Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aVP7OBnrbzF3C6FxEQO-dIyVtlE.roa
File: aVP7OBnrbzF3C6FxEQO-dIyVtlE.roa (raw, json)
Hash identifier: JHdkupNefiPLzi8GPHuTuCxeENE5//Ovquw/47fdFBc=
Subject key identifier: 69:53:FB:38:19:EB:6F:31:77:0B:A1:71:11:03:BE:74:8C:95:B6:51
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A3E1B6334E937E9C0DE148851116D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aVP7OBnrbzF3C6FxEQO-dIyVtlE.roa
Signing time: Tue 02 Jan 2024 12:33:35 +0000
ROA not before: Tue 02 Jan 2024 12:33:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203781
IP address blocks: 146.120.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Sep 2024 16:52:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:3e:1b:63:34:e9:37:e9:c0:de:14:88:51:11:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6953fb3819eb6f31770ba1711103be748c95b651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:98:16:b3:fc:76:67:ed:e5:71:b2:52:47:46:
7c:ae:d3:c6:29:38:6a:be:38:63:92:78:0d:da:13:
13:fd:fe:d5:fe:56:53:8e:c5:75:a8:af:14:a6:5e:
59:88:6e:95:1f:f3:2b:e0:40:a9:db:1d:25:00:ad:
b8:e2:b8:f3:0f:a4:75:73:49:6a:73:5d:2a:03:7c:
2d:f7:e6:d2:84:6f:1d:c3:66:f2:4b:2d:e6:21:6e:
24:2f:4a:20:1d:e2:e1:30:1a:35:7c:2b:62:f9:31:
55:e2:aa:89:ee:51:8a:10:b0:43:e8:05:ca:3f:2c:
82:65:5f:68:d3:b1:ae:c8:4d:df:fa:3a:c4:4f:3b:
28:f7:97:46:d9:b0:83:eb:ff:8f:a4:99:d1:3b:60:
e7:17:0a:21:d3:cc:9e:9b:ab:eb:90:e7:2b:a8:ed:
e4:4e:92:ad:ee:ad:ef:21:56:8c:fe:6d:3d:9a:4a:
87:fa:d5:63:55:8f:45:b3:d0:86:aa:3a:78:34:7e:
08:eb:ae:c9:bb:9a:65:dd:85:df:78:db:d1:11:a7:
7c:d6:32:fe:64:72:90:fc:0a:57:d4:54:d2:f5:ba:
35:d1:63:61:09:6b:a1:c5:c9:14:b2:23:f0:18:fe:
4b:fa:3a:69:1e:46:bb:32:62:70:b4:26:bc:47:71:
a6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:53:FB:38:19:EB:6F:31:77:0B:A1:71:11:03:BE:74:8C:95:B6:51
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aVP7OBnrbzF3C6FxEQO-dIyVtlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.243.0/24
Signature Algorithm: sha256WithRSAEncryption
32:28:60:0e:4e:18:7c:cc:73:4f:d8:1b:12:1e:4c:74:af:9b:
ff:da:28:03:3c:2c:b9:8b:d9:51:ba:66:81:49:d3:db:ae:be:
6d:6f:36:e7:f5:d3:ba:de:1d:0d:2a:fe:bf:2e:be:2e:35:73:
64:10:a7:f9:56:e7:78:4a:6c:8d:f8:2f:19:90:73:ca:87:99:
5b:2d:84:35:10:cc:35:f4:50:9f:cd:d8:20:31:49:be:b4:72:
47:c2:ed:8d:6c:5f:78:d3:41:b0:aa:87:dd:62:2e:ec:7d:47:
78:43:c8:43:79:c5:dd:e1:d5:fd:2e:9c:1f:af:43:67:8c:c3:
48:35:3b:d9:fa:2e:ac:32:6a:1e:28:4e:6e:ed:35:dd:a5:59:
7e:73:03:f0:93:d7:b8:7d:3b:42:4f:23:82:d5:85:45:4a:43:
38:12:eb:e9:d6:0d:b4:6b:64:44:fe:7d:c8:8b:cf:45:0d:c7:
56:b4:3e:76:6b:7f:21:34:f2:91:d1:6f:e9:e5:56:f5:11:ec:
38:30:80:0c:ab:ae:93:7d:71:44:c3:74:61:87:e5:09:52:f4:
01:8d:bc:3a:c7:13:85:cb:17:45:20:d1:27:c8:46:ea:cb:ce:
4f:1a:f8:62:66:cb:69:b3:3c:9e:c5:e9:51:f8:4e:b4:80:47:
74:e0:61:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:13:01 2025 by rpki-client