Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/rEBXt6_CZE1iQDEFKTS2JgJi0VY.roa
File: rEBXt6_CZE1iQDEFKTS2JgJi0VY.roa (raw, json)
Hash identifier: 8eyDR1KiEbBDLcCFljWXNbqbDaYmOiNkBFX1L7O7Zhk=
Subject key identifier: AC:40:57:B7:AF:C2:64:4D:62:40:31:05:29:34:B6:26:02:62:D1:56
Certificate issuer: /CN=048eefb5b26483561711c990f20ff552ac4e2c9c
Certificate serial: 018CC348B75A11BBF526B8149C0466495D0C
Authority key identifier: 04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/rEBXt6_CZE1iQDEFKTS2JgJi0VY.roa
Signing time: Mon 01 Jan 2024 04:29:31 +0000
ROA not before: Mon 01 Jan 2024 04:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15491
IP address blocks: 146.255.224.0/19 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:b7:5a:11:bb:f5:26:b8:14:9c:04:66:49:5d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048eefb5b26483561711c990f20ff552ac4e2c9c
Validity
Not Before: Jan 1 04:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac4057b7afc2644d624031052934b6260262d156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:86:95:7d:a3:6b:bf:87:60:f9:d5:22:b0:
98:bd:66:8c:2a:6e:56:f1:0f:01:b4:9b:d2:f7:e7:
62:ff:0d:ba:50:77:4c:96:a2:8a:e1:df:67:f2:dd:
ed:16:62:3f:f1:6b:92:53:29:09:52:09:ba:45:da:
09:cd:b1:65:79:a2:49:a6:1b:fb:74:e6:70:c6:4c:
33:b3:eb:e9:10:fc:d9:3f:01:e6:33:d9:0d:4d:9d:
cf:39:22:6f:a1:4c:ab:65:39:f3:c3:be:72:04:99:
5c:9a:0f:fb:f2:f5:f3:37:26:d8:61:94:78:54:25:
41:00:bb:f9:a3:f5:49:ad:f3:ee:1e:c6:7c:9f:87:
4b:24:8e:2c:30:bb:bc:09:e6:a1:27:ed:6e:55:9c:
25:6c:9f:9e:35:93:22:68:59:37:13:c6:0b:1b:29:
4a:50:3b:ff:d1:e3:89:59:e6:76:df:93:dc:fc:c8:
6c:0d:49:dd:0e:f0:5a:49:cf:e9:ae:e7:54:4a:9a:
82:0d:9c:7b:59:f0:85:f7:89:77:55:7f:c8:e6:3a:
61:97:6b:ce:81:a7:36:99:47:b9:c3:6d:f6:b5:b5:
35:29:ae:f2:b2:65:54:a2:5d:6e:56:a7:8f:dc:0e:
fd:cc:0b:39:58:cf:95:d7:d9:3f:c7:7a:04:c5:4f:
59:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:40:57:B7:AF:C2:64:4D:62:40:31:05:29:34:B6:26:02:62:D1:56
X509v3 Authority Key Identifier:
keyid:04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/rEBXt6_CZE1iQDEFKTS2JgJi0VY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.255.224.0/19
Signature Algorithm: sha256WithRSAEncryption
64:ad:70:65:81:f8:82:1f:f7:16:d2:56:76:d9:dd:ee:bd:d8:
c1:9b:5f:d3:e1:96:73:e5:39:73:6a:dc:55:95:f2:37:41:fb:
bf:41:52:9a:bc:f7:f2:9a:27:87:2b:74:62:0b:e1:e0:0e:19:
96:97:fd:a9:10:1d:24:7a:71:bd:dd:03:ab:6b:eb:ff:d9:c2:
1a:cd:8a:ab:ab:68:73:32:11:42:f8:44:a2:fb:50:21:17:da:
64:9c:2f:69:0f:7e:fe:09:ad:5a:69:19:ae:d3:68:76:37:db:
5e:1a:d7:b0:b4:a5:ae:ac:09:42:e4:c0:20:a1:85:6d:87:ef:
87:f1:f4:8b:57:78:7a:81:c8:b6:3c:dc:3e:74:1b:cf:14:5f:
57:21:8c:4d:02:dd:d4:be:05:58:c4:ae:a8:be:27:3c:60:be:
1e:d3:61:b3:5c:ed:1d:d7:8d:1c:df:c0:24:66:fd:47:72:94:
42:bc:2c:7a:78:b8:cc:a8:b7:8f:f7:9d:10:36:6e:a4:e3:27:
60:7d:c8:06:87:39:8b:fb:43:10:f5:8e:44:16:21:d7:7e:76:
82:23:11:22:2b:a3:f1:33:4e:d6:20:7c:ef:4b:67:6b:6a:62:
90:37:d0:8b:3e:fc:7c:3d:3b:19:bc:e2:ea:da:1c:0b:53:bc:
11:7f:b0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:22:55 2025 by rpki-client