Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/3u4wi8dOw2PBuxIofIWcfzXk-2Y.roa
File: 3u4wi8dOw2PBuxIofIWcfzXk-2Y.roa (raw, json)
Hash identifier: hVro5SYneWtsBHZWY2fQqsQa6bFA7VPMBo5FVzIrj+s=
Subject key identifier: DE:EE:30:8B:C7:4E:C3:63:C1:BB:12:28:7C:85:9C:7F:35:E4:FB:66
Certificate issuer: /CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Certificate serial: 0192711718540B07BA066EC6064BDCB6258C
Authority key identifier: 9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/3u4wi8dOw2PBuxIofIWcfzXk-2Y.roa
Signing time: Wed 09 Oct 2024 11:43:11 +0000
ROA not before: Wed 09 Oct 2024 11:43:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 559
IP address blocks: 131.152.0.0/16 maxlen: 16
192.43.192.0/22 maxlen: 22
192.43.196.0/24 maxlen: 24
2a0a:4ec0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:71:17:18:54:0b:07:ba:06:6e:c6:06:4b:dc:b6:25:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Validity
Not Before: Oct 9 11:43:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=deee308bc74ec363c1bb12287c859c7f35e4fb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8f:d4:ac:e7:1e:a2:bb:0c:98:46:b2:76:d4:
55:24:25:53:b6:b7:49:2c:6b:e8:ee:cb:a1:4c:80:
f4:21:61:d1:ec:6c:83:00:1b:47:a2:12:ac:e0:49:
2b:a6:f8:18:43:2a:f2:54:4e:77:9b:cb:77:58:d2:
eb:3d:7a:fc:6e:b9:93:dc:1b:99:40:f2:74:e1:26:
e5:4c:b2:ec:aa:81:74:4a:33:0d:44:28:3b:b3:bf:
59:5a:2a:0e:05:1a:e3:eb:a9:31:bd:68:10:49:61:
8f:3e:6c:7b:b1:8f:28:fa:d2:e7:19:1b:60:37:e3:
8c:75:4c:4a:5d:00:b7:7f:22:04:20:b0:e5:41:23:
22:91:ec:9c:d5:a2:90:84:80:3e:2c:c6:c5:0e:cf:
37:07:0f:dc:48:25:20:a9:69:e6:93:df:b0:9b:9b:
87:43:f3:fb:c5:85:74:da:54:ad:98:aa:c4:2c:7e:
cc:28:b0:04:64:23:bb:79:e4:28:d1:ba:8e:35:78:
ce:44:4d:75:9e:ae:46:7d:f1:8e:cf:03:92:30:f7:
47:28:4f:4f:d3:53:b4:b6:86:2b:6c:c6:e3:31:55:
e0:a0:40:be:7d:62:09:1f:30:c9:36:3e:02:7d:ce:
4a:7d:7b:59:20:d2:e9:05:cd:5b:f9:de:7c:f5:bc:
f3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EE:30:8B:C7:4E:C3:63:C1:BB:12:28:7C:85:9C:7F:35:E4:FB:66
X509v3 Authority Key Identifier:
keyid:9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/3u4wi8dOw2PBuxIofIWcfzXk-2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.152.0.0/16
192.43.192.0-192.43.196.255
IPv6:
2a0a:4ec0::/29
Signature Algorithm: sha256WithRSAEncryption
61:ec:f5:1c:f7:6f:fc:83:c8:90:f8:0b:27:04:70:fd:6e:09:
a5:2d:4e:e3:ce:60:e6:8c:f0:e1:37:a4:03:dd:08:2b:7c:9a:
1d:5f:30:a4:60:74:00:e8:84:c1:d8:b7:43:69:ce:d7:0e:23:
5f:cb:e7:40:20:8c:d8:1d:7b:41:1f:ae:f5:f4:ac:25:19:1d:
86:f2:5d:8f:24:b6:0f:49:2d:52:1e:76:53:4a:33:97:95:23:
cc:2e:a8:ee:c9:68:3e:a2:48:34:53:80:84:bf:31:1d:51:57:
63:8e:75:de:84:ca:08:b2:aa:05:1f:dc:f8:d6:73:45:c3:68:
13:1c:89:2f:23:55:6f:ce:f9:d6:75:ae:be:40:7c:68:1e:b8:
8a:07:44:74:66:50:b3:d8:c2:2f:7b:14:fd:2e:28:b7:e0:94:
b8:77:5e:df:44:79:d0:19:a3:a2:b1:46:56:6f:db:41:6f:55:
02:94:36:c5:16:4f:5e:fb:ae:c9:80:74:62:e8:8f:66:9e:7b:
e4:42:f2:d1:ea:f0:42:bc:15:2e:29:3e:b0:91:5d:fc:33:56:
17:a7:e8:89:a4:c3:82:29:1e:e5:4f:99:2a:e8:3b:83:1c:4e:
28:95:b8:ee:5d:7b:bd:f1:2e:f5:e1:ea:ef:0a:34:a2:36:89:
21:15:d9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:40:30 2025 by rpki-client