Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/4VWJg6HGcjcWUKOjev_D8Qmknd0.roa
File: 4VWJg6HGcjcWUKOjev_D8Qmknd0.roa (raw, json)
Hash identifier: jFS1O3ME1vPgY4Bynns6LLtiOJpqe8Slhmc0UYaF6W4=
Subject key identifier: E1:55:89:83:A1:C6:72:37:16:50:A3:A3:7A:FF:C3:F1:09:A4:9D:DD
Certificate issuer: /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial: 018CC5DCD15353E236FD6D5994DBD53762E6
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/4VWJg6HGcjcWUKOjev_D8Qmknd0.roa
Signing time: Mon 01 Jan 2024 16:30:32 +0000
ROA not before: Mon 01 Jan 2024 16:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201167
IP address blocks: 94.20.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:d1:53:53:e2:36:fd:6d:59:94:db:d5:37:62:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Validity
Not Before: Jan 1 16:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1558983a1c672371650a3a37affc3f109a49ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:14:f6:8d:c2:9f:82:ec:86:83:01:01:65:22:
61:86:61:5f:74:ea:0d:b5:c0:2b:da:ad:bd:b5:20:
7a:db:ca:06:ee:36:4c:24:29:e7:fd:3f:9c:ae:9c:
c6:97:f4:26:6a:00:34:0a:e7:fc:22:a2:60:25:1f:
d3:7e:09:42:e2:a2:93:b9:ba:a1:b2:93:0d:6b:b2:
a1:96:41:9c:de:f4:31:05:53:09:67:28:3c:ce:1f:
8d:32:3d:a5:82:2a:46:e9:cd:db:2d:4d:ad:aa:1d:
ff:9f:78:63:2d:23:da:6f:2c:3b:0b:14:e2:38:52:
24:ab:36:f4:b6:ba:85:27:ac:b4:0d:af:f1:cf:68:
80:a4:c8:71:f8:16:9c:a9:34:3a:ca:ba:70:4b:06:
2e:85:86:62:6c:25:1c:40:1c:51:a6:3f:4b:55:f7:
55:95:95:ab:5b:d5:a8:1c:25:ff:49:e2:c4:7d:d8:
fb:82:a1:99:4d:24:a1:2b:e9:fd:0c:f4:a9:ea:fa:
a2:81:d2:f3:c0:64:73:e0:e7:9b:e6:c7:3c:86:76:
32:b4:38:24:72:46:eb:73:99:29:ff:89:cf:fd:7a:
ae:20:4b:99:62:cc:d4:4b:a2:04:5f:74:07:ee:a1:
2a:9b:48:e0:4b:5c:e1:fb:80:2f:e3:9d:2b:95:a7:
98:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:55:89:83:A1:C6:72:37:16:50:A3:A3:7A:FF:C3:F1:09:A4:9D:DD
X509v3 Authority Key Identifier:
keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/4VWJg6HGcjcWUKOjev_D8Qmknd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.20.239.0/24
Signature Algorithm: sha256WithRSAEncryption
28:85:2d:92:e9:bc:b0:87:b3:4c:73:82:73:e9:eb:23:fd:af:
e5:eb:18:a2:3a:2c:61:0a:be:8a:51:d1:64:00:47:a7:44:f2:
62:7c:e1:66:b0:52:35:41:9a:e3:ea:46:f5:58:07:5d:12:42:
b4:54:4c:e5:f8:e9:65:b6:e5:38:54:93:88:d1:0f:17:58:12:
c3:4e:e2:38:54:18:a3:15:5b:82:cb:05:99:0d:46:34:d7:dc:
f7:45:13:42:1b:1a:f6:a9:bf:65:c3:69:f0:42:8e:e4:26:41:
ab:2a:14:67:e3:d3:e7:61:95:c5:88:e4:d4:cd:e5:d5:4c:f3:
d8:12:a6:4b:12:76:0a:11:7a:aa:34:40:3e:45:aa:af:37:3e:
83:5b:6e:72:49:5c:aa:54:4c:8a:07:61:68:39:87:1e:51:62:
00:0b:63:89:bd:7f:49:44:35:c3:92:74:65:48:02:64:96:4c:
e5:53:c6:41:d4:dd:b7:ac:d3:14:31:b9:f7:51:05:cf:11:21:
2c:17:54:27:52:a6:33:78:4d:d8:34:f9:e2:61:3e:bb:61:90:
ff:69:63:f5:bf:ea:f4:7f:b2:30:b8:b1:7d:7e:6f:ba:66:38:
72:f0:0a:9b:e3:1a:ff:a5:ad:fe:1f:f9:22:b2:34:85:26:60:
cf:58:1a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:12 2025 by rpki-client