Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/Mk9feoO8awtVnN2znfdEMnbSvMU.roa
File: Mk9feoO8awtVnN2znfdEMnbSvMU.roa (raw, json)
Hash identifier: gtMgEX4dNmH2oQgrk63991eYe1MU89O7IxMk3OoegY0=
Subject key identifier: 32:4F:5F:7A:83:BC:6B:0B:55:9C:DD:B3:9D:F7:44:32:76:D2:BC:C5
Certificate issuer: /CN=0bfb7529289f88fb4bb87b39e7bedc9d9f27d5fa
Certificate serial: 018CC50061C802BF191DBB900CBBDE896416
Authority key identifier: 0B:FB:75:29:28:9F:88:FB:4B:B8:7B:39:E7:BE:DC:9D:9F:27:D5:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_t1KSifiPtLuHs5577cnZ8n1fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/Mk9feoO8awtVnN2znfdEMnbSvMU.roa
Signing time: Mon 01 Jan 2024 12:29:45 +0000
ROA not before: Mon 01 Jan 2024 12:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209727
IP address blocks: 195.128.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:48:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:61:c8:02:bf:19:1d:bb:90:0c:bb:de:89:64:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfb7529289f88fb4bb87b39e7bedc9d9f27d5fa
Validity
Not Before: Jan 1 12:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=324f5f7a83bc6b0b559cddb39df7443276d2bcc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:95:0c:37:48:49:fe:4b:ef:50:e0:8a:8f:85:
02:51:d2:44:5a:65:98:8b:3e:69:5d:00:1c:84:25:
ca:f2:33:87:b0:40:1f:eb:6c:46:81:10:da:d7:6b:
71:1a:28:5c:c2:34:71:a0:ab:fb:35:71:6d:5e:2f:
42:4e:e4:a6:b2:ba:ca:9c:47:62:5d:41:03:00:37:
1b:0b:04:41:5d:09:59:08:41:13:dc:13:a4:8a:b5:
42:47:d0:f7:ae:40:3a:96:0d:e0:96:0b:54:b8:f9:
ad:32:59:f5:ca:11:fa:84:e9:29:38:3a:93:68:6f:
23:89:6e:76:5a:6d:86:c2:fa:d9:ae:a9:1c:e0:b5:
0a:b7:23:0a:18:9d:10:57:b3:2f:00:08:a5:d1:8c:
7c:ca:36:11:66:be:a9:bc:ce:76:45:81:37:ca:a0:
23:77:9f:2a:13:6a:8a:dc:42:06:9d:ba:f4:cb:2f:
f1:59:b1:b5:f2:45:82:35:3e:b9:b2:4b:51:df:2d:
0a:ae:17:60:0f:82:3f:88:3e:8b:ce:9d:47:af:47:
82:c9:56:14:54:6f:28:b6:0b:ad:5f:62:06:18:c6:
af:15:c5:5c:88:58:a6:7d:1f:29:f7:30:5a:a5:be:
29:b5:ca:f8:8e:e7:60:1d:48:0f:64:da:1d:de:2c:
8f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4F:5F:7A:83:BC:6B:0B:55:9C:DD:B3:9D:F7:44:32:76:D2:BC:C5
X509v3 Authority Key Identifier:
keyid:0B:FB:75:29:28:9F:88:FB:4B:B8:7B:39:E7:BE:DC:9D:9F:27:D5:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_t1KSifiPtLuHs5577cnZ8n1fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/Mk9feoO8awtVnN2znfdEMnbSvMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.37.0/24
Signature Algorithm: sha256WithRSAEncryption
07:8b:7e:2e:94:68:88:76:29:ad:4d:7f:11:93:b8:4a:0c:76:
66:35:63:73:4c:ed:9d:b0:64:17:9c:48:ed:07:1a:88:ce:d9:
bc:69:0a:87:32:11:40:1e:31:61:5d:c8:05:f5:c3:5f:9b:5a:
30:19:3f:19:20:cd:57:07:f0:76:15:bb:44:95:4b:6b:94:d3:
83:bf:6d:5f:2f:af:d1:d5:90:d9:9c:5a:d5:5b:6c:63:ce:65:
71:f3:83:c5:0e:32:65:83:ec:3f:00:b0:45:f0:e5:04:09:06:
6e:4b:87:a6:4b:4e:5a:7a:19:d1:90:6d:79:cd:bb:9a:ad:ca:
29:3b:64:14:c0:c8:e0:c0:1d:ff:ed:10:20:dc:db:82:6f:e0:
e1:a3:51:39:50:1f:7e:66:b2:51:6f:55:b2:ac:22:23:48:09:
a5:8c:f7:8b:d9:38:2f:17:ca:75:e1:50:33:6e:04:0b:c4:13:
75:48:3e:77:3b:ba:0e:8d:92:4e:15:9a:a5:f1:d3:40:95:f0:
b1:35:6d:d5:b9:93:7d:df:d9:7e:8b:bc:36:5d:f5:d6:06:19:
80:44:bf:82:b5:9e:be:05:ed:1d:f6:28:15:36:9d:db:74:50:
aa:71:cb:ee:56:0a:2c:2b:79:73:8e:d6:d4:42:12:fd:ad:8d:
bc:83:4b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:46:14 2025 by rpki-client