Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/4H5Mshu7lvYD-womgckYQXHJQkU.roa
File: 4H5Mshu7lvYD-womgckYQXHJQkU.roa (raw, json)
Hash identifier: W/PdE69lXBlbFmriTzFHjs2+AbXwrF5nLUuYUCsTZQs=
Subject key identifier: E0:7E:4C:B2:1B:BB:96:F6:03:FB:0A:26:81:C9:18:41:71:C9:42:45
Certificate issuer: /CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
Certificate serial: 0194266B41A1CD05605E3A2DA86D4AA95A89
Authority key identifier: 44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/4H5Mshu7lvYD-womgckYQXHJQkU.roa
Signing time: Thu 02 Jan 2025 09:49:10 +0000
ROA not before: Thu 02 Jan 2025 09:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45022
IP address blocks: 195.5.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 13:45:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:41:a1:cd:05:60:5e:3a:2d:a8:6d:4a:a9:5a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
Validity
Not Before: Jan 2 09:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e07e4cb21bbb96f603fb0a2681c9184171c94245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1b:82:3e:b1:5e:a7:12:37:0c:a7:fb:ae:81:
4a:fa:90:d0:b5:a2:58:0c:0e:aa:86:fb:7a:de:68:
90:15:fd:0a:06:17:53:84:0d:2a:9b:db:85:cc:e6:
aa:f1:aa:c3:ca:92:75:a0:0f:11:1c:07:bd:5e:d1:
ec:30:3c:a7:2a:c7:06:64:d4:f2:d0:8d:5b:cc:74:
9d:8f:cd:b7:7e:c5:59:17:dd:60:b5:bc:48:22:93:
72:65:8b:0c:36:cf:dd:52:11:bf:9d:0a:b6:10:19:
72:aa:d3:ae:e1:0d:8e:95:f6:48:44:e0:e2:8c:56:
f1:fa:0b:dc:cc:85:0d:95:87:18:4a:77:0b:f2:9b:
6a:16:96:e3:ab:21:ab:ce:c1:d3:c4:7d:8d:50:9b:
06:eb:da:37:d9:31:7b:1b:be:29:e7:92:57:95:6d:
e5:79:47:3f:62:38:a1:60:d6:4b:4f:c7:0a:11:5b:
ab:6b:59:2f:53:0d:d7:92:c2:1f:e7:4d:4e:be:2a:
89:97:1b:f9:35:b9:87:27:d5:1e:ec:0a:e5:d8:bb:
30:cd:c1:e6:33:a9:12:f2:3d:76:84:49:63:26:34:
75:d8:3c:a5:19:cf:2e:25:ab:1a:b4:47:44:82:bd:
bf:d5:b5:b1:60:10:48:69:3d:e4:c6:cd:a6:95:49:
62:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7E:4C:B2:1B:BB:96:F6:03:FB:0A:26:81:C9:18:41:71:C9:42:45
X509v3 Authority Key Identifier:
keyid:44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/4H5Mshu7lvYD-womgckYQXHJQkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.184.0/24
Signature Algorithm: sha256WithRSAEncryption
11:3c:67:97:3d:f9:b9:58:bd:d3:6e:9a:d0:34:7c:37:ad:70:
03:50:f7:30:98:86:21:bd:0c:8d:5c:6f:b7:8a:43:22:d3:87:
3d:49:ae:91:a2:e2:21:3d:7b:a5:92:f5:bf:f2:4d:c5:84:9f:
b3:96:b2:21:4a:c9:6f:7c:1f:39:60:e5:68:52:e5:dd:86:78:
86:27:7a:92:c8:00:19:64:c0:f8:32:0d:ed:a5:07:de:cb:30:
56:67:85:82:d3:a4:ae:25:91:b4:30:2e:e8:6c:e7:2f:51:58:
d2:09:bc:ff:35:0e:6d:ef:ed:e2:79:87:2d:6f:ce:9f:ef:c6:
b5:8e:b0:5d:5f:f7:c9:0e:6a:2c:2c:f0:dc:59:a1:02:d9:23:
c3:ba:05:bc:43:2e:91:5b:52:0d:39:5c:f8:56:41:de:c7:ba:
9e:28:56:7c:99:a5:bd:88:b6:43:f5:c8:03:fa:fb:19:8f:85:
c3:b9:7a:55:54:41:d3:31:5b:f3:51:5f:c3:e2:44:93:a5:85:
d8:4a:9c:fd:e9:17:1e:4d:6d:da:ac:05:eb:ce:0b:f6:1e:da:
3e:a4:95:17:6d:c0:0a:03:89:fa:5b:dd:dc:ae:5b:49:03:f9:
55:86:86:10:83:f6:7e:90:60:db:0d:86:12:4d:54:9c:55:0b:
dd:ea:f4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:15:56 2025 by rpki-client