:d0:a8:ce:3b:30:bc:fe:c5:6e:e4:2a:a2:
df:0f:f6:50:52:10:55:62:05:11:95:13:64:af:bf:9e:93:1d:
16:3d:0f:5c:de:a2:9c:91:a4:1c:b2:79:b8:e0:c2:64:c4:ac:
1e:35:32:03:53:a9:91:51:e3:71:71:7d:18:98:c8:ac:be:e3:
84:cd:25:30:c4:46:9d:72:24:a8:34:4b:11:1d:1f:58:f5:b3:
b5:1f:41:ed:b5:94:f7:c8:fd:05:cf:79:fa:40:5b:0e:ef:fc:
b0:5c:10:3d:e3:49:af:eb:a1:86:92:74:d0:3e:d8:89:86:49:
dc:0f:2c:cf:55:81:2b:92:d6:95:56:f3:ae:2f:84:02:51:fa:
a4:de:6a:36:bc:ae:7e:71:50:a8:22:f0:8f:8c:3d:fa:d3:eb:
fa:58:2b:3d:68:15:94:fd:79:f0:62:10:d7:d3:15:64:53:1f:
9d:35:5e:c0:40:57:e0:0c:70:e4:10:df:d1:1c:b4:1b:91:fc:
cb:cc:dd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:46:03 2025 by rpki-client