Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/RImNjDQRcuWrz5x1oeYnAgAV3z4.roa
File: RImNjDQRcuWrz5x1oeYnAgAV3z4.roa (raw, json)
Hash identifier: 0PzxSBNO2HrPEGjUFNmYPkf5xNBNyOLoKcYavy+oYR0=
Subject key identifier: 44:89:8D:8C:34:11:72:E5:AB:CF:9C:75:A1:E6:27:02:00:15:DF:3E
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 018CC5DCC387232C25534014FAD45AA671E1
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/RImNjDQRcuWrz5x1oeYnAgAV3z4.roa
Signing time: Mon 01 Jan 2024 16:30:28 +0000
ROA not before: Mon 01 Jan 2024 16:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208099
IP address blocks: 194.124.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:c3:87:23:2c:25:53:40:14:fa:d4:5a:a6:71:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 16:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44898d8c341172e5abcf9c75a1e627020015df3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8e:64:dc:6e:2d:1f:ce:34:92:b8:97:86:e5:
95:94:1f:2d:8f:0b:60:f1:cf:10:d7:2d:9f:07:f3:
c8:df:44:84:95:72:63:1f:2c:15:66:21:ea:ea:d8:
e0:de:26:07:da:b1:c3:15:8a:f9:fc:d1:ad:11:b9:
58:27:86:dc:2f:4a:6d:71:89:f7:40:fc:12:6a:d3:
ee:50:24:86:f2:bf:fc:04:35:68:4e:b1:38:44:be:
c7:b2:1d:33:b5:c2:f8:0e:d6:91:e5:94:7a:ae:cf:
91:b1:73:ff:a1:6b:22:09:f1:4d:07:5e:2e:87:a4:
86:ba:e0:93:a8:ee:85:e7:49:c0:b4:35:85:e5:d0:
65:36:77:8d:af:78:3a:3c:a2:2f:0a:57:1e:fe:bc:
3b:33:44:48:18:c9:a1:e4:ac:ff:24:1e:42:2b:1a:
77:0d:95:bc:25:22:ce:8e:aa:bb:0f:38:70:ec:0c:
00:23:eb:cf:76:28:c1:9f:43:49:06:b3:f2:a3:14:
17:68:e4:ab:0b:04:94:5a:ab:37:78:f2:7c:c9:91:
96:23:14:e8:6e:c6:4d:22:b4:91:88:50:85:0a:00:
de:9a:e5:3e:8d:61:31:ee:72:4d:ae:5f:de:3a:54:
e4:c7:38:aa:bf:ff:21:24:97:44:ca:cf:d2:cb:81:
0e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:89:8D:8C:34:11:72:E5:AB:CF:9C:75:A1:E6:27:02:00:15:DF:3E
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/RImNjDQRcuWrz5x1oeYnAgAV3z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.39.0/24
Signature Algorithm: sha256WithRSAEncryption
10:93:1f:90:af:5a:d5:5d:7f:73:a7:b4:e0:36:25:68:71:d6:
8e:2c:40:46:e3:10:42:68:7b:e4:6e:d4:d8:77:ab:e1:c4:29:
fc:cb:ad:ce:c3:6e:21:43:b2:95:1c:18:91:45:37:6e:8c:77:
ea:fe:46:e1:a8:e8:49:94:46:3a:67:65:da:af:f3:26:81:f1:
f9:04:d1:ed:c1:f0:b0:d8:01:ec:2d:7d:17:68:71:76:dd:db:
68:e3:0e:6c:b8:f3:0d:a2:2c:e4:35:28:dc:8d:2a:dd:e5:1f:
e1:62:ae:35:d3:a0:d5:69:c9:25:d8:9d:88:00:65:45:c3:67:
ca:44:2f:99:69:75:e8:db:27:fd:24:9c:e2:f5:52:51:2c:a5:
bf:a6:40:98:da:7d:4d:69:00:ed:30:f1:53:17:39:c5:48:cb:
a4:a2:78:3f:00:d0:4c:49:bb:75:32:b3:c9:62:bc:d7:5e:b0:
8f:ed:a3:72:24:29:75:bb:41:09:63:7c:fa:76:48:71:86:62:
dc:0a:69:8e:58:de:60:e5:d4:67:df:de:a3:72:9e:87:78:35:
a1:99:14:78:b7:03:d0:b9:d3:00:44:34:ee:3c:e4:db:e0:f3:
6e:2b:10:40:83:65:cf:f9:64:d4:06:61:ff:d1:d6:3e:ad:71:
b2:0f:e1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:17:55 2025 by rpki-client