Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/j-PQbafJtY38IUHyX_TMgHUkY8k.roa
File: j-PQbafJtY38IUHyX_TMgHUkY8k.roa (raw, json)
Hash identifier: v15wz+2LKVI1BRtbZuwJ2CrbZHSzxIL0uOUxriGYt88=
Subject key identifier: 8F:E3:D0:6D:A7:C9:B5:8D:FC:21:41:F2:5F:F4:CC:80:75:24:63:C9
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 01946EC27A2DE08B4ACB249A4C299E269AA0
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/j-PQbafJtY38IUHyX_TMgHUkY8k.roa
Signing time: Thu 16 Jan 2025 10:57:06 +0000
ROA not before: Thu 16 Jan 2025 10:57:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200020
IP address blocks: 145.97.16.0/23 maxlen: 23
145.97.18.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 16 Jan 2025 17:52:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:c2:7a:2d:e0:8b:4a:cb:24:9a:4c:29:9e:26:9a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 16 10:57:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fe3d06da7c9b58dfc2141f25ff4cc80752463c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bc:5c:b2:02:52:ab:05:12:c3:fb:0e:2b:2a:
93:f1:df:a9:85:94:22:46:12:43:88:81:b5:8d:25:
da:ba:84:86:f9:01:d9:0b:82:1a:ac:a8:75:93:4e:
88:9e:b1:98:09:99:b9:f7:ff:22:22:d8:82:11:80:
a4:e8:2b:25:b9:09:0e:86:c5:dc:9c:1a:77:37:92:
8c:44:26:9e:72:92:79:7b:67:89:31:36:29:01:42:
55:a5:d3:a3:e4:af:ac:b0:6e:dc:6f:ea:43:5d:bb:
17:ce:91:a8:e5:b4:d7:95:04:73:a0:92:8b:fd:a7:
70:bd:8a:7c:94:dd:15:bc:6d:f8:68:be:89:2b:28:
c6:20:b0:e8:4b:6a:1e:87:5b:65:82:be:87:78:7c:
20:df:75:48:2c:5e:c6:29:f8:cd:6a:47:0c:a3:64:
30:38:cc:16:16:78:15:28:c8:8b:7b:81:b0:fe:8b:
a4:6f:f8:e6:80:68:58:e3:22:29:d5:8b:80:99:61:
2a:a6:89:73:f8:30:b2:44:38:79:c6:88:71:a4:02:
94:17:46:fa:4d:5d:c0:05:f6:8b:6e:20:b6:4b:c5:
02:28:36:18:98:25:04:bd:14:84:2a:78:47:f6:e0:
dd:cb:8a:34:16:4a:1b:22:05:83:a4:ff:d3:d8:e2:
4e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E3:D0:6D:A7:C9:B5:8D:FC:21:41:F2:5F:F4:CC:80:75:24:63:C9
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/j-PQbafJtY38IUHyX_TMgHUkY8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.97.16.0/22
Signature Algorithm: sha256WithRSAEncryption
41:a9:b5:20:4a:3b:16:30:7b:db:80:47:fe:61:84:30:60:69:
24:cd:2d:91:5f:70:f0:ac:a7:de:fe:b8:ec:ec:d6:3d:16:09:
22:e4:8e:01:80:38:0f:43:b4:32:bd:d1:0c:6c:ce:cf:a3:33:
a2:78:28:eb:b8:66:36:2f:a5:4a:86:3a:21:f3:c2:01:91:f2:
d5:1f:46:2e:85:e9:94:b9:f0:80:ff:39:d9:b2:96:f1:4b:38:
0c:e0:00:75:55:66:13:ca:07:3b:a8:b0:4d:8b:37:96:f9:03:
c6:48:21:70:de:48:f9:18:68:4b:ca:8a:ce:1d:6d:e3:0c:25:
b4:eb:f8:4f:75:4b:24:c8:5d:a0:9b:d7:0d:5e:e7:bc:e5:6e:
b7:2f:89:a1:4d:22:73:b3:51:ce:1e:2a:5e:d7:f0:6b:30:97:
c0:50:20:df:0c:7e:af:75:d1:de:f0:7b:db:43:0f:9e:71:4c:
a7:e7:c1:90:9b:81:f0:21:c6:04:6d:ef:74:31:b6:f9:d3:96:
bb:b2:33:aa:23:30:27:5a:96:b2:cd:fd:66:80:10:87:e5:36:
3b:af:6f:22:66:a4:ab:97:09:b8:5a:7f:6a:dc:e5:ff:7a:23:
61:0e:19:39:10:13:92:39:0d:e4:f1:ee:59:f7:46:4a:b6:32:
d1:93:e1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:05:34 2025 by rpki-client