Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/FSbHEmq1XxZf2murM9QeE34IXK4.roa
File: FSbHEmq1XxZf2murM9QeE34IXK4.roa (raw, json)
Hash identifier: 0J0KtZF6JQgDjVeSgWJam5uOod5RTVhAwEkBhhiusiM=
Subject key identifier: 15:26:C7:12:6A:B5:5F:16:5F:DA:6B:AB:33:D4:1E:13:7E:08:5C:AE
Certificate issuer: /CN=ab46686008a8c101e84ea878318ae58eb71cec82
Certificate serial: 018CC9BB0E73D4A1CFFC82772D6DF50E66B5
Authority key identifier: AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/FSbHEmq1XxZf2murM9QeE34IXK4.roa
Signing time: Tue 02 Jan 2024 10:32:08 +0000
ROA not before: Tue 02 Jan 2024 10:32:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3303
IP address blocks: 194.11.152.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:0e:73:d4:a1:cf:fc:82:77:2d:6d:f5:0e:66:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab46686008a8c101e84ea878318ae58eb71cec82
Validity
Not Before: Jan 2 10:32:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1526c7126ab55f165fda6bab33d41e137e085cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9f:91:6c:9d:e7:38:00:e5:6b:de:7f:58:a0:
2e:d3:14:0f:92:4e:6b:5f:fe:1f:20:fe:d0:58:8c:
1f:37:0b:36:76:5e:b0:a1:b5:ea:c5:77:09:42:98:
c7:0f:ba:a6:c5:4d:ef:4f:dd:92:b7:5f:e2:6f:09:
b5:a8:28:47:ca:cc:71:14:96:5f:8e:c2:6c:1c:18:
ab:84:08:07:3a:5c:df:2e:f1:83:80:d8:fb:2f:00:
16:22:c9:38:67:bb:d5:8f:bb:7d:03:2f:e1:59:e6:
41:c6:ba:be:94:2d:08:8d:cc:13:50:bc:6b:1e:6a:
96:c0:4c:19:7d:ba:fa:4b:f2:a2:b9:22:da:47:b5:
5a:60:23:43:1f:49:54:c5:91:25:8d:ba:c1:fc:1b:
bb:e9:6e:d4:80:46:36:33:a6:27:02:72:84:1b:e8:
03:9e:a1:00:c5:27:ea:46:98:8e:60:95:9f:c0:0a:
02:88:2b:ce:dc:29:34:cb:c5:db:f9:6b:47:79:de:
3b:15:97:92:43:78:13:f6:45:58:4d:d9:ce:5b:b2:
9c:61:e4:f3:2d:68:c7:90:13:1a:9c:bf:f6:2a:ee:
e0:fa:b6:82:dc:ae:d9:76:7a:f3:65:a9:e5:89:5e:
a7:7e:e3:60:11:64:68:bb:05:67:ba:2c:78:20:dc:
14:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:26:C7:12:6A:B5:5F:16:5F:DA:6B:AB:33:D4:1E:13:7E:08:5C:AE
X509v3 Authority Key Identifier:
keyid:AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/FSbHEmq1XxZf2murM9QeE34IXK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.152.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:04:de:56:6b:04:83:1e:4c:e0:c1:fd:82:45:09:e3:6a:a5:
e9:93:68:e0:5b:f7:59:a7:06:f6:e1:a7:bf:fb:69:97:c4:d2:
96:8b:69:1c:f5:37:fb:ac:f1:17:0b:af:c0:43:e9:51:9d:4b:
ec:ef:f4:74:2e:58:f4:42:db:93:b1:c6:1d:c2:a2:a8:3e:14:
fb:99:96:d0:e9:19:92:52:b5:d2:b0:38:8c:26:0e:81:b6:a3:
05:d5:ea:dc:8a:22:06:2b:0f:58:d9:a1:b8:8b:bf:5a:52:b0:
8b:f7:ab:53:d4:6f:eb:78:72:77:dc:d1:b7:3a:9b:06:65:b8:
51:c2:62:53:6d:d2:73:ee:cc:b5:df:84:4e:b0:f4:68:0c:cd:
05:65:45:b1:c6:45:22:ed:d7:18:45:c7:2a:15:b7:58:10:2f:
04:e2:9c:69:f5:3f:8c:99:35:0f:0e:32:d2:e7:22:49:16:25:
81:31:7d:c9:ff:6b:66:2b:d3:2b:f2:45:94:6f:46:28:c4:16:
f9:ed:dd:4c:9c:e2:11:d1:16:1b:2d:8a:1c:fd:4e:85:da:34:
d9:14:75:7c:32:45:3d:39:d0:d0:7b:60:9d:74:39:f6:86:1f:
5a:a5:d2:50:b6:49:a8:89:6f:b9:d3:28:d5:b1:ca:c9:75:3b:
72:47:df:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:40 2025 by rpki-client