Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/JSnqeNXR4HVaVt3rSq_EN55tA7w.roa
File: JSnqeNXR4HVaVt3rSq_EN55tA7w.roa (raw, json)
Hash identifier: tNtzsEEMS/90EhJqZlFYPrfQ19fqMb1g1DmaSw+pKwQ=
Subject key identifier: 25:29:EA:78:D5:D1:E0:75:5A:56:DD:EB:4A:AF:C4:37:9E:6D:03:BC
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019412AEDF9E83A0B7569AE861FF0A05D1A4
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/JSnqeNXR4HVaVt3rSq_EN55tA7w.roa
Signing time: Sun 29 Dec 2024 13:50:37 +0000
ROA not before: Sun 29 Dec 2024 13:50:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216127
IP address blocks: 141.105.142.0/24 maxlen: 24
141.105.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:12:ae:df:9e:83:a0:b7:56:9a:e8:61:ff:0a:05:d1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Dec 29 13:50:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2529ea78d5d1e0755a56ddeb4aafc4379e6d03bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:93:1e:85:27:ac:2a:28:ed:06:ac:f6:02:a8:
80:3f:fb:5c:b5:93:c5:8c:ac:f9:15:bd:19:b0:63:
1b:2a:b0:07:39:b5:fc:e4:75:16:7d:34:ee:8e:fe:
2f:c4:9c:be:2c:49:13:54:45:b8:35:94:ad:43:2c:
38:d0:4b:cc:2d:c0:04:c6:b7:81:ea:1c:ee:48:57:
e5:e6:57:59:d1:33:db:9c:0a:18:8e:09:98:cc:92:
61:39:3f:80:e7:ad:dd:ee:ec:0c:01:15:14:c8:5a:
d7:f4:cf:7f:70:a5:20:c1:04:de:af:09:11:bf:6c:
91:1b:c8:46:7f:99:32:ed:1c:a5:c9:33:a6:34:ae:
f6:4a:72:e6:53:54:ec:95:fb:b1:30:b7:d5:1d:05:
d9:27:7d:c3:7c:89:22:13:8d:ae:db:d5:d9:ec:1a:
18:68:fd:0a:5f:27:a5:37:86:5e:d6:8a:bb:87:be:
14:a7:45:b1:35:5f:9c:d9:12:32:e3:b7:ef:34:7e:
95:9e:f6:58:25:cc:71:78:49:dd:9a:7e:e7:80:6c:
ef:d0:2d:bb:64:9d:01:a6:d6:35:fa:27:8b:9a:da:
ad:75:80:08:17:49:c7:c9:c6:fc:1c:cf:d4:27:ba:
49:d3:7e:29:28:4f:ae:d3:f4:cc:40:bb:7e:58:9d:
76:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:29:EA:78:D5:D1:E0:75:5A:56:DD:EB:4A:AF:C4:37:9E:6D:03:BC
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/JSnqeNXR4HVaVt3rSq_EN55tA7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.142.0/23
Signature Algorithm: sha256WithRSAEncryption
64:2c:a5:43:66:a0:20:3e:af:0a:29:26:53:32:6c:f2:a7:85:
e8:46:47:fb:8b:6f:9a:52:a0:12:72:3d:1f:83:c4:20:ce:55:
85:d4:6c:68:f1:09:7e:2b:dc:f2:51:86:1c:ee:95:98:d8:9d:
7a:e5:d8:ec:97:0c:3a:7f:1b:07:31:b2:0b:91:a9:9a:15:e1:
55:91:b4:92:d9:49:17:1b:dc:48:4c:75:70:aa:0e:e4:55:a0:
53:33:78:1f:f4:44:0e:97:e0:48:05:78:c4:60:d7:81:56:b1:
96:88:0c:38:c2:88:38:d9:8b:38:51:0a:bf:d8:9e:8a:a3:29:
1a:79:0e:85:96:20:65:0e:c3:66:9d:3a:db:ab:b0:39:28:02:
a7:9d:5a:10:45:dc:2a:3b:92:30:4f:43:ee:4e:e0:26:2d:3e:
30:e5:fe:8c:5c:05:0c:c3:12:46:0f:a2:c4:43:fe:02:74:24:
24:ec:28:22:9a:f3:5b:78:a1:79:6d:30:0f:72:b9:e9:82:73:
4a:36:f5:f8:2f:06:52:15:5c:04:11:75:c1:63:71:68:be:75:
f6:6a:57:6d:fc:9b:5a:71:2c:da:e0:f6:56:cc:68:6c:57:19:
21:c9:13:de:9a:d6:7c:4e:b6:dd:b5:6b:e6:d5:48:f0:94:2e:
6f:80:42:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:29:52 2025 by rpki-client