Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/IITovAsidF5wWrcRAjHyaCsWehg.roa
File: IITovAsidF5wWrcRAjHyaCsWehg.roa (raw, json)
Hash identifier: 14BYCv02N9SDp0PAYpaC1tMJSX/R+LUf+i9D2G1NxDs=
Subject key identifier: 20:84:E8:BC:0B:22:74:5E:70:5A:B7:11:02:31:F2:68:2B:16:7A:18
Certificate issuer: /CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Certificate serial: 018CC4253D0EEB9C7867854500D7DC0DE6A4
Authority key identifier: 05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/IITovAsidF5wWrcRAjHyaCsWehg.roa
Signing time: Mon 01 Jan 2024 08:30:23 +0000
ROA not before: Mon 01 Jan 2024 08:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137
IP address blocks: 149.132.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:3d:0e:eb:9c:78:67:85:45:00:d7:dc:0d:e6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Validity
Not Before: Jan 1 08:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2084e8bc0b22745e705ab7110231f2682b167a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6f:67:67:2c:55:ec:10:0d:23:dd:b9:5c:3d:
7c:db:67:e8:52:2d:3a:05:23:6f:ed:ca:a7:23:06:
31:68:f8:37:b4:3d:b5:12:99:1e:0b:9f:94:81:97:
4f:cb:93:43:12:ff:f3:81:8f:68:69:9d:59:86:71:
b7:2b:10:7f:32:ab:c0:8e:81:16:91:71:ea:55:24:
c2:d5:bb:7a:54:f3:de:b1:cc:89:9e:08:dd:6e:54:
fe:24:8d:3c:df:1f:92:2a:96:d8:a9:c3:b4:70:6b:
33:39:31:36:73:f9:ca:40:4f:57:e6:52:34:99:9c:
cb:71:8d:71:f1:08:1c:cf:40:60:25:fa:a5:fc:1e:
72:e2:39:db:33:a6:b6:e2:34:ac:a4:00:bb:ef:69:
5a:5a:9f:ad:4c:27:7c:3a:24:a1:7a:d7:ed:04:b4:
ff:91:0e:50:08:98:ca:d4:9e:2b:a0:f3:3e:93:14:
e1:f2:2c:fb:c9:5e:fe:02:c5:99:81:2f:4f:04:1c:
11:f8:8f:12:6e:b4:34:7e:aa:4a:ff:13:50:4e:42:
2d:d1:23:fd:aa:5f:1b:83:9f:94:6c:da:56:b4:20:
04:ad:21:e2:e1:49:71:de:8d:e2:a1:e5:cd:82:c6:
05:4e:cb:1a:af:45:b9:fd:07:7a:1e:51:f0:16:b7:
7a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:84:E8:BC:0B:22:74:5E:70:5A:B7:11:02:31:F2:68:2B:16:7A:18
X509v3 Authority Key Identifier:
keyid:05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/IITovAsidF5wWrcRAjHyaCsWehg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.132.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:eb:28:cc:bd:8c:bd:7e:81:cd:91:e6:1a:42:bf:39:ae:27:
27:35:e6:b0:c2:40:b0:0d:59:cd:10:12:3d:25:e1:65:6a:30:
c3:02:3b:0e:bf:3a:7f:92:5d:0c:bf:01:10:60:b3:5b:23:24:
7c:40:03:4f:46:e0:33:7a:c3:5c:b1:2e:a2:8d:4c:96:ee:02:
46:f3:02:29:56:61:30:0c:d4:ad:fd:0b:e3:07:12:5a:99:8a:
e4:b3:35:31:8e:5c:f8:7b:ff:b1:03:b8:3f:1a:4c:22:55:15:
18:2b:14:00:f4:5d:b0:0d:2e:a1:86:a3:e6:e5:88:fd:b8:06:
9b:af:b4:e3:f8:32:26:94:29:a2:ba:e0:d9:5b:a6:d5:55:a9:
fe:97:fa:4c:d7:a0:a7:64:15:a7:33:ce:f6:77:0a:0d:c1:9f:
b7:f3:73:c9:11:a9:38:d6:e1:6e:89:aa:10:e9:96:f8:35:6a:
e5:05:50:ae:82:78:67:c7:d5:f1:72:d8:13:80:70:d3:e3:2a:
7f:0e:7e:14:2d:83:e5:e1:52:c0:bf:1e:2d:c9:c4:aa:82:a5:
fd:a7:d7:1e:a0:c3:53:3c:c1:ca:cf:f7:95:72:f9:97:4c:14:
3b:0d:a0:61:75:28:b5:01:c8:0e:ab:e3:08:07:15:ca:df:25:
e1:f5:fe:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:11 2025 by rpki-client