Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/iGCkCHwFS31sy4rilqEQoLL6Jqc.roa
File: iGCkCHwFS31sy4rilqEQoLL6Jqc.roa (raw, json)
Hash identifier: z5jhz4JTVaO4HtI2K4u28H9+lko4pqAeXiblFSDIyeE=
Subject key identifier: 88:60:A4:08:7C:05:4B:7D:6C:CB:8A:E2:96:A1:10:A0:B2:FA:26:A7
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258F92396415BC579D03EE67956DA380
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/iGCkCHwFS31sy4rilqEQoLL6Jqc.roa
Signing time: Thu 02 Jan 2025 05:49:13 +0000
ROA not before: Thu 02 Jan 2025 05:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39523
IP address blocks: 146.120.215.0/24 maxlen: 24
146.120.216.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 18:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:92:39:64:15:bc:57:9d:03:ee:67:95:6d:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8860a4087c054b7d6ccb8ae296a110a0b2fa26a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:61:ed:81:82:19:5e:6b:79:e0:22:cd:26:83:
17:69:f7:bd:6c:17:0f:c5:ab:23:43:dc:26:8e:36:
35:ef:c5:ff:78:ae:3a:24:70:9e:ad:1d:5f:5e:9e:
ad:46:01:91:04:6a:fc:41:ac:87:22:a0:d9:6a:e5:
73:35:4c:36:71:27:01:73:fa:26:f5:af:c3:e5:ce:
e4:64:49:99:d1:90:43:2a:c4:cf:45:39:a7:5b:9c:
fe:3c:1c:01:14:81:e7:6a:01:5a:d7:f1:e3:d8:26:
24:f3:84:09:13:8e:5c:99:cc:70:81:75:53:28:1f:
00:c7:62:80:a9:e6:89:97:c7:80:20:8a:71:ba:15:
ea:89:43:03:0d:19:88:3e:a6:84:46:0a:4e:8a:13:
af:8d:0b:26:f0:58:89:49:1e:49:c0:fa:b1:c6:b5:
f7:a3:94:6c:39:b5:26:0b:f0:3a:0f:c1:08:da:58:
62:b6:b0:58:15:26:50:87:8b:13:9e:95:a2:c9:a2:
62:ae:e3:53:55:0a:d4:c7:89:0d:39:ad:8a:ed:be:
d3:5d:e8:79:80:a4:dc:da:92:6b:71:45:e6:e5:15:
88:ad:01:a2:90:ae:84:e0:89:a6:55:59:9b:2c:2a:
56:86:f7:7c:cb:7f:c7:4a:17:26:db:8f:55:be:6a:
5c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:60:A4:08:7C:05:4B:7D:6C:CB:8A:E2:96:A1:10:A0:B2:FA:26:A7
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/iGCkCHwFS31sy4rilqEQoLL6Jqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.215.0-146.120.219.255
Signature Algorithm: sha256WithRSAEncryption
44:58:d6:03:87:09:be:a8:8b:89:86:60:73:02:b1:61:86:59:
63:9b:e1:be:76:df:bb:ef:5c:4c:10:d4:2e:e2:3b:b9:15:f7:
74:75:47:f2:fa:6d:80:1e:bc:a3:4f:a3:83:08:19:74:92:2e:
ef:ab:d8:40:24:10:fe:b4:72:a7:6a:98:91:c9:bb:3e:45:eb:
ff:df:41:a5:12:75:6f:a2:65:55:50:c0:6f:74:78:ba:71:15:
48:29:1c:12:bb:20:ed:e9:23:7c:98:9d:0e:a9:a4:1b:9a:8a:
34:54:90:50:85:e4:9e:91:bc:50:d2:2f:da:4d:16:56:08:0e:
be:64:4c:36:fc:5d:3b:1a:4e:41:0a:3b:a2:74:27:fb:05:2e:
26:0e:53:1c:49:04:eb:4f:a7:88:14:32:6a:00:95:3a:d1:e5:
fa:ad:7d:6f:ee:fd:16:89:29:f3:7e:89:56:ac:67:a2:ed:b8:
a3:3d:db:46:87:f4:fb:7f:a5:8c:9d:e1:99:83:c3:a9:6f:84:
5f:2f:0f:d3:79:ba:21:a5:83:93:9d:4a:ed:4e:e3:ae:06:d8:
c2:73:ef:ab:44:21:03:2c:d1:02:de:ed:99:bd:ce:ca:f2:e8:
ca:35:ae:b5:79:af:d9:39:c6:0a:6b:22:57:0d:ed:1c:9c:58:
25:00:f1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:22 2025 by rpki-client