Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/_miFM18aBtkesoV8fsYBF5LJx2o.roa
File: _miFM18aBtkesoV8fsYBF5LJx2o.roa (raw, json)
Hash identifier: h5/PB/gVUI9j7GxVgJhPSJF6g4PG2fgnNYQyOB+lCOA=
Subject key identifier: FE:68:85:33:5F:1A:06:D9:1E:B2:85:7C:7E:C6:01:17:92:C9:C7:6A
Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Certificate serial: 0192046E461B51E72ABEFDC6FF66613FC9C6
Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/_miFM18aBtkesoV8fsYBF5LJx2o.roa
Signing time: Wed 18 Sep 2024 09:19:48 +0000
ROA not before: Wed 18 Sep 2024 09:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28753
IP address blocks: 37.58.48.0/20 maxlen: 20
178.162.192.0/18 maxlen: 18
Validation: Failed, certificate revoked on Wed 25 Sep 2024 08:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:04:6e:46:1b:51:e7:2a:be:fd:c6:ff:66:61:3f:c9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Validity
Not Before: Sep 18 09:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe6885335f1a06d91eb2857c7ec6011792c9c76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4c:7a:f4:d3:04:34:26:3b:40:30:fc:6d:fe:
1c:84:74:e8:ce:09:f8:69:28:1a:6f:92:6d:ee:79:
21:98:23:09:1d:ff:66:19:0e:4a:5a:fb:a0:6a:1c:
ed:64:69:3b:0d:84:50:c7:33:86:22:e0:51:51:85:
68:08:07:c2:65:89:a8:51:4c:a2:d2:f3:d7:99:a5:
ae:cd:75:fb:cd:d5:23:b8:28:1a:26:44:ab:ce:fa:
c2:26:b5:12:41:cc:b9:24:8a:e7:f7:80:2b:3d:64:
a9:c4:76:0b:77:cb:02:9a:fe:bc:15:8a:54:69:d7:
29:41:a6:71:99:21:2e:29:ca:70:e2:ab:13:70:c5:
6b:9f:35:62:3c:71:08:c9:16:c1:a1:e5:28:40:75:
c8:2c:67:4a:42:e6:fb:cc:c8:6e:2f:6a:5d:ab:44:
56:62:12:04:01:71:7d:45:fe:7a:e0:9d:ec:50:31:
fc:b6:c1:11:21:ac:dd:18:ce:30:3d:5e:ea:48:6e:
8c:b8:68:f4:cc:0d:ca:08:8f:04:44:07:9f:ec:d5:
64:d7:fb:1a:74:e0:7e:e1:49:48:1e:e0:e9:b7:ba:
5f:7e:c5:cc:0b:70:36:42:4f:7c:1e:a3:ce:dc:a1:
ea:ef:82:7f:3f:85:1f:e6:0b:03:ff:3b:8e:99:92:
42:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:68:85:33:5F:1A:06:D9:1E:B2:85:7C:7E:C6:01:17:92:C9:C7:6A
X509v3 Authority Key Identifier:
keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/_miFM18aBtkesoV8fsYBF5LJx2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.58.48.0/20
178.162.192.0/18
Signature Algorithm: sha256WithRSAEncryption
78:10:ea:75:94:ce:f4:5e:1b:25:2e:4b:ae:bd:3f:49:e0:96:
b0:03:a5:5e:09:e0:19:3a:89:83:0a:3b:c8:a9:78:d5:f2:2e:
cb:8a:5e:50:fb:62:ef:a3:0e:bf:79:8f:60:c1:de:39:ad:f5:
75:99:45:e6:f1:cf:23:8d:e3:b5:73:22:43:db:6b:f2:2b:1a:
d4:2b:74:80:d2:90:12:2a:88:6e:73:a7:11:1f:2f:ba:77:b6:
c4:1e:f6:f7:e1:d4:cc:e4:24:6c:61:32:8b:04:3e:2c:36:a7:
a3:fe:ed:6a:02:7e:95:2c:7e:de:d2:77:70:36:89:5c:ba:88:
be:8f:2d:a6:94:42:47:14:1a:b4:c3:81:6d:14:da:5d:37:85:
ed:e2:56:f6:66:51:48:de:61:73:67:26:07:e0:e4:8f:d4:7b:
04:3d:4b:2e:68:30:5b:dd:ed:be:87:25:36:f5:20:5e:cc:0c:
61:28:02:78:d9:30:8c:7c:75:ea:8f:86:72:30:2b:ff:fd:a1:
ce:16:96:b1:7d:67:cb:b6:f8:9c:fc:00:38:33:a5:6f:29:c8:
91:af:62:83:38:7b:b8:fc:2a:86:01:c8:da:da:c7:01:65:a1:
83:5b:c5:d2:82:5d:57:b9:09:46:24:64:91:5c:f4:3f:52:41:
eb:6c:f7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:41:32 2025 by rpki-client