Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/pvvH_Jx-GmtXuQ1bMU6AfVoxLFI.roa
File: pvvH_Jx-GmtXuQ1bMU6AfVoxLFI.roa (raw, json)
Hash identifier: AdFOqDrW6fd6ffnwuxTFfAVdw3clWFci2ShQRkzazhQ=
Subject key identifier: A6:FB:C7:FC:9C:7E:1A:6B:57:B9:0D:5B:31:4E:80:7D:5A:31:2C:52
Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial: 0192AF0473F3089D601EC3F746B75D47A5C7
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/pvvH_Jx-GmtXuQ1bMU6AfVoxLFI.roa
Signing time: Mon 21 Oct 2024 12:19:17 +0000
ROA not before: Mon 21 Oct 2024 12:19:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49538
IP address blocks: 213.192.236.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:af:04:73:f3:08:9d:60:1e:c3:f7:46:b7:5d:47:a5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Validity
Not Before: Oct 21 12:19:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6fbc7fc9c7e1a6b57b90d5b314e807d5a312c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ce:8d:38:8b:bd:ce:db:67:7b:43:72:11:5a:
3a:8f:93:17:da:df:b7:b6:8a:d1:27:42:47:6f:2b:
87:7d:af:f1:68:22:ad:fc:64:10:3d:9d:eb:55:e5:
d7:bc:29:2f:c9:42:2f:97:76:1c:1b:7e:c4:90:0b:
37:df:f8:a5:73:a5:3a:cc:c3:de:3e:ce:50:fd:b5:
50:ff:eb:8f:37:f5:7c:f5:cd:0d:e8:ab:19:1b:9d:
37:62:96:a0:5f:b7:60:84:90:c5:c4:de:7f:2a:61:
7a:f2:3b:ae:77:73:2e:b5:d0:f3:59:02:95:ac:bc:
30:92:25:61:44:69:13:92:c3:c1:c1:dc:07:3a:61:
14:62:d3:99:b1:c3:f0:ee:83:f4:b4:1b:f2:98:7e:
50:3e:6a:87:59:49:4c:c9:81:e9:8d:db:bc:d6:f7:
6d:09:b9:0d:65:a4:2e:ec:49:8a:32:a9:1d:f1:78:
f6:6a:43:43:a5:1d:9f:b8:a2:0b:85:58:84:8a:16:
dc:21:1a:56:e5:ed:cc:85:1a:c1:98:d0:ae:c6:df:
12:ae:b2:58:c8:4e:13:6c:38:05:80:46:de:12:7e:
fb:95:f8:a7:13:d5:23:b0:ad:6e:83:e4:5c:1d:34:
10:a9:50:87:ba:09:9a:14:9a:f7:14:e8:5e:cc:0d:
56:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FB:C7:FC:9C:7E:1A:6B:57:B9:0D:5B:31:4E:80:7D:5A:31:2C:52
X509v3 Authority Key Identifier:
keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/pvvH_Jx-GmtXuQ1bMU6AfVoxLFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.192.236.0/23
Signature Algorithm: sha256WithRSAEncryption
dd:c4:98:1e:85:9c:bc:4c:fa:e3:01:3b:33:5b:38:5e:e7:e6:
51:54:22:e9:07:7f:e2:9a:db:58:f1:a5:df:c0:5a:45:bc:4f:
7d:d9:51:1f:58:03:31:b7:90:99:dd:cf:be:1c:7e:fd:e3:cd:
20:07:fd:08:0c:9d:fe:6c:95:da:13:4a:fb:b4:5f:e6:ef:75:
3d:13:40:5c:5b:33:5e:62:c9:7e:66:19:35:44:75:c5:ec:51:
f2:7d:a9:ac:9b:15:e7:89:dd:d5:f3:87:55:b1:7e:c3:da:80:
82:6a:a2:0d:7d:a5:2f:47:0f:63:c7:e9:77:3f:b0:9b:f9:b7:
4e:eb:35:86:26:71:81:82:87:a6:ec:26:0f:87:c1:60:13:1e:
98:4a:52:07:44:81:44:eb:80:b2:da:15:fc:d0:4c:34:23:e5:
07:c7:d9:3d:53:53:dc:37:b5:25:9b:11:ab:14:70:04:68:61:
54:7e:70:de:74:3c:e2:91:e2:d6:2c:16:bf:70:58:e2:33:bc:
14:d6:58:66:21:27:d8:b1:6b:41:93:7a:6c:13:d0:e0:61:9a:
10:c9:6b:50:52:7f:7c:57:29:eb:2c:f0:8d:5a:36:0e:5a:a8:
70:ab:c9:de:2c:30:3a:c4:aa:b1:1c:6b:ed:51:8a:07:d5:23:
68:b0:6e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:24:54 2025 by rpki-client