Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rnguswgpPaUcyj526RLlgX6YUQY.roa
File: rnguswgpPaUcyj526RLlgX6YUQY.roa (raw, json)
Hash identifier: u722A4Y+j8Ortrnw7XcpD3L9BIK8E7RecaUOmyqh/oM=
Subject key identifier: AE:78:2E:B3:08:29:3D:A5:1C:CA:3E:76:E9:12:E5:81:7E:98:51:06
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193D396E9339FDDDF8B465F3BFF92FF4D1D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rnguswgpPaUcyj526RLlgX6YUQY.roa
Signing time: Tue 17 Dec 2024 07:48:22 +0000
ROA not before: Tue 17 Dec 2024 07:48:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211373
IP address blocks: 94.177.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Dec 2024 09:57:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d3:96:e9:33:9f:dd:df:8b:46:5f:3b:ff:92:ff:4d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 17 07:48:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae782eb308293da51cca3e76e912e5817e985106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:6b:b1:04:cd:af:d0:c0:27:70:86:a6:ec:
26:bc:12:6d:b9:e6:78:af:3c:38:20:7d:99:b6:6b:
4a:a0:a0:f4:04:c8:db:77:fd:03:e4:25:66:4c:af:
7d:04:28:b9:20:33:d7:5e:fc:62:ba:e5:5f:c4:80:
99:a1:d2:10:12:93:28:c0:61:c9:57:19:fa:4d:16:
f9:34:1e:40:a8:39:bb:f9:68:21:04:0e:9f:ba:d7:
e5:62:69:6e:ab:1f:58:31:6d:4e:c9:78:2e:64:3c:
09:00:b5:f2:da:8e:3a:8b:8a:63:a5:f5:8e:4b:43:
9a:57:db:f3:4e:55:bb:6c:ea:57:1a:f1:51:89:a3:
12:31:30:06:eb:0d:43:d3:2f:f4:5a:b3:13:f1:55:
6f:06:98:75:ec:d1:b0:f3:a2:b9:e7:83:35:01:93:
de:16:9f:09:54:17:3f:12:19:ec:d3:65:62:83:20:
fc:b8:77:3d:67:61:55:5c:33:10:24:6d:77:88:b3:
62:ee:68:12:22:ec:0b:da:6a:bc:56:2a:fa:8b:eb:
10:36:48:b7:f5:f7:80:6d:a3:6a:d7:98:3d:80:8a:
8f:36:e2:fe:c1:c7:87:5e:4b:ab:af:80:bd:77:c8:
8c:4f:c0:c9:47:88:01:42:fa:16:bc:00:9c:9b:69:
62:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:78:2E:B3:08:29:3D:A5:1C:CA:3E:76:E9:12:E5:81:7E:98:51:06
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rnguswgpPaUcyj526RLlgX6YUQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.145.0/24
Signature Algorithm: sha256WithRSAEncryption
31:59:68:84:8d:f5:64:91:ce:ff:bb:11:84:0e:6b:45:28:01:
e6:f2:1a:53:17:31:ca:58:8d:84:f3:3d:9d:ad:2a:26:36:1f:
97:a7:0a:5a:c9:9e:89:93:5f:82:3a:ad:fe:2e:16:ae:d6:98:
ea:bb:8e:e6:86:4b:f3:47:24:df:1b:06:24:13:57:06:81:4c:
5c:aa:3a:d3:b2:7e:b7:84:5d:e3:84:3c:15:32:8b:9b:90:24:
31:ac:0e:1b:33:f9:41:b7:ab:6e:07:79:ac:ee:bd:7a:b3:4d:
f2:1d:f7:bc:fd:22:e3:9b:4a:5e:e3:84:bc:1f:de:9d:9a:11:
06:96:e5:3d:90:3c:98:78:23:2b:62:a9:af:5b:40:80:f0:5c:
26:9b:f1:b3:58:ec:f6:07:e1:fb:f0:f1:6b:b8:8e:4e:2b:c5:
de:a3:36:58:0b:bc:b2:93:93:2e:7b:16:b1:c4:ed:e7:5d:ed:
95:15:d3:bb:ad:4b:fe:eb:3d:2c:3b:68:cc:1a:ba:0f:29:e3:
2d:2f:39:f0:4f:89:19:f7:33:b4:80:b2:50:7c:d0:4d:01:4c:
53:e7:3e:b0:fd:2c:a7:38:34:0c:ec:69:db:f4:2d:04:98:0c:
dc:49:3e:5f:df:ec:5e:56:54:86:7b:6c:29:54:f9:71:c6:3c:
3a:09:ae:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:44 2025 by rpki-client