Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/1UJ1YfkXgFdnnffKjC9DNrP0zdU.roa
File: 1UJ1YfkXgFdnnffKjC9DNrP0zdU.roa (raw, json)
Hash identifier: JtdhVACrpqGFgKWFQQvsbO8MkI8VJNXZ4mkNLOnZFSc=
Subject key identifier: D5:42:75:61:F9:17:80:57:67:9D:F7:CA:8C:2F:43:36:B3:F4:CD:D5
Certificate issuer: /CN=8a698a14fb61a687af0a63f7c655c001f6701282
Certificate serial: 019159BB688D8FFD290522E90B76C762192B
Authority key identifier: 8A:69:8A:14:FB:61:A6:87:AF:0A:63:F7:C6:55:C0:01:F6:70:12:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/immKFPthpoevCmP3xlXAAfZwEoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/1UJ1YfkXgFdnnffKjC9DNrP0zdU.roa
Signing time: Fri 16 Aug 2024 05:48:59 +0000
ROA not before: Fri 16 Aug 2024 05:48:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34730
IP address blocks: 195.238.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:59:bb:68:8d:8f:fd:29:05:22:e9:0b:76:c7:62:19:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a698a14fb61a687af0a63f7c655c001f6701282
Validity
Not Before: Aug 16 05:48:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5427561f9178057679df7ca8c2f4336b3f4cdd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:57:8c:17:aa:77:8d:ad:9f:4b:b6:d5:36:
bc:76:1a:0c:c7:ca:b1:0c:4e:d7:71:76:7a:81:56:
36:46:f8:d3:6e:f3:15:e8:f1:f3:02:f0:78:7c:08:
dc:8d:21:86:10:d0:f4:5a:c5:a8:d9:9f:7b:db:f3:
3b:5a:66:25:f0:d2:51:f6:0a:40:db:5d:ca:f4:02:
bd:6c:72:f6:30:f0:f2:81:c8:3b:c5:3e:54:7d:00:
ae:2a:5d:9e:9c:57:8e:76:66:b4:6a:ad:9b:fb:93:
64:2a:52:2f:9e:5c:cf:a3:6c:cf:28:42:f1:f6:b2:
4c:9d:48:1c:b1:82:b4:0a:69:3a:59:ba:d7:0f:43:
e7:04:e4:73:f3:8b:ba:e2:ea:a7:69:52:ec:dc:a5:
04:dc:8b:88:41:fa:4f:26:46:65:a0:6a:d2:56:14:
1d:a9:35:e4:22:d7:ea:18:94:72:61:03:5d:9b:ca:
5f:f3:32:ce:40:fc:3b:77:18:bb:87:cd:be:ea:77:
f1:6f:12:c9:07:1a:bd:81:5d:ec:fc:da:58:ae:be:
8d:7e:10:c9:65:5d:45:08:64:a4:b1:99:ed:d4:2e:
be:c1:58:f4:81:2b:9e:0b:6e:fd:d5:dd:86:fb:45:
c6:35:ae:98:b0:06:4b:85:ef:d4:c9:34:64:7f:d5:
bd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:42:75:61:F9:17:80:57:67:9D:F7:CA:8C:2F:43:36:B3:F4:CD:D5
X509v3 Authority Key Identifier:
keyid:8A:69:8A:14:FB:61:A6:87:AF:0A:63:F7:C6:55:C0:01:F6:70:12:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/immKFPthpoevCmP3xlXAAfZwEoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/1UJ1YfkXgFdnnffKjC9DNrP0zdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.245.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:9a:0f:8e:6a:f5:2f:25:e8:85:5d:76:1d:eb:e9:08:eb:1e:
4f:56:5f:4e:81:c5:3d:cf:b8:6d:70:2e:d4:9b:21:5f:5f:5a:
9a:93:83:62:1c:2e:62:0b:7c:e4:c8:54:91:cb:71:85:95:73:
30:f8:d9:05:17:6c:6a:20:f2:bb:a2:fb:c9:b5:3c:98:3d:ad:
c2:a1:da:ea:10:8a:8d:74:43:67:89:42:bb:6c:ed:4b:d9:b8:
2d:34:ff:4d:bd:07:6a:a5:f6:6b:fe:ef:9a:1e:41:b6:f9:f3:
9f:9b:b7:cc:c5:c6:02:76:ba:0c:aa:49:9c:50:5e:d2:c6:e2:
e2:ea:58:10:6a:e2:13:00:d7:e5:89:4b:df:02:a6:33:73:34:
94:c5:e6:bd:b4:ef:1c:39:cb:6f:50:77:c6:c0:49:27:a5:0f:
05:b8:65:1b:57:b4:18:0a:7f:1f:6e:1f:2d:67:52:d3:c1:2f:
de:28:38:fa:0b:26:2f:42:4a:0a:50:c8:02:9c:14:9a:3a:c5:
5d:e4:d6:4d:2c:e7:f5:cc:f0:88:5e:9c:76:9c:c6:4d:22:2f:
e7:d2:15:da:73:11:3e:a4:eb:1d:63:71:7c:fb:c1:dd:37:1c:
0f:f8:ac:c9:10:5b:ef:6d:13:8f:98:ec:f3:eb:ed:a6:23:dc:
65:39:93:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:43:36 2025 by rpki-client