Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/ca3TtRu8ahvAME7MITlDitqC9MQ.roa
File: ca3TtRu8ahvAME7MITlDitqC9MQ.roa (raw, json)
Hash identifier: Q403pQomGtib1TwMLVdFdZEevoJUQDQGqqB3OaJN+gw=
Subject key identifier: 71:AD:D3:B5:1B:BC:6A:1B:C0:30:4E:CC:21:39:43:8A:DA:82:F4:C4
Certificate issuer: /CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
Certificate serial: 018D99AB95B3C4B6C0981AC9CA737C932286
Authority key identifier: 09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/ca3TtRu8ahvAME7MITlDitqC9MQ.roa
Signing time: Sun 11 Feb 2024 19:36:15 +0000
ROA not before: Sun 11 Feb 2024 19:36:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212807
IP address blocks: 194.15.40.0/24 maxlen: 24
194.15.41.0/24 maxlen: 24
2a0f:7480::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 09 Jul 2024 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:99:ab:95:b3:c4:b6:c0:98:1a:c9:ca:73:7c:93:22:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
Validity
Not Before: Feb 11 19:36:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71add3b51bbc6a1bc0304ecc2139438ada82f4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:41:ad:f4:d4:a0:d6:8e:ca:c7:c4:e6:8c:17:
19:ed:36:52:81:93:40:c2:ac:1d:8f:32:4e:91:48:
01:8e:e7:71:cf:46:59:b2:31:8a:23:a3:8f:83:9d:
cd:e1:9a:61:01:55:7e:c0:1a:9b:06:1c:2e:7d:91:
35:ff:10:ce:b9:bc:30:a9:63:b3:b8:09:d4:56:02:
8a:8d:c6:ff:71:85:88:65:9c:4d:8a:12:f0:f3:1f:
f8:ef:fc:df:3d:8d:11:57:e0:15:73:9f:61:ec:96:
b5:54:40:4c:5b:67:d5:a3:08:43:c5:a6:a0:46:b4:
5d:65:3a:60:af:c7:00:06:ca:24:d6:36:de:bb:7c:
40:6e:a7:a4:b3:7a:4b:60:51:c9:27:91:fc:45:f7:
b7:34:17:72:30:59:71:e0:18:3d:2a:d9:4a:de:9b:
05:dd:9f:a2:dc:09:0b:83:a9:4d:8f:a2:94:93:a0:
3b:b1:2d:52:cb:31:76:cc:30:78:3e:ca:24:b3:5d:
c7:04:3e:ae:86:53:49:d7:81:39:b8:3c:0a:b6:69:
15:b5:94:53:00:f1:4b:c8:bb:03:b3:95:d4:75:4b:
a2:26:d7:15:dc:5e:a9:e5:56:67:4a:8c:e0:f8:2c:
6f:fe:eb:42:b2:fc:7b:d5:74:4e:30:28:d4:02:6a:
24:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AD:D3:B5:1B:BC:6A:1B:C0:30:4E:CC:21:39:43:8A:DA:82:F4:C4
X509v3 Authority Key Identifier:
keyid:09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/ca3TtRu8ahvAME7MITlDitqC9MQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.40.0/23
IPv6:
2a0f:7480::/29
Signature Algorithm: sha256WithRSAEncryption
31:b1:03:fc:c2:cd:e2:c6:d8:23:b0:69:75:eb:98:ab:5e:1d:
91:e6:19:2f:46:5e:1e:54:95:dc:87:00:af:ec:a9:b7:c7:62:
4b:b1:95:9a:f0:dc:5b:61:05:58:cb:54:5a:68:0c:50:c6:1b:
f1:5f:8e:92:df:c3:6a:09:46:c1:7c:c7:52:d5:4f:82:50:af:
49:2b:a6:a9:76:f7:ef:53:7b:51:b3:8c:1a:0a:f3:02:0f:7a:
3a:c0:d6:b2:b1:f5:a5:65:36:19:ea:8a:06:b8:37:47:e6:fc:
e0:be:e5:0b:ae:d2:74:89:97:b1:b8:bf:ef:56:97:e5:22:16:
37:a1:50:da:4d:52:64:92:82:89:df:51:02:91:03:32:8a:c3:
7f:5e:ee:72:e2:38:b7:88:b8:97:6b:f7:b3:f5:29:38:57:28:
76:60:00:bf:c3:f7:f7:3c:cd:5f:14:a1:dc:28:c4:d0:d5:f0:
e0:3f:ca:0b:e5:89:cd:ed:a0:8a:4b:56:be:f2:65:71:5a:88:
05:24:94:1a:f1:c9:23:73:fd:9b:a5:98:0e:a8:da:f2:b4:da:
b1:53:ae:61:7d:7f:c6:45:d0:3f:73:53:a0:bd:8e:7d:8e:2a:
a0:d9:0a:65:a1:98:5b:b1:5b:45:a1:8f:18:b9:5f:c3:53:63:
c4:0b:f9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:01 2025 by rpki-client