Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/pMg8y3R3swp51slWGASXjIFzms0.roa
File: pMg8y3R3swp51slWGASXjIFzms0.roa (raw, json)
Hash identifier: dk07PbVoKSmAeSfinIgp5Exthi5851mH944uPe7PtDw=
Subject key identifier: A4:C8:3C:CB:74:77:B3:0A:79:D6:C9:56:18:04:97:8C:81:73:9A:CD
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019426D98B84A95B2EFF0E04FF59499D3494
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/pMg8y3R3swp51slWGASXjIFzms0.roa
Signing time: Thu 02 Jan 2025 11:49:38 +0000
ROA not before: Thu 02 Jan 2025 11:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41457
IP address blocks: 192.40.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 19:24:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:8b:84:a9:5b:2e:ff:0e:04:ff:59:49:9d:34:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Jan 2 11:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4c83ccb7477b30a79d6c9561804978c81739acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:3b:99:00:03:78:fd:12:af:e8:01:a3:95:
e6:25:22:de:9b:bd:69:05:6c:63:e6:9a:77:7a:75:
c7:0a:9c:ab:f0:52:c7:a3:7c:60:d9:3f:b7:48:87:
be:0d:af:d2:d0:fc:4b:5d:79:53:3f:3a:c9:f1:c3:
a8:b5:64:40:a0:16:d7:cc:1a:02:a1:3e:4b:d7:42:
ae:9d:67:4e:2c:8b:4d:1c:45:c9:50:07:e6:3d:79:
61:66:b2:2a:a0:2e:f7:5f:fd:eb:f8:0c:65:21:52:
a3:65:41:d5:d0:3e:dd:f9:2c:bb:9c:94:13:35:7e:
f6:a6:b5:2e:dc:d7:29:6c:0c:57:03:a4:9a:44:e4:
e6:a6:e2:c5:b4:ae:86:a3:c2:20:43:f5:63:c3:d9:
05:91:db:16:9a:b0:0f:85:2f:fd:ad:fb:39:95:7e:
5a:49:dd:d0:60:2d:32:c0:26:79:d5:7f:73:10:b6:
46:40:43:2c:e0:3f:fd:ec:1b:f4:61:3a:f7:29:33:
0a:5a:16:95:f6:80:60:db:9e:fd:92:f3:39:0c:f3:
2a:b8:bf:71:67:7d:4e:bf:d3:0d:80:66:28:d4:5d:
b5:7c:3a:06:eb:52:99:54:da:b1:4c:47:4c:07:43:
16:12:ee:4c:ac:92:b9:80:cb:0e:3a:46:83:44:b0:
86:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C8:3C:CB:74:77:B3:0A:79:D6:C9:56:18:04:97:8C:81:73:9A:CD
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/pMg8y3R3swp51slWGASXjIFzms0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.40.69.0/24
Signature Algorithm: sha256WithRSAEncryption
64:8f:e0:02:c4:93:b8:e0:a4:3b:a2:85:66:f9:d3:35:a2:13:
64:97:1b:05:a1:83:3d:c3:a4:83:de:d7:3b:e0:ad:6d:e5:94:
c3:cb:a1:d2:73:39:ee:a3:b2:fb:65:83:17:ad:7d:30:b9:b9:
53:e6:42:a2:f6:99:5b:38:ca:62:f0:cb:e6:a5:48:b7:de:a8:
0b:05:e0:03:b5:03:56:6e:ea:33:04:95:bf:88:1a:cd:25:7b:
e9:19:de:4c:2f:45:ca:16:90:31:85:5a:15:4b:83:23:ea:61:
5d:a9:9c:7b:d0:2c:0c:1b:53:b5:f8:cb:a5:42:91:48:9d:be:
8c:99:35:19:44:d4:92:50:aa:87:7a:13:5d:09:4e:e6:e9:79:
a0:9d:f3:c1:fd:79:dd:9c:69:ce:bd:bb:35:60:ee:6d:c6:30:
4c:e2:47:ca:5a:be:ea:67:c8:ab:21:c1:32:fb:6d:35:29:63:
53:43:92:0e:65:3f:3b:68:5a:4f:9c:ba:26:06:17:5e:1e:58:
6e:24:90:b5:03:e1:e6:3b:37:fc:dc:a2:5d:f1:a2:d5:27:8f:
d6:7e:07:6a:a0:b2:4c:5a:d1:e8:ed:d0:21:a8:5b:b9:1a:ac:
96:e3:77:ad:2b:49:a0:54:c3:41:4f:7b:26:3e:f0:d7:2b:d7:
5d:18:b0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:32:33 2025 by rpki-client