Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/1-1Oc-97s5ICrVtDOPSNRDX5QfH8.roa
File: 1-1Oc-97s5ICrVtDOPSNRDX5QfH8.roa (raw, json)
Hash identifier: IjJg0vZ5DfsXb0Z7GI42HrFUXkt4nXbpvbMzVTDaF18=
Subject key identifier: FB:53:9C:FB:DE:EC:E4:80:AB:56:D0:CE:3D:23:51:0D:7E:50:7C:7F
Certificate issuer: /CN=215c52ef97e3d55798efe83474d2030082b9b3a2
Certificate serial: 018D379DCB7FFF94603DCFF4E7F53E7AC2EA
Authority key identifier: 21:5C:52:EF:97:E3:D5:57:98:EF:E8:34:74:D2:03:00:82:B9:B3:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/1-1Oc-97s5ICrVtDOPSNRDX5QfH8.roa
Signing time: Tue 23 Jan 2024 18:38:24 +0000
ROA not before: Tue 23 Jan 2024 18:38:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16354
IP address blocks: 195.160.182.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:37:9d:cb:7f:ff:94:60:3d:cf:f4:e7:f5:3e:7a:c2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215c52ef97e3d55798efe83474d2030082b9b3a2
Validity
Not Before: Jan 23 18:38:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb539cfbdeece480ab56d0ce3d23510d7e507c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:76:db:fe:0c:4e:e1:7b:33:89:88:28:94:38:
75:a1:73:0b:f4:7f:13:fd:af:cc:fa:71:c5:6c:81:
cd:91:86:81:a1:53:2f:70:ac:99:0e:fa:d9:bc:dc:
c8:87:f9:56:c5:ba:9d:d9:cc:b2:ae:7f:33:38:ad:
07:74:8b:33:49:08:e7:55:be:12:88:72:ee:81:09:
b8:11:6f:fd:5b:7e:07:ac:f7:4f:dd:f6:89:f0:d6:
e7:77:f3:79:50:3c:bf:80:75:d8:f0:d1:e3:15:51:
b0:d0:31:f7:b4:37:4f:29:fa:cb:27:5b:c3:53:12:
b4:a0:2d:fc:c7:27:33:13:ef:06:d6:05:de:ed:de:
fa:a6:11:52:97:d8:a2:73:3b:0a:18:4d:bb:21:a6:
f4:56:7a:bc:51:73:ec:89:0e:dd:25:df:ff:31:69:
1b:c5:ff:b5:4e:a5:04:68:6a:54:59:6c:0d:a2:75:
e4:ed:ce:a5:7e:97:e5:dc:cc:5f:26:58:fa:5f:44:
b9:4a:3b:37:b9:a4:c3:9a:6b:90:44:3d:f1:78:8e:
bd:ed:c5:b4:eb:53:b4:21:8e:63:a0:ec:5b:a9:46:
2b:75:bd:38:84:d4:25:cf:95:b7:b3:48:a3:61:61:
74:84:e7:cb:00:a5:e0:f2:c2:b7:46:12:71:02:3b:
51:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:53:9C:FB:DE:EC:E4:80:AB:56:D0:CE:3D:23:51:0D:7E:50:7C:7F
X509v3 Authority Key Identifier:
keyid:21:5C:52:EF:97:E3:D5:57:98:EF:E8:34:74:D2:03:00:82:B9:B3:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/1-1Oc-97s5ICrVtDOPSNRDX5QfH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.160.182.0/23
Signature Algorithm: sha256WithRSAEncryption
48:c6:c9:3e:d5:a2:0f:9d:e9:83:26:d3:d9:5e:0a:8d:73:d9:
81:22:9a:5b:bd:d1:c6:6c:a0:5d:27:ad:58:09:34:1e:3c:0e:
74:b6:96:59:f2:c3:69:0a:b4:5f:09:fb:db:39:b7:51:6a:e6:
45:c5:f7:d8:15:4b:43:24:da:49:b8:a2:b3:52:8e:1a:8a:86:
50:b6:ce:78:ac:f2:41:3c:4d:ca:f6:15:77:bd:6e:f7:6f:27:
0a:9e:00:8c:47:ce:dc:b7:23:35:bc:9b:39:7f:c5:72:a1:12:
83:87:8c:5c:f1:7d:67:2a:dc:06:d5:c9:8c:b1:c3:76:53:d1:
c1:96:e7:4d:c3:c4:41:a5:0c:cc:10:4d:84:b9:7f:7f:42:b8:
c5:5f:bd:0f:ab:04:39:8c:3d:64:48:41:41:b4:44:ed:30:f3:
ea:0c:30:0e:fe:46:23:11:c7:d6:db:01:93:fe:b4:b6:cb:67:
62:c9:37:a2:f5:77:8b:39:98:03:1c:e7:d6:d8:d3:30:5c:09:
59:0b:a3:22:38:75:a5:93:d5:90:2c:4d:06:7e:a1:19:cd:15:
9d:03:70:9b:37:1b:08:ba:f3:99:2e:40:45:53:b7:12:ce:1a:
cc:8c:ad:19:2f:c8:33:58:bf:dc:e8:0f:71:7a:bc:32:3c:e3:
c9:ea:03:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:12:29 2025 by rpki-client