Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/25IFtB6m5eqzbwEBRwtnw9NVJ28.roa
File: 25IFtB6m5eqzbwEBRwtnw9NVJ28.roa (raw, json)
Hash identifier: Us4U06QOwFfSHMHzRHVc3rwv1U2B/A0+EYUm6RMh1QI=
Subject key identifier: DB:92:05:B4:1E:A6:E5:EA:B3:6F:01:01:47:0B:67:C3:D3:55:27:6F
Certificate issuer: /CN=90087236f161c5c705ef73dfe9e5e3986e7126c8
Certificate serial: 018D3BFE33F0AF866497BF7354629F18A563
Authority key identifier: 90:08:72:36:F1:61:C5:C7:05:EF:73:DF:E9:E5:E3:98:6E:71:26:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/25IFtB6m5eqzbwEBRwtnw9NVJ28.roa
Signing time: Wed 24 Jan 2024 15:02:11 +0000
ROA not before: Wed 24 Jan 2024 15:02:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216152
IP address blocks: 195.182.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3b:fe:33:f0:af:86:64:97:bf:73:54:62:9f:18:a5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90087236f161c5c705ef73dfe9e5e3986e7126c8
Validity
Not Before: Jan 24 15:02:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db9205b41ea6e5eab36f0101470b67c3d355276f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:47:dc:4b:9d:8c:5d:31:3e:f8:46:57:8c:bf:
8d:01:d8:5e:23:a0:50:f6:ee:d3:88:8f:dd:b0:a1:
56:58:2b:5a:3a:9d:ac:38:f3:56:ee:54:87:ff:20:
67:52:a2:f8:aa:02:5d:1d:fe:43:ff:9f:6c:16:53:
12:f0:16:c1:66:63:b7:9f:85:64:e5:04:93:e6:7f:
40:09:fb:3c:65:d1:f3:62:bc:62:ab:78:0f:bd:c3:
ba:56:d1:dc:c4:22:6b:15:54:27:3c:61:6a:d5:7e:
72:da:b6:d8:0d:fb:cf:8f:32:f1:26:66:e4:ef:84:
91:7e:83:bd:24:0e:33:47:f0:c4:5e:29:a1:3c:38:
a3:a9:58:50:8f:c6:6e:9e:e1:3a:a4:52:90:b8:36:
bc:bc:bb:df:84:7e:7b:53:3a:b3:3a:c1:a8:25:73:
3b:62:fa:39:c2:98:50:b3:71:85:2b:d1:3f:2d:6e:
21:7c:25:3c:38:73:46:8f:a9:a0:a3:2d:e1:3e:31:
1a:c1:49:eb:20:65:02:2c:9b:cd:0d:9b:69:df:9f:
e8:11:86:46:42:20:39:10:c6:cc:2d:b2:5d:03:99:
61:4b:52:0d:39:e2:40:80:be:2a:c7:03:15:70:c3:
eb:03:5c:69:49:3f:ee:5e:11:93:67:9b:3d:b3:d5:
19:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:92:05:B4:1E:A6:E5:EA:B3:6F:01:01:47:0B:67:C3:D3:55:27:6F
X509v3 Authority Key Identifier:
keyid:90:08:72:36:F1:61:C5:C7:05:EF:73:DF:E9:E5:E3:98:6E:71:26:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/25IFtB6m5eqzbwEBRwtnw9NVJ28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.48.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:9b:43:9b:61:86:02:4e:bf:03:c8:a9:22:6f:87:6a:6f:15:
7d:e9:c7:90:46:70:a5:35:7e:c0:02:e2:e5:fe:67:cd:47:0d:
01:0e:0c:70:5e:82:ee:46:d6:31:0d:7e:cd:1f:59:da:c3:07:
68:71:cd:d7:d9:f9:25:92:4f:47:81:8b:db:c9:7f:9f:e6:21:
03:c1:f0:cd:fb:62:c1:f5:38:58:e8:a8:1a:a9:55:79:8f:bf:
ea:05:38:d8:71:d0:0d:d2:46:aa:46:79:4a:4a:fd:45:fd:cb:
ab:53:1c:ce:49:32:b6:54:74:0b:eb:e1:5e:0b:a3:1b:91:c7:
eb:55:3c:ce:c9:37:ba:1c:4b:aa:6d:5e:a8:0c:67:c4:42:b7:
39:39:08:3b:d3:ba:f0:52:b4:6c:ca:74:33:20:9c:4a:2b:b8:
43:23:20:2f:65:0f:5d:c3:f9:80:9d:a6:04:db:9e:a0:a2:a4:
da:92:b6:c6:a4:b5:15:44:cd:07:fa:f5:2c:03:e4:2d:df:9c:
e9:0c:64:06:6e:86:ee:9d:94:62:b8:c3:77:fb:24:85:a8:5c:
52:aa:c8:47:54:ee:51:2a:7a:7d:c2:ad:d7:eb:68:6b:b5:05:
3f:51:85:3c:ca:2c:73:a4:60:28:02:de:31:de:28:36:db:65:
8d:59:2c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:40 2025 by rpki-client