Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/1-odTQPmZ_YaFe6yZbLD89WZgMpA.roa
File: 1-odTQPmZ_YaFe6yZbLD89WZgMpA.roa (raw, json)
Hash identifier: Z5p2jkQQB5mDrkRrjnxhpLcLwP8fPRsHrGqhMG+Xvos=
Subject key identifier: FA:87:53:40:F9:99:FD:86:85:7B:AC:99:6C:B0:FC:F5:66:60:32:90
Certificate issuer: /CN=56f01a1e99ea5d4f3994d33309d094312dc85427
Certificate serial: 019354DC161DE0EF664E1D2AF0BE9275D0EF
Authority key identifier: 56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/1-odTQPmZ_YaFe6yZbLD89WZgMpA.roa
Signing time: Fri 22 Nov 2024 17:12:09 +0000
ROA not before: Fri 22 Nov 2024 17:12:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12703
IP address blocks: 185.246.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:dc:16:1d:e0:ef:66:4e:1d:2a:f0:be:92:75:d0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f01a1e99ea5d4f3994d33309d094312dc85427
Validity
Not Before: Nov 22 17:12:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa875340f999fd86857bac996cb0fcf566603290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0f:90:59:dc:c4:83:a3:07:03:ae:6a:fe:59:
30:04:20:6b:3c:ea:9c:fb:d0:01:b4:4b:7a:ab:07:
36:c7:c8:f2:d4:80:0b:7e:da:71:33:64:86:5e:64:
1a:ae:42:b4:a1:41:c2:b2:e5:38:4a:c8:8d:8d:1e:
2e:1c:af:ab:58:59:df:17:dc:7b:cd:9e:36:9c:b5:
cf:eb:e8:7b:c4:2e:4f:06:b2:57:41:63:27:20:12:
1d:c6:c0:f5:1f:67:18:6a:f7:d5:9d:20:23:56:61:
b8:85:eb:b1:b7:c0:75:5d:f0:0e:29:a7:fc:17:fd:
be:d8:dd:16:bb:47:53:dc:48:e1:ca:3c:24:2e:68:
9b:2d:42:a8:07:e4:da:49:fc:6a:5b:5b:aa:d5:1b:
36:d6:47:71:b3:0b:04:a5:c3:b9:80:9f:17:6f:79:
c5:74:10:0a:d6:22:2c:33:62:23:2e:06:73:11:27:
d6:bc:ec:cd:6b:80:a0:86:8c:26:92:51:24:57:82:
57:d1:20:7a:9a:4e:9f:81:f1:d6:95:1b:e0:01:ba:
d2:55:cf:75:07:97:57:1a:95:3a:ce:c4:4a:58:50:
33:f4:8a:41:d7:67:15:88:cf:ca:99:3d:41:39:c3:
b2:31:5f:00:cf:f1:15:f0:61:8a:c8:2c:20:fe:5a:
b9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:87:53:40:F9:99:FD:86:85:7B:AC:99:6C:B0:FC:F5:66:60:32:90
X509v3 Authority Key Identifier:
keyid:56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/1-odTQPmZ_YaFe6yZbLD89WZgMpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.51.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:58:8e:02:26:72:2d:75:d6:cb:93:77:61:6e:2c:12:67:57:
ad:49:93:8e:87:6c:09:89:3c:5e:1f:19:09:7f:47:4b:4d:db:
c3:3e:2a:13:4d:9d:80:2b:7e:72:4e:f8:6f:6d:05:88:e6:72:
01:29:33:0c:f2:52:a6:7b:ef:d4:44:f4:76:f1:f1:fb:59:11:
6b:b7:37:28:d6:9d:2b:3d:49:64:13:4d:f7:a3:ca:8c:00:2a:
9f:76:14:69:c9:ad:ac:ab:c9:95:8b:d3:0e:c8:71:96:d0:ad:
dd:5e:7a:93:58:2a:b1:2f:00:65:54:cb:dc:c4:cf:1c:aa:60:
17:f1:d8:07:93:80:02:c1:df:7d:29:9b:a4:13:7a:dd:2e:df:
a9:e6:31:04:86:37:2c:39:b2:11:eb:86:4c:03:e0:0f:ab:02:
6e:ab:ea:11:21:12:d8:b0:bd:11:ec:f2:ac:49:f2:5b:eb:6b:
41:13:7d:1f:95:50:9c:e7:7f:1d:64:21:14:b4:1c:c1:66:0b:
a0:33:d2:71:d7:25:33:ab:97:cf:f1:d2:7a:fb:1d:a6:f4:f6:
6d:db:e0:59:2d:61:2c:35:27:e3:21:42:0f:e8:09:ec:ce:77:
72:3e:4d:4c:ab:78:b4:82:73:d1:c9:98:1d:25:76:0c:fb:5e:
e8:11:72:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:21:36 2025 by rpki-client