Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EmnOqTn6dPt24dQzkOZBQ4fDvWg.roa
File: EmnOqTn6dPt24dQzkOZBQ4fDvWg.roa (raw, json)
Hash identifier: 3GdQ/1m10Io/T4aBBUQp0R9luI8Lwecd9dTqX4oj9ow=
Subject key identifier: 12:69:CE:A9:39:FA:74:FB:76:E1:D4:33:90:E6:41:43:87:C3:BD:68
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018EEC1D97BB5F361AF5F34205702E5D7218
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EmnOqTn6dPt24dQzkOZBQ4fDvWg.roa
Signing time: Wed 17 Apr 2024 12:52:26 +0000
ROA not before: Wed 17 Apr 2024 12:52:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34047
IP address blocks: 146.19.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ec:1d:97:bb:5f:36:1a:f5:f3:42:05:70:2e:5d:72:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 17 12:52:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1269cea939fa74fb76e1d43390e6414387c3bd68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:14:1b:52:36:b9:84:71:01:ee:fb:e9:4a:b0:
95:d4:ac:db:2d:b2:63:6b:79:43:e4:9f:c5:41:aa:
88:e8:35:e4:f2:81:df:db:e3:0a:86:be:68:9d:37:
a7:a3:19:c6:05:75:3b:21:2b:f8:e6:1f:4b:9c:07:
f4:5a:32:b0:e9:1a:ca:95:fc:d1:ad:9c:34:13:24:
fc:6f:61:8e:1c:00:b6:ba:82:fa:19:fb:bd:e3:3d:
d8:e7:5c:16:82:1d:48:4d:e9:fd:a1:77:a8:cf:35:
08:2c:e9:4d:8b:cf:35:0a:3a:e0:d4:fa:17:90:8f:
c2:4d:57:27:b0:35:c1:64:48:f2:9f:a7:91:a1:96:
58:d3:e2:df:bb:08:f9:c3:6d:81:ad:21:e7:91:46:
a8:86:3e:1f:7b:df:a0:2f:81:d3:e7:b3:8e:5b:25:
3c:a5:c5:55:fb:a1:45:d8:61:26:dd:f6:af:7b:2c:
05:07:4e:06:f1:94:e1:c0:63:bd:18:36:21:0f:68:
83:d1:87:01:8c:b1:07:eb:35:1a:84:bf:64:b7:75:
c9:96:60:70:2b:a7:bf:a4:05:b7:04:c5:49:f7:fa:
ee:e4:1e:af:05:6f:6a:55:e0:ea:2e:7e:a7:0a:16:
95:63:96:b6:a1:ed:fb:f2:58:58:eb:91:e8:8d:d7:
47:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:69:CE:A9:39:FA:74:FB:76:E1:D4:33:90:E6:41:43:87:C3:BD:68
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EmnOqTn6dPt24dQzkOZBQ4fDvWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.113.0/24
Signature Algorithm: sha256WithRSAEncryption
67:2b:e3:98:68:da:54:88:42:ab:81:83:fb:41:ca:c9:a5:65:
42:7b:e7:d4:ae:5f:e6:77:94:51:fc:2d:c0:3c:d9:c7:91:fd:
a7:5a:15:75:c8:67:4c:e8:08:3a:a6:b1:c9:2d:5d:ca:8a:98:
e7:6a:84:11:f9:eb:2b:92:63:b4:50:31:2c:e8:87:ea:4e:cd:
23:cf:f4:6a:26:e1:d9:b3:54:33:33:01:11:0f:94:b7:c6:47:
5c:ab:ab:dc:5b:6b:2d:1a:4b:e8:4d:32:23:8c:88:97:7f:cb:
1e:38:b0:42:56:46:3d:7f:bc:9e:d1:a2:dd:36:94:bd:ad:23:
c1:d6:c5:31:e3:ae:32:7e:1b:81:9a:1f:34:0a:af:eb:e2:94:
22:f6:ce:c2:f5:35:3d:3b:b6:3e:cd:13:5a:0e:07:51:e3:e1:
19:cf:0c:e1:92:05:4e:29:10:c9:65:f2:6a:60:ce:b8:f9:e3:
50:ee:66:2f:86:45:6e:42:57:86:37:23:e5:f6:7b:21:e3:20:
a5:7f:93:a9:e6:92:44:90:55:e3:40:46:2c:ef:75:97:e1:7a:
2e:42:8a:d2:43:1c:12:64:86:81:42:8f:73:dd:12:73:72:b5:
f7:5d:87:7f:88:71:73:25:29:a1:8f:be:25:20:6e:9c:69:0c:
74:1b:94:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:02 2025 by rpki-client