Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/Foq4tfSU8_DzmjoMSVSKbBgYI6c.roa
File: Foq4tfSU8_DzmjoMSVSKbBgYI6c.roa (raw, json)
Hash identifier: CXt9L8SYjSOc0tuumC44UCkWDc5Ld0LsCb+O77ZTI/8=
Subject key identifier: 16:8A:B8:B5:F4:94:F3:F0:F3:9A:3A:0C:49:54:8A:6C:18:18:23:A7
Certificate issuer: /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Certificate serial: 018CC4254E1F4B60F3EF057A1C039CFBC3E6
Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/Foq4tfSU8_DzmjoMSVSKbBgYI6c.roa
Signing time: Mon 01 Jan 2024 08:30:28 +0000
ROA not before: Mon 01 Jan 2024 08:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206687
IP address blocks: 195.150.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4e:1f:4b:60:f3:ef:05:7a:1c:03:9c:fb:c3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Validity
Not Before: Jan 1 08:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=168ab8b5f494f3f0f39a3a0c49548a6c181823a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:74:9e:25:6a:48:03:6d:96:66:9a:f0:33:21:
ba:4c:1b:21:34:83:af:a9:bc:f3:13:57:4a:9c:ec:
85:0d:77:a9:32:43:28:86:03:a0:e6:31:a1:d3:72:
4a:d7:a2:db:76:1d:7c:b6:3f:b6:17:75:97:f9:a1:
43:4b:dc:7d:90:d4:75:b4:03:6d:3b:d8:e3:ee:80:
81:a6:c4:41:23:ee:0a:c7:8e:f4:fc:fe:74:98:d9:
6d:63:61:fc:cb:2c:98:21:db:e4:df:e5:20:d3:5d:
02:d3:60:69:8c:06:8b:ce:1d:23:0b:9c:3d:b1:d8:
3e:d9:51:8f:3b:3b:6c:0c:7c:b6:43:19:cf:0f:98:
30:05:06:d9:df:e1:4d:1b:53:9b:40:24:1f:a7:6b:
f4:51:05:1a:30:02:39:67:27:3e:f1:aa:9f:e4:96:
ec:bf:5b:60:d0:34:b3:6d:a6:f9:ce:63:23:1f:70:
ac:69:14:eb:63:a6:2b:81:78:68:96:c4:48:90:49:
a1:e3:96:d8:25:17:54:13:fd:65:6c:65:fa:38:69:
49:01:0b:a9:58:69:b9:82:74:1a:45:5d:53:be:49:
1c:2e:86:0c:08:0c:6d:b5:78:0c:85:d9:e9:f0:35:
97:2b:43:c5:3e:80:e8:c2:28:f8:8b:9a:00:3a:67:
2c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8A:B8:B5:F4:94:F3:F0:F3:9A:3A:0C:49:54:8A:6C:18:18:23:A7
X509v3 Authority Key Identifier:
keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/Foq4tfSU8_DzmjoMSVSKbBgYI6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.150.100.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:32:0e:e3:90:4c:3f:b6:b2:b1:2f:10:f9:f2:43:c0:f5:78:
71:26:33:2d:53:3f:ac:f1:bd:35:49:41:b4:f8:61:e1:5c:4c:
2e:d1:8b:29:c6:b5:94:17:69:e1:a8:8e:f9:f3:51:9d:de:70:
b8:5b:14:65:df:bb:7f:25:aa:28:59:03:86:81:fb:7e:d7:32:
93:c5:db:1c:cc:b0:e7:70:1e:fc:bb:7c:50:a2:29:e5:af:47:
d5:f6:c2:11:6b:4d:95:4d:f0:05:16:a6:a5:be:0f:f0:84:1e:
d6:e5:6d:fc:56:14:94:1b:4d:63:98:2f:b8:90:75:f5:ce:51:
f5:c3:7d:3f:3e:dc:d2:b1:e0:47:89:1d:b2:5c:23:c5:0d:64:
f4:ff:d1:d9:6a:6c:86:c9:91:3e:b8:ba:77:25:38:71:28:ba:
9d:c5:2d:58:12:a0:dc:aa:5e:cb:f8:b3:07:1d:9d:78:b5:fd:
c7:9d:07:a3:33:b0:5c:ca:42:fc:37:8c:82:f8:41:f4:ed:e4:
f5:4b:6a:e4:84:7b:40:ef:2d:ff:f1:ea:d9:34:4d:60:e5:ce:
8e:6b:5e:2d:46:d8:41:e0:10:94:1c:16:45:ca:db:e2:9b:7b:
b6:e2:9a:b2:1f:5f:2a:48:ae:6f:8d:a7:b8:df:ea:72:a1:f4:
7b:e3:52:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:22 2025 by rpki-client