Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/pN7fzBg1DzHNtEIqTkJLLoDvgPY.roa
File: pN7fzBg1DzHNtEIqTkJLLoDvgPY.roa (raw, json)
Hash identifier: JziOFtFLcCTBlbV/+EiY16/FFnpJo0ANj5dV+E5o4Cc=
Subject key identifier: A4:DE:DF:CC:18:35:0F:31:CD:B4:42:2A:4E:42:4B:2E:80:EF:80:F6
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DAE8EF553BA70CB00709BC6761A2B7
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/pN7fzBg1DzHNtEIqTkJLLoDvgPY.roa
Signing time: Mon 01 Jan 2024 02:29:35 +0000
ROA not before: Mon 01 Jan 2024 02:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211388
IP address blocks: 81.15.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e8:ef:55:3b:a7:0c:b0:07:09:bc:67:61:a2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4dedfcc18350f31cdb4422a4e424b2e80ef80f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:92:6f:1a:17:40:72:dd:b2:0b:76:3c:50:96:
1e:ce:8a:8f:90:dd:ca:b6:85:bf:4c:d0:d6:74:00:
46:e4:e4:77:23:38:92:b9:54:7e:9e:38:6d:0c:7f:
be:1d:45:23:7e:90:14:a6:2f:24:c5:ed:dd:34:76:
72:ff:6c:ab:3e:8a:9d:b2:5e:aa:13:f9:a1:56:ea:
b3:04:58:c1:ac:cd:2e:a1:a6:83:76:c7:f2:32:e0:
6f:3b:22:e6:0b:9a:fc:af:3d:0a:74:78:49:64:ea:
d2:6a:0f:be:9e:52:e8:aa:17:c6:b2:68:7f:ba:96:
21:a5:5c:74:4f:a8:04:64:c0:c6:3a:8c:63:18:09:
98:8a:ba:c4:05:7b:2b:2e:a7:15:6a:6c:b5:59:ef:
d4:ca:00:5a:0e:06:8a:1a:f4:11:50:bd:9f:d2:36:
b8:f3:96:95:a5:d3:0d:71:65:c0:35:12:a9:af:57:
6a:12:42:00:49:8b:02:44:bf:f9:aa:5b:a4:21:2a:
5b:dd:1f:63:0c:31:50:15:8f:bf:2f:d9:82:1f:03:
34:da:87:be:0d:7d:7e:ba:44:ae:91:24:eb:a8:c4:
dd:18:f9:55:6c:e6:5b:e3:d9:d5:d0:c1:35:95:83:
02:c9:81:c7:01:a4:98:43:ce:89:58:d7:9f:e2:85:
25:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DE:DF:CC:18:35:0F:31:CD:B4:42:2A:4E:42:4B:2E:80:EF:80:F6
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/pN7fzBg1DzHNtEIqTkJLLoDvgPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.155.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:55:17:1c:21:6c:7f:a9:70:28:83:d5:47:ab:3d:a5:48:33:
bd:d7:8a:7b:21:f7:a7:2b:89:3f:48:26:3e:dd:5f:12:d2:c5:
ec:fb:6c:32:58:ef:63:5b:91:5c:7a:e2:b3:ab:94:57:bd:2c:
b2:b0:cf:57:99:62:8f:52:e9:ff:ab:bc:ae:38:ac:6e:ce:81:
55:db:c7:61:ac:11:03:23:49:e0:81:f5:0d:cf:82:bc:98:ee:
0c:b6:20:d4:02:ce:69:8a:86:c4:d4:8f:f9:85:3e:1a:db:09:
38:55:02:30:12:5c:8c:2e:de:6c:b0:4e:8b:fc:8e:ef:94:b6:
d5:63:41:e4:99:38:a0:2d:f5:02:c9:a6:61:2b:3a:e3:d9:4b:
2a:1c:22:7a:89:43:31:9b:c7:25:39:71:3b:31:c9:21:86:0c:
a5:76:59:2b:0d:08:63:66:02:0e:b1:4a:e2:54:4a:0d:c5:d1:
c8:04:c9:90:38:b8:71:b7:b4:d0:43:96:5e:18:b9:77:52:af:
1d:b1:2b:99:22:46:30:25:36:bf:9e:88:1a:7e:ce:4f:cc:93:
a4:07:96:62:67:48:43:c4:53:8a:8a:0c:b7:3e:32:9d:1d:4e:
f7:6b:b2:fe:29:d2:86:49:4b:31:7c:24:15:84:e9:f4:8e:b7:
66:a5:3d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:51:43 2025 by rpki-client