Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/tdVvw1u0Osy91Q3mroeBAsth8AM.roa
File: tdVvw1u0Osy91Q3mroeBAsth8AM.roa (raw, json)
Hash identifier: v2e1LsSbD5ykKZNoe+V/xzft3TYvKnerZoKYuX6+iAw=
Subject key identifier: B5:D5:6F:C3:5B:B4:3A:CC:BD:D5:0D:E6:AE:87:81:02:CB:61:F0:03
Certificate issuer: /CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
Certificate serial: 018CC26D3ACF75B164078810DBA83880034F
Authority key identifier: 5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/tdVvw1u0Osy91Q3mroeBAsth8AM.roa
Signing time: Mon 01 Jan 2024 00:29:47 +0000
ROA not before: Mon 01 Jan 2024 00:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206863
IP address blocks: 86.62.40.0/22 maxlen: 24
185.169.136.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:3a:cf:75:b1:64:07:88:10:db:a8:38:80:03:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
Validity
Not Before: Jan 1 00:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5d56fc35bb43accbdd50de6ae878102cb61f003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:31:ea:29:57:9c:0d:61:5b:47:37:d4:0d:de:
ea:07:62:21:05:ba:2a:f4:0b:9c:4b:da:13:32:d4:
88:8a:4b:8b:e6:e8:b9:f2:49:8d:8a:11:ec:db:7c:
03:e7:82:b4:17:97:a0:90:59:99:49:3f:90:cd:15:
89:f9:9d:ba:d2:a7:c0:a1:4f:88:3f:b9:c5:7d:2c:
d2:5d:4a:bc:8e:7b:df:8c:35:87:03:cf:1f:63:47:
79:45:e1:d2:02:62:30:3d:97:63:c7:5a:14:4c:67:
11:a1:56:4f:9f:43:65:a7:94:5d:d1:02:ac:56:db:
ff:0a:ec:ac:c7:13:c0:7a:47:84:2f:94:9d:c0:03:
49:e7:2c:f0:ab:48:8f:9e:90:b6:d7:38:af:1d:82:
06:86:eb:6b:f9:5b:e1:57:0f:24:a7:82:e5:27:30:
0a:38:43:a3:3b:47:30:28:8e:2d:8c:78:92:2d:1b:
73:a6:1a:66:69:c5:0d:a2:05:ae:f6:07:b5:9e:0e:
0d:f1:32:66:7f:f4:58:a9:ad:a8:b6:2f:da:7f:30:
6c:da:e9:58:e8:1a:45:ae:46:13:4e:60:2f:f9:69:
26:dd:33:77:51:88:6c:a4:fc:d5:c4:9d:a6:11:16:
9f:6c:59:8c:08:4f:c2:fb:77:56:57:d3:72:b3:2a:
40:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D5:6F:C3:5B:B4:3A:CC:BD:D5:0D:E6:AE:87:81:02:CB:61:F0:03
X509v3 Authority Key Identifier:
keyid:5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/tdVvw1u0Osy91Q3mroeBAsth8AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.40.0/22
185.169.136.0/22
Signature Algorithm: sha256WithRSAEncryption
28:1d:bd:06:ed:0d:a1:01:ab:07:8f:8c:05:6a:cd:cc:73:4e:
22:46:2e:41:a1:2f:70:b0:94:95:67:ca:ac:81:79:22:a6:fa:
42:42:a6:06:ca:c3:45:60:53:2b:bf:28:99:f9:d9:c4:66:4a:
2f:1d:fa:3d:9e:5f:5a:d6:8a:3c:db:63:ac:b8:5e:53:07:e5:
3a:04:08:e6:d6:99:77:79:81:87:71:8a:3a:0a:57:eb:72:8a:
05:ab:c8:57:dd:d4:15:33:b9:37:3c:41:40:55:d6:ea:c7:cf:
0c:3f:a0:68:04:1e:bb:6e:08:c7:7c:3d:5e:8f:99:46:c6:56:
56:b1:34:9e:e9:69:64:d1:78:2b:4a:2f:92:87:43:a3:c3:fd:
ab:51:13:a7:1e:31:d8:07:be:c4:c5:99:d2:85:62:b9:30:12:
53:80:51:76:88:c4:8d:3a:a2:70:53:c5:54:ad:b1:4d:6b:a8:
6c:29:f2:b6:30:d7:fd:fd:41:09:a6:4c:f5:08:6c:bd:ce:17:
da:9b:c6:54:ed:1b:87:e1:8f:e2:60:71:13:c4:5d:44:73:5d:
44:b3:cd:2b:ec:a5:0d:5a:14:a9:9d:03:86:4f:58:a7:61:f4:
9b:19:ca:70:98:95:e1:88:af:87:eb:90:05:4b:06:80:4e:ca:
4b:f6:ef:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:30 2025 by rpki-client