Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/dq4-VtT6GKgVA4NkYmP3vXbGsV4.roa
File: dq4-VtT6GKgVA4NkYmP3vXbGsV4.roa (raw, json)
Hash identifier: 0MRdlVW90XpiqYMufP+D1hD+hnlNvg6vbpxO2YQ7R64=
Subject key identifier: 76:AE:3E:56:D4:FA:18:A8:15:03:83:64:62:63:F7:BD:76:C6:B1:5E
Certificate issuer: /CN=60d0b0207603be43d8492e9851378b8b4f09594f
Certificate serial: 01942444C3F616DB37ADA09F98FCC3EAAFE1
Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/dq4-VtT6GKgVA4NkYmP3vXbGsV4.roa
Signing time: Wed 01 Jan 2025 23:47:53 +0000
ROA not before: Wed 01 Jan 2025 23:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 130.115.248.0/22 maxlen: 22
130.115.252.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 17 Jan 2025 10:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c3:f6:16:db:37:ad:a0:9f:98:fc:c3:ea:af:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f
Validity
Not Before: Jan 1 23:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76ae3e56d4fa18a8150383646263f7bd76c6b15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:43:94:b0:1c:24:58:5a:25:8f:53:d2:ea:
ca:d4:99:27:9a:ea:ac:86:09:a5:18:d8:72:5d:2c:
45:65:60:80:4d:37:c7:fc:e9:5f:0e:c6:b6:d5:76:
b9:14:92:0d:1e:e4:be:5f:90:b1:c4:66:49:45:c5:
85:df:ff:61:65:74:4c:1e:7b:7e:be:a8:a0:fe:d7:
81:0c:38:a2:d5:bb:8f:5c:77:d7:3c:eb:30:a3:ec:
25:9b:9b:64:e3:61:c3:42:81:4b:93:44:1e:05:86:
3f:3d:39:44:36:61:df:0c:87:0d:0f:cd:b3:b1:39:
15:cb:fc:83:f8:d4:c6:d0:f4:41:b4:68:44:55:d0:
67:cf:bd:4d:d4:d9:85:79:1d:d3:29:3b:92:cb:a2:
d7:57:84:eb:5e:5d:b0:32:36:d2:f6:3a:87:e5:11:
9c:36:55:72:f6:a0:f9:51:cb:25:d4:bc:10:f1:65:
26:01:04:54:48:36:76:70:8d:ca:42:49:ec:63:b3:
50:e0:e6:67:b4:e1:f5:f4:5e:b3:33:92:d2:e4:be:
d9:6f:fa:5e:d6:66:0c:e0:3e:31:24:07:1a:38:3c:
4a:ab:ac:da:5d:81:bf:3d:8b:06:29:9c:2d:ae:6b:
50:fe:a0:dc:69:f8:d9:a1:23:94:1d:2e:c9:dd:79:
f9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AE:3E:56:D4:FA:18:A8:15:03:83:64:62:63:F7:BD:76:C6:B1:5E
X509v3 Authority Key Identifier:
keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/dq4-VtT6GKgVA4NkYmP3vXbGsV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.115.248.0/21
Signature Algorithm: sha256WithRSAEncryption
26:c8:06:40:83:bd:9f:c8:de:9e:a3:28:53:5d:f9:4f:86:13:
e1:46:20:ca:30:e4:7b:20:07:22:bb:a7:af:0f:65:db:29:f6:
24:11:5b:0a:b4:45:60:fa:d8:62:43:84:00:2f:23:60:67:3d:
2e:e9:f6:ce:5e:16:59:96:33:eb:ad:be:6a:64:2a:15:17:16:
38:55:c5:7b:dd:bb:5c:f9:14:d3:e6:21:e0:d3:e0:24:d8:e1:
fb:dc:1a:e1:c5:ad:43:05:8f:4b:8f:ec:1c:dc:b7:a0:76:96:
e3:4f:d2:75:34:f2:6c:2a:47:5c:05:d3:37:5c:be:47:7a:3a:
d1:ec:c3:4b:67:18:4f:44:44:2f:c1:7d:59:7c:5f:fb:b5:90:
a8:c8:96:58:c6:94:69:9c:9b:1d:fd:fe:80:4e:15:55:d9:c3:
a6:7b:9f:92:7d:a5:35:d8:14:55:a5:66:2d:53:e6:85:44:a3:
d6:55:d4:56:59:01:41:43:01:38:a1:1d:96:ff:79:3b:f6:9d:
f8:18:6e:8a:7b:5f:ea:2b:3b:0e:6c:89:04:6b:87:9e:76:87:
1a:99:8d:25:e5:c0:3d:2a:ad:9b:ec:1e:be:4a:55:11:23:ce:
c2:93:62:86:51:18:e7:12:62:49:fd:88:32:61:36:86:d2:5e:
1e:fc:12:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:52 2025 by rpki-client