Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/1187DuXxpWobN2KwOEz9Fp3zGhM.roa
File: 1187DuXxpWobN2KwOEz9Fp3zGhM.roa (raw, json)
Hash identifier: cjLAlkKXpgWqWYKDrScpfT7oGdt3VF4CrYQ3TdD+yMA=
Subject key identifier: D7:5F:3B:0E:E5:F1:A5:6A:1B:37:62:B0:38:4C:FD:16:9D:F3:1A:13
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 018CC2DB06352D98931064BEDAE5D043B19D
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/1187DuXxpWobN2KwOEz9Fp3zGhM.roa
Signing time: Mon 01 Jan 2024 02:29:43 +0000
ROA not before: Mon 01 Jan 2024 02:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197787
IP address blocks: 217.114.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 May 2024 10:27:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:06:35:2d:98:93:10:64:be:da:e5:d0:43:b1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Jan 1 02:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d75f3b0ee5f1a56a1b3762b0384cfd169df31a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:5d:db:9f:28:37:8a:28:a2:90:79:5b:84:
d6:cb:b7:4d:24:33:03:0c:07:9c:0c:73:21:1f:44:
b8:61:84:25:61:a3:3f:55:bf:fd:6a:98:ef:c9:85:
b2:08:de:64:c1:ef:07:9a:c2:8e:1d:90:ea:8c:dc:
91:dc:fb:4d:c4:a5:f0:44:89:4d:0c:7f:49:54:44:
28:6e:99:85:4c:35:0d:3e:f4:c2:54:19:17:ce:bb:
d0:0d:4f:e2:03:28:11:d8:8e:3a:73:c3:bc:ab:15:
0e:94:9e:b2:99:35:ca:86:28:34:dc:ff:b1:bf:08:
a6:f0:77:e5:5c:72:35:d0:43:df:cf:22:d9:06:af:
6f:a5:25:f6:88:29:91:da:e6:cb:23:8c:6d:59:17:
b3:89:05:8e:8a:b0:3e:17:cc:62:72:57:09:bb:3a:
24:fc:5e:3d:f1:67:20:22:25:f9:8c:55:bd:d7:9f:
14:aa:05:2c:bf:ac:bf:82:77:8e:7d:41:c5:73:39:
86:c7:c5:10:aa:15:47:b0:d9:93:d6:59:56:cd:51:
54:41:be:ac:17:d8:06:a7:f9:72:5f:2c:a3:5a:4e:
4f:01:6b:a1:a5:4f:df:52:db:b6:21:e0:97:24:a4:
bc:09:62:59:42:ac:0b:d4:17:c9:a0:4e:44:40:b2:
40:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5F:3B:0E:E5:F1:A5:6A:1B:37:62:B0:38:4C:FD:16:9D:F3:1A:13
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/1187DuXxpWobN2KwOEz9Fp3zGhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.46.0/24
Signature Algorithm: sha256WithRSAEncryption
98:c8:c2:13:b2:d7:2f:cf:09:21:d1:20:56:9b:4e:2d:64:dd:
80:f4:38:65:72:b7:09:41:75:72:85:00:c6:c3:9b:5d:70:d1:
e5:09:77:24:46:64:e4:a9:75:9f:f6:1f:19:53:df:c6:63:1d:
2c:61:93:cb:a1:01:63:ae:a3:e0:ab:0e:11:2b:80:35:8b:7d:
ac:6b:4b:76:60:d2:52:32:fa:7a:21:fb:0d:c7:40:40:9f:8a:
c6:19:d8:ac:77:97:2c:2c:1d:4b:e8:62:09:94:f7:ff:d8:74:
c0:4e:b1:37:95:10:46:98:fe:93:a2:e8:f4:c7:e4:16:68:d8:
7c:4e:f0:5b:3f:67:bb:27:6e:d0:72:eb:2b:c1:08:fd:70:92:
fd:47:c3:d7:fa:94:75:be:99:5d:d6:07:6e:74:95:57:31:70:
89:88:66:c5:0c:c3:44:96:dd:0a:71:7e:d6:ea:ab:1a:8c:cf:
9b:1a:68:67:00:34:ed:f2:b5:6c:9b:4b:71:df:3c:87:50:75:
3e:fc:8d:9f:ba:d6:9d:93:bd:1c:61:17:8a:2b:57:08:0b:49:
d5:49:26:93:8d:aa:11:6c:a8:fd:87:34:fe:2e:ad:78:30:7f:
13:b4:36:b7:18:2b:21:83:0e:54:56:e4:12:f6:44:ab:ce:d4:
75:ba:43:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:14:12 2025 by rpki-client