Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/elivOdidoAPV10gc5VFQQDJ3ZzU.roa
File: elivOdidoAPV10gc5VFQQDJ3ZzU.roa (raw, json)
Hash identifier: +4WspnpNr9S5uTE71xK0R3jJaAmL7tJ8E0sq582F3uA=
Subject key identifier: 7A:58:AF:39:D8:9D:A0:03:D5:D7:48:1C:E5:51:50:40:32:77:67:35
Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Certificate serial: 019296074556F6625A1E95A42A3B63B3B54B
Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/elivOdidoAPV10gc5VFQQDJ3ZzU.roa
Signing time: Wed 16 Oct 2024 15:51:51 +0000
ROA not before: Wed 16 Oct 2024 15:51:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2856
IP address blocks: 194.79.48.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 04 Nov 2024 09:28:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:96:07:45:56:f6:62:5a:1e:95:a4:2a:3b:63:b3:b5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Validity
Not Before: Oct 16 15:51:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a58af39d89da003d5d7481ce551504032776735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c5:55:9d:df:29:05:a9:64:02:5c:aa:03:df:
15:09:49:93:f2:91:69:a0:ae:07:8a:96:b3:cc:24:
52:a7:74:98:ba:d1:44:ae:ae:f5:d5:43:eb:3f:c6:
29:d7:cc:f2:66:c4:cb:5b:62:4e:74:04:b8:45:ae:
e7:c5:bc:6e:7b:5b:fb:dc:f2:f2:3e:8b:0c:a7:1c:
c4:34:4d:9c:18:b6:63:8b:83:57:67:c6:6c:3f:17:
a9:f0:94:ce:25:da:87:74:bd:aa:21:c7:95:e8:ec:
59:1e:c3:af:b3:34:d4:07:fd:73:5a:0c:c9:1e:f2:
8e:29:c9:c1:0e:e7:5e:0b:aa:cc:88:5e:93:1f:5d:
1c:1b:5f:95:de:e0:0e:26:50:db:fb:67:94:66:0d:
0f:d1:5e:af:02:95:4d:ed:0e:6f:a3:08:69:16:a3:
50:cb:99:75:b6:78:67:66:b5:c0:d7:35:f8:00:3e:
24:10:d1:82:38:e7:c0:13:ba:e0:78:7e:3e:0b:c7:
6a:3a:bf:25:45:53:fd:bd:0b:1f:94:38:de:a4:b3:
a0:f3:5c:3e:d5:18:0d:e4:d0:60:de:d2:a2:7e:21:
1d:0e:fa:f3:72:bc:33:c9:be:66:ec:5d:62:53:89:
5b:52:75:21:28:60:77:35:5f:69:7d:13:e2:d8:a1:
39:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:58:AF:39:D8:9D:A0:03:D5:D7:48:1C:E5:51:50:40:32:77:67:35
X509v3 Authority Key Identifier:
keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/elivOdidoAPV10gc5VFQQDJ3ZzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.79.48.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:a1:3e:8f:76:68:d4:4f:b2:91:a1:b0:0a:8d:27:ba:98:b3:
2e:e6:05:c2:26:37:9e:80:bb:2e:55:ac:40:f9:cb:29:44:1c:
34:87:ab:2b:67:16:05:63:d2:ee:6c:df:fd:da:b4:6f:b6:ca:
cf:e1:a3:39:3d:eb:71:c5:1c:a0:d6:bb:32:03:9f:e8:43:7f:
74:85:4f:27:63:e4:46:26:a0:55:c2:28:54:d2:18:f1:e6:6b:
04:46:2c:6a:46:c9:30:01:4a:4e:dc:7b:5d:67:f3:b4:d5:f7:
4a:2e:87:cd:51:7f:ff:fa:1c:03:99:35:f2:3c:70:45:e1:1a:
23:8f:3e:5f:c8:ad:4c:73:3d:c1:90:55:0f:42:2c:bd:b4:9f:
ef:b0:3a:1d:24:52:09:3d:e0:c4:ad:7d:77:33:c8:0d:1e:dd:
af:88:e6:bb:d7:43:60:9f:06:a9:96:c0:50:43:3d:0c:7c:e2:
20:3b:b0:30:7e:a0:92:cf:aa:65:15:be:83:c6:7d:01:c4:ef:
8d:a0:8f:4f:7e:2d:c7:c5:d8:e8:ed:9e:79:a8:a8:57:cb:ca:
5e:bc:96:08:b3:8d:45:1a:bb:e5:b3:a9:59:83:cc:7d:0c:44:
9d:92:f6:28:ca:66:78:c1:64:1c:3b:0c:1a:8d:40:f9:11:d9:
32:6f:e9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:29:05 2025 by rpki-client