Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/sTursq04dWuZjclgNX_U2s_xQ7Y.roa
File: sTursq04dWuZjclgNX_U2s_xQ7Y.roa (raw, json)
Hash identifier: qG/5asV51T8nJk0BG/hE2ibfKT5LmwvvWTV2YU3Od88=
Subject key identifier: B1:3B:AB:B2:AD:38:75:6B:99:8D:C9:60:35:7F:D4:DA:CF:F1:43:B6
Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Certificate serial: 018CC6B92C871EEBE463688C7E6F464223A1
Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/sTursq04dWuZjclgNX_U2s_xQ7Y.roa
Signing time: Mon 01 Jan 2024 20:31:13 +0000
ROA not before: Mon 01 Jan 2024 20:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204146
IP address blocks: 194.31.112.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:2c:87:1e:eb:e4:63:68:8c:7e:6f:46:42:23:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Validity
Not Before: Jan 1 20:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b13babb2ad38756b998dc960357fd4dacff143b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:49:99:a3:11:aa:0e:0e:fe:6f:5c:e9:74:
cc:74:38:82:66:df:55:74:74:34:86:66:4b:78:af:
da:c1:06:41:fe:cc:6c:c5:8f:44:28:a7:2e:09:11:
19:de:a3:a5:5c:e7:f7:ee:4c:f5:e8:6a:da:5d:42:
89:80:31:55:11:d9:ca:18:4c:0d:41:43:e4:1f:d3:
d5:64:48:1f:4f:cb:1e:c1:4b:2e:7d:81:81:7f:be:
4b:76:ca:0e:70:a8:51:bb:19:f2:72:c8:36:1d:e5:
a5:96:f8:a7:80:ea:37:bb:d6:f8:14:d6:2c:14:dc:
d6:5b:b7:33:fb:23:88:20:c2:0a:8b:87:f3:07:ff:
b9:82:e7:f2:cc:b2:98:32:fb:56:e4:34:24:7b:9e:
a0:77:0b:df:28:b8:2f:7a:eb:bb:37:4f:7d:61:6f:
c4:a3:ab:a1:d1:96:27:bf:30:c1:b1:88:c1:47:d3:
56:67:de:63:07:5d:fa:2d:34:b8:d9:68:d9:e4:4b:
0b:b1:56:12:33:df:26:78:d1:27:3d:6f:2a:cf:6c:
bb:3f:0a:da:cb:5f:d4:a8:ae:e4:51:7d:3b:8a:0a:
fa:7c:b5:d9:fc:9b:27:93:ee:7a:df:67:c8:d0:4b:
ef:50:32:8d:82:3b:dc:da:48:fd:be:8e:c7:6e:bc:
5d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3B:AB:B2:AD:38:75:6B:99:8D:C9:60:35:7F:D4:DA:CF:F1:43:B6
X509v3 Authority Key Identifier:
keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/sTursq04dWuZjclgNX_U2s_xQ7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.112.0/21
Signature Algorithm: sha256WithRSAEncryption
47:55:0b:24:e7:91:6c:a6:3d:88:04:c3:90:e4:a8:69:6c:3f:
da:50:35:f6:6e:d5:16:9f:5d:a2:fc:0c:98:1d:4d:b8:ec:3a:
59:47:18:11:75:43:5f:ae:5f:50:37:2d:03:7d:d2:3a:00:43:
28:d7:08:eb:e8:e0:5b:9b:79:50:0b:2c:7e:e8:a0:78:34:38:
89:db:59:19:98:47:3a:52:f2:8c:74:75:7e:c3:84:9b:9d:fe:
e9:b1:1b:ce:6e:3a:ae:b5:7a:c2:50:4d:04:ef:9d:47:3a:39:
59:e0:60:d8:bf:9f:c6:86:f5:31:d4:2f:94:8a:99:46:87:b2:
e5:9b:cf:62:00:32:b9:28:e7:ca:e4:78:6b:d7:ef:77:89:7e:
34:97:74:9c:69:f9:8c:fc:1c:8c:1a:52:aa:72:9f:cf:55:f3:
ae:39:96:01:98:53:89:b5:a1:b4:ae:b4:db:0c:47:8c:1a:68:
51:65:f4:15:f4:5c:38:eb:f9:d6:b3:37:56:0f:0c:a1:d9:6d:
17:70:0a:35:dc:77:12:5c:f6:f3:40:9b:97:92:01:21:2b:91:
d3:a8:60:2c:99:4f:27:ad:bc:44:5d:37:62:ab:8f:37:22:05:
5d:e1:8e:52:9d:be:42:dc:b8:ae:85:ae:0d:e2:7b:20:d8:5b:
03:84:34:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:28 2025 by rpki-client