Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/V8EZayRv1EqarJe0ehvsMQ_cmXU.roa
File: V8EZayRv1EqarJe0ehvsMQ_cmXU.roa (raw, json)
Hash identifier: ssm0TnuVNJt7joaSTPTZfDleP3w1EUan+qYrHmEdpkQ=
Subject key identifier: 57:C1:19:6B:24:6F:D4:4A:9A:AC:97:B4:7A:1B:EC:31:0F:DC:99:75
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 01942521659120CE2E7C0F9C22D5B1817BC8
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/V8EZayRv1EqarJe0ehvsMQ_cmXU.roa
Signing time: Thu 02 Jan 2025 03:48:53 +0000
ROA not before: Thu 02 Jan 2025 03:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 192.53.64.0/21 maxlen: 21
192.53.136.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 13 Mar 2025 04:23:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:65:91:20:ce:2e:7c:0f:9c:22:d5:b1:81:7b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Jan 2 03:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57c1196b246fd44a9aac97b47a1bec310fdc9975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:23:86:37:5a:d3:17:90:3b:c3:b0:cf:0e:ff:
b9:e2:8f:86:1f:ef:0a:7c:f0:e0:57:af:77:42:d3:
78:a7:33:27:1c:84:dd:e2:6d:14:43:f0:be:bb:ba:
45:59:b6:c8:fa:60:8f:07:5f:e1:c0:98:f1:e4:62:
7b:35:29:50:2f:ab:be:85:d9:d6:ee:11:27:83:f7:
cf:44:d8:9d:89:dc:f9:f0:b2:dd:54:bb:fd:cd:92:
24:29:69:10:bf:d0:fd:2d:6a:28:7e:29:ee:10:d8:
76:77:d4:30:e7:e8:92:69:de:5b:69:58:58:8a:88:
fd:88:c3:fa:4d:33:fd:c0:3b:cc:d2:f9:a6:ae:c9:
8d:c3:7f:e7:e9:ef:bd:57:9f:c3:4e:9b:b4:05:c3:
98:04:1e:2d:ef:11:99:22:d3:62:d2:af:72:28:f8:
b3:6f:12:50:f9:d6:d0:d8:99:01:6a:28:65:a7:18:
36:7f:df:31:28:02:43:4e:23:d7:f1:8a:49:30:27:
57:ab:e5:76:7a:c9:a7:0f:7d:02:a0:db:95:d8:4d:
80:42:18:84:e3:c2:f3:54:81:47:bd:44:40:82:a9:
dd:b3:a1:c4:bc:96:67:7a:b3:e8:20:98:f6:b8:a0:
f2:64:32:d1:ef:ec:b2:b5:43:c8:44:a7:cb:fc:cd:
db:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C1:19:6B:24:6F:D4:4A:9A:AC:97:B4:7A:1B:EC:31:0F:DC:99:75
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/V8EZayRv1EqarJe0ehvsMQ_cmXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.53.64.0/21
192.53.136.0/21
Signature Algorithm: sha256WithRSAEncryption
53:61:ea:a8:5f:da:51:ce:a8:6a:97:3c:69:93:4b:94:38:cb:
37:8c:f7:96:e0:ab:40:28:ab:d8:9a:f0:20:85:ba:ec:0b:8f:
c0:bd:09:0e:a8:64:30:cf:54:9c:da:1b:6b:06:5c:ce:5c:c7:
ed:6d:ac:11:c4:47:8a:47:cc:49:68:05:85:b5:c9:5f:62:0b:
c0:fa:68:6f:e5:22:28:53:2f:ff:4e:ab:8d:2d:b9:81:eb:8e:
f1:a0:d5:f6:f9:45:c6:17:d9:e0:c1:c6:8e:94:67:c1:6e:cb:
23:cd:7f:46:a0:80:13:77:1b:35:a6:e9:0a:2f:6e:78:66:dd:
ba:fd:dc:64:24:0e:3f:7c:44:bf:8b:bc:93:be:81:67:cc:a6:
c3:3e:66:cb:50:af:9f:bd:a0:ca:f3:73:44:69:5b:0e:4b:db:
59:40:a5:d7:22:5a:97:37:74:c4:da:d0:5c:8d:16:b9:ab:30:
19:50:c3:43:f6:ff:47:07:1a:81:c9:8c:31:84:d5:ff:d3:2e:
12:cc:47:1b:58:96:8e:7e:33:94:6f:73:ad:50:08:f5:02:13:
14:7a:79:8a:36:a5:ad:80:f8:e9:f3:97:ff:8f:eb:b3:24:89:
8c:74:6d:c1:c5:0e:cf:c2:c8:35:0e:58:16:5c:ed:00:00:db:
1c:bb:ef:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:29:44 2025 by rpki-client