Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/Gef0WJWV7dmJ_AnKwhjZE7XBTRs.roa
File: Gef0WJWV7dmJ_AnKwhjZE7XBTRs.roa (raw, json)
Hash identifier: md72saZN2cCSSayo8WSFEghs/GN7eTjUUWxS7B8AhxQ=
Subject key identifier: 19:E7:F4:58:95:95:ED:D9:89:FC:09:CA:C2:18:D9:13:B5:C1:4D:1B
Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Certificate serial: 01933E90B154A6149107FEEA00BD4A534212
Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/Gef0WJWV7dmJ_AnKwhjZE7XBTRs.roa
Signing time: Mon 18 Nov 2024 09:18:10 +0000
ROA not before: Mon 18 Nov 2024 09:18:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5400
IP address blocks: 195.171.36.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3e:90:b1:54:a6:14:91:07:fe:ea:00:bd:4a:53:42:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Validity
Not Before: Nov 18 09:18:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19e7f4589595edd989fc09cac218d913b5c14d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c1:7d:69:af:7c:3a:3e:be:02:f4:db:b3:70:
37:a0:b9:ef:f8:75:6b:89:5e:f0:e6:a0:e2:fe:d8:
8d:4f:cf:90:17:11:c2:4e:3d:c1:2e:d4:6c:75:fc:
e1:9c:db:90:19:d4:33:c2:19:77:84:f8:c6:22:64:
df:77:e0:01:57:15:9a:9b:02:93:f1:8f:44:04:5f:
7c:89:dd:15:df:9e:ec:ea:36:0a:58:25:84:a6:e6:
3a:ed:fc:40:a4:14:d4:7a:b9:0b:79:97:5c:37:a2:
3b:36:8f:88:31:67:1b:52:4b:df:e3:5f:13:3a:4d:
b9:fb:0b:fc:c3:fa:eb:f9:41:77:f9:c4:af:e9:5b:
b4:f1:82:4f:f4:a4:25:21:1c:af:98:ae:58:1f:fa:
1c:6d:a2:e9:8c:07:5b:8e:af:dc:37:bd:9f:e5:f9:
ed:b0:35:53:0e:49:03:6f:dd:2e:29:db:d6:88:e1:
ce:51:39:4c:ba:49:93:6e:5e:ff:5b:76:62:2a:1e:
75:dc:82:f2:18:cb:8a:95:a9:47:7d:85:4c:10:6f:
3e:ae:96:7e:d5:70:45:40:9f:2f:ab:78:53:97:87:
81:fa:e0:b7:95:75:50:99:90:17:06:0a:8d:39:ae:
f0:3f:a9:7d:d2:79:b5:6e:22:e7:f6:08:9a:8b:b1:
95:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E7:F4:58:95:95:ED:D9:89:FC:09:CA:C2:18:D9:13:B5:C1:4D:1B
X509v3 Authority Key Identifier:
keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/Gef0WJWV7dmJ_AnKwhjZE7XBTRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.171.36.0/22
Signature Algorithm: sha256WithRSAEncryption
02:46:d9:c3:44:79:f0:75:bc:16:e9:6c:3e:de:7f:8c:79:31:
2a:b4:d8:aa:a6:4a:d1:e6:ee:3b:ba:e7:77:27:b8:31:9d:35:
c0:34:02:bc:1c:0c:18:27:bc:4a:3b:75:3a:e3:83:62:a2:0a:
d7:c6:5a:40:7d:b5:e0:29:80:c8:2c:e1:32:5d:a7:1c:0c:ed:
be:9d:f3:48:13:0e:08:c5:5f:fa:6e:6d:55:1d:40:a7:e2:6a:
2d:bb:e0:45:5e:e5:f3:e7:26:a9:9f:ea:d3:b9:4e:28:44:b0:
a3:3d:f2:0e:5a:7b:7b:3c:e3:27:0d:3b:94:dd:02:be:cf:69:
98:3f:72:7c:1c:53:31:d0:f3:52:7d:69:5e:f6:df:99:92:dc:
f0:b7:c8:56:ae:ac:3a:a0:2f:3a:74:a4:59:44:8c:24:27:48:
59:89:8a:8a:ed:f0:cd:23:c1:7a:9d:df:b1:d6:01:0f:ef:ec:
e0:ca:57:39:b1:cc:16:dd:51:d9:59:ce:24:9e:cd:9d:a3:1d:
da:d0:23:07:df:c0:b1:ac:e9:38:83:a8:d4:08:86:12:8d:07:
70:a2:d0:90:9a:e9:57:e0:97:f2:e7:de:d9:ce:50:69:92:57:
14:b6:e3:66:fe:a8:7c:bf:fe:a0:16:45:5c:4c:f8:04:93:cf:
e8:00:13:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:29:58 2025 by rpki-client