Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/FDVZvxU9_AzzjDlVqGcX6WxiLeE.roa
File: FDVZvxU9_AzzjDlVqGcX6WxiLeE.roa (raw, json)
Hash identifier: Pig4Hhrl0qugmE/rULg4pRcQRnxxfLGJnPgaj6aGjeY=
Subject key identifier: 14:35:59:BF:15:3D:FC:0C:F3:8C:39:55:A8:67:17:E9:6C:62:2D:E1
Certificate issuer: /CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Certificate serial: 0194D549BA8A7FC63CCBCBC3C4B36A3DEEB7
Authority key identifier: 40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/FDVZvxU9_AzzjDlVqGcX6WxiLeE.roa
Signing time: Wed 05 Feb 2025 08:46:06 +0000
ROA not before: Wed 05 Feb 2025 08:46:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214849
IP address blocks: 138.222.64.0/24 maxlen: 24
138.222.65.0/24 maxlen: 24
138.222.66.0/24 maxlen: 24
138.222.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Apr 2025 12:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:49:ba:8a:7f:c6:3c:cb:cb:c3:c4:b3:6a:3d:ee:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Validity
Not Before: Feb 5 08:46:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=143559bf153dfc0cf38c3955a86717e96c622de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:c0:c0:3e:c0:70:8a:87:83:5f:48:32:5e:
e7:d1:e1:60:da:63:47:40:59:5c:ab:a2:34:29:46:
1d:9f:28:02:8a:c6:79:a2:e3:34:05:e9:f5:1e:29:
1a:f9:85:f0:47:54:74:d2:22:fe:07:63:f0:99:86:
44:4c:de:3b:7b:35:58:38:31:09:be:2a:fe:8f:ba:
cc:2b:b6:cd:b3:f2:08:6d:c5:17:d6:f1:b4:d5:78:
88:5e:dc:54:54:d9:2c:11:d7:cf:cd:bb:ed:df:b2:
02:be:f9:fe:8d:69:af:35:f4:1e:c1:6c:d4:e3:8a:
71:23:18:9e:a8:d6:23:d1:c9:0b:80:ad:35:fa:e3:
84:4b:0a:88:59:e9:61:8d:d4:e7:0b:4d:2d:a7:f2:
d5:f6:5a:4e:6a:47:f4:17:42:f3:50:5f:23:2a:6f:
4d:7c:94:ba:c6:49:b7:c7:00:95:9e:e9:44:10:ae:
f9:4b:cd:31:24:bf:b3:76:c2:34:82:12:e5:e8:ea:
ad:f9:81:c7:0a:05:6a:92:db:04:30:a3:98:e5:a6:
ed:ec:b6:5b:d6:5f:0c:7d:3b:66:be:79:fa:13:6a:
78:17:4b:f0:4a:2d:b2:7d:42:ac:1e:0a:75:5a:21:
b5:72:c8:1d:b2:8d:cb:ff:d4:44:be:a8:0c:92:eb:
0c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:35:59:BF:15:3D:FC:0C:F3:8C:39:55:A8:67:17:E9:6C:62:2D:E1
X509v3 Authority Key Identifier:
keyid:40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/FDVZvxU9_AzzjDlVqGcX6WxiLeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.222.64.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:ac:eb:c7:07:c5:51:1f:f8:15:77:18:44:79:54:45:ec:e1:
46:e8:83:fc:7d:89:a2:f6:15:31:52:52:51:1a:30:89:7f:3d:
8f:b6:96:1b:53:0f:a2:51:52:78:70:ff:92:17:8d:55:a7:eb:
57:28:37:ab:80:92:8f:3f:1a:29:19:fd:b0:7c:51:bd:82:47:
26:ba:a3:88:d3:72:28:59:42:96:bd:f0:ea:b2:10:0a:10:e6:
50:9d:c0:ab:bc:b9:ac:71:e9:d7:a2:7f:96:36:8c:ed:1b:08:
76:39:ad:cf:32:1c:43:6f:ab:82:f7:e7:8f:c4:97:7c:49:6f:
74:08:65:05:0f:21:18:f6:22:eb:90:31:71:85:5d:5a:37:22:
e6:8f:af:d6:65:5f:23:84:96:60:2a:75:5e:cf:36:29:56:9e:
bd:68:e6:83:d4:17:6d:0e:88:e1:1c:68:d4:8f:35:88:71:e4:
58:33:39:e5:05:3b:3e:af:f4:5e:f4:03:7f:9c:ce:6e:d0:fd:
8c:f5:d9:80:88:8e:18:00:86:c3:d4:74:38:72:33:10:f6:b9:
ba:1a:03:94:16:f8:f3:16:ec:80:99:f9:3d:90:b0:6c:33:71:
fd:03:9d:07:5e:b4:5f:f6:ef:1c:f6:cc:d4:1f:63:d3:e2:28:
2d:fb:3f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:14:17 2025 by rpki-client