Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/N27Jd4dI1yfNSmvhavArZkd4_Hc.roa
File: N27Jd4dI1yfNSmvhavArZkd4_Hc.roa (raw, json)
Hash identifier: 6eX+KJim/GIAbh2qCWiis8xcwtYL00fosQmpVCdclGI=
Subject key identifier: 37:6E:C9:77:87:48:D7:27:CD:4A:6B:E1:6A:F0:2B:66:47:78:FC:77
Certificate issuer: /CN=b209721f4548c26cf362e944a81b1acee7b24b53
Certificate serial: 018CC56DF8849F8E6283A64257F7DCFA5EC0
Authority key identifier: B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/N27Jd4dI1yfNSmvhavArZkd4_Hc.roa
Signing time: Mon 01 Jan 2024 14:29:27 +0000
ROA not before: Mon 01 Jan 2024 14:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31391
IP address blocks: 192.115.208.0/22 maxlen: 24
192.115.0.0/21 maxlen: 24
2a01:4280::/32 maxlen: 64
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f8:84:9f:8e:62:83:a6:42:57:f7:dc:fa:5e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209721f4548c26cf362e944a81b1acee7b24b53
Validity
Not Before: Jan 1 14:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=376ec9778748d727cd4a6be16af02b664778fc77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:e8:14:d5:4a:1c:fa:70:8b:d5:e4:18:1d:
55:76:62:f3:6d:b0:5d:2d:df:58:4f:2c:d4:9e:08:
69:b6:77:19:5e:ae:a3:c3:28:9b:ed:e4:4c:6d:e9:
0c:5c:47:d3:bd:c4:71:21:9c:59:81:c1:84:76:8e:
0c:5b:f6:4d:b1:0c:b2:5c:2d:ad:46:12:78:7a:93:
f3:7b:ac:cc:f8:8c:c8:c4:3a:7c:2e:64:64:e1:dc:
47:9e:e7:dc:20:01:8c:26:7a:24:48:64:1b:00:3d:
4e:87:d5:6e:5c:41:20:c1:24:d9:02:41:9f:58:ed:
cc:d1:6d:97:4d:5d:9e:b2:c7:3b:69:32:59:b5:7c:
46:2f:61:86:d9:57:72:78:32:13:6a:45:b3:e7:5b:
23:f7:af:a7:3f:1f:76:a4:3b:09:a6:7f:20:1d:06:
f5:20:57:d2:5f:b4:c1:86:67:c2:ac:bc:37:6a:7d:
55:f1:34:2c:30:cb:83:22:63:e3:78:3a:8d:b7:2e:
e6:04:0d:60:9c:59:d3:bf:bf:8c:2e:e6:9a:d0:50:
a9:2e:7e:c4:79:35:44:96:a4:05:d6:f5:26:e1:8a:
d5:2d:63:1e:c8:c9:62:bc:ca:1d:45:01:49:2d:37:
13:db:eb:4d:8e:28:65:af:c3:40:57:72:44:39:ea:
53:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6E:C9:77:87:48:D7:27:CD:4A:6B:E1:6A:F0:2B:66:47:78:FC:77
X509v3 Authority Key Identifier:
keyid:B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/N27Jd4dI1yfNSmvhavArZkd4_Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.115.0.0/21
192.115.208.0/22
IPv6:
2a01:4280::/32
Signature Algorithm: sha256WithRSAEncryption
0f:50:b8:8b:f5:11:6a:62:b0:d3:e9:e6:f5:ca:3b:c5:56:4c:
93:f5:7e:04:69:d7:a5:ac:f1:64:67:c1:e8:2f:a4:fe:a4:1a:
a8:61:f8:ca:d7:27:f7:aa:94:d6:82:2b:9f:b5:6e:16:ee:0e:
f1:c7:b1:b1:67:6a:f8:64:86:69:b5:f5:79:a6:77:32:61:fa:
32:c2:52:a6:e1:af:a9:81:97:a1:94:36:40:8d:4a:56:43:96:
7a:08:b9:8d:5b:f7:a5:5d:eb:f8:c3:73:f7:b4:cb:51:50:bf:
8c:ce:e6:49:0c:90:72:24:e2:37:1f:f2:e9:82:ea:f4:44:38:
fd:fc:92:65:6b:a8:29:86:37:23:ec:98:5c:bd:78:8e:3c:d8:
4f:59:c7:46:dc:c2:94:70:ec:a2:a1:3d:29:7b:62:f8:0a:1a:
34:cb:84:49:c7:3f:2f:7c:a8:20:48:8a:9d:ca:af:2c:6a:35:
f7:46:bc:10:34:a3:9a:7a:67:21:26:15:9e:25:8f:1d:0e:55:
67:91:fd:ea:e1:bb:13:0e:1f:df:f0:35:ae:5a:38:b1:99:2b:
7b:52:95:d9:a1:ce:4a:77:4d:7f:74:48:58:42:78:5b:ee:93:
7c:d9:3d:a3:6c:b6:82:cf:4c:61:58:12:68:2e:30:bb:1a:a6:
85:03:2a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:28:50 2025 by rpki-client