Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/7QAX46P3Efb1V1XIfe9quwRN420.roa
File: 7QAX46P3Efb1V1XIfe9quwRN420.roa (raw, json)
Hash identifier: TeFm9EsP8ySpSJ/ERI74Y6fFqP0Ke47fJpg9iNZOgME=
Subject key identifier: ED:00:17:E3:A3:F7:11:F6:F5:57:55:C8:7D:EF:6A:BB:04:4D:E3:6D
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01941816DCE5B94B476BB70187C314B860FE
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/7QAX46P3Efb1V1XIfe9quwRN420.roa
Signing time: Mon 30 Dec 2024 15:02:18 +0000
ROA not before: Mon 30 Dec 2024 15:02:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42831
IP address blocks: 195.216.178.0/24 maxlen: 24
195.216.179.0/24 maxlen: 24
195.216.180.0/24 maxlen: 24
195.216.181.0/24 maxlen: 24
195.216.182.0/24 maxlen: 24
195.216.183.0/24 maxlen: 24
195.216.184.0/24 maxlen: 24
195.216.185.0/24 maxlen: 24
195.216.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:18:16:dc:e5:b9:4b:47:6b:b7:01:87:c3:14:b8:60:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Dec 30 15:02:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed0017e3a3f711f6f55755c87def6abb044de36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:83:aa:12:29:dd:a9:a1:8b:62:4d:f6:5d:8e:
2f:25:04:22:32:dd:6c:4c:b0:7f:a4:c1:13:d2:1c:
f9:ab:53:48:a1:5e:3d:6e:de:9f:cf:29:d3:17:c8:
2b:26:69:83:72:eb:2d:e6:31:62:42:4a:8f:b8:2a:
1b:af:32:5b:d4:19:9e:e2:17:ab:08:ad:8e:ec:eb:
e8:ef:f1:25:61:aa:29:e4:5b:a6:37:89:ec:29:7b:
2c:30:3e:83:b1:1d:0e:e6:81:0a:25:2b:2f:08:fc:
ed:86:9d:b9:ec:b8:b4:12:5f:6b:47:4c:75:a8:35:
73:7b:90:6b:62:f9:19:ca:b5:69:d0:0e:60:33:a1:
a4:49:75:45:a0:12:b9:cf:c6:d8:f0:94:b3:b0:e3:
6d:89:4a:f2:f0:7a:0c:79:88:61:b2:c2:bf:61:2a:
1b:de:e3:48:65:7f:4c:6f:87:00:61:65:53:94:c6:
b7:f1:84:c1:d9:2c:19:50:17:54:ed:2e:bf:7b:1a:
d3:18:ef:20:a6:c4:13:de:33:f6:4b:44:1e:94:07:
59:5d:05:2e:f4:34:c1:12:31:6e:e8:d2:8e:d3:5d:
09:22:79:8c:fb:d9:a4:a5:df:5b:f8:28:f3:76:c7:
a4:41:cf:7c:42:9a:7d:e2:72:d4:32:87:9d:b5:20:
6f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:00:17:E3:A3:F7:11:F6:F5:57:55:C8:7D:EF:6A:BB:04:4D:E3:6D
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/7QAX46P3Efb1V1XIfe9quwRN420.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.178.0-195.216.185.255
195.216.188.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c5:54:12:f9:57:c6:1f:95:bd:27:99:ae:24:7c:3c:eb:d2:
c1:ef:82:2e:02:81:7c:f2:c0:3f:35:60:87:60:6d:4a:ef:34:
64:3f:c1:52:b4:23:13:02:4e:ce:7f:50:52:83:ae:fb:41:15:
ad:b5:0c:90:27:d0:a6:78:02:b5:64:79:ce:b9:16:24:db:a8:
32:c8:ed:17:e5:99:1c:a4:a0:c8:3e:3c:ac:2d:53:3e:23:88:
d2:74:99:a3:86:bd:73:22:23:31:29:e0:78:cc:13:19:63:a9:
20:1f:c6:eb:7a:e0:81:f4:fe:e5:96:bc:14:65:1c:2f:23:6e:
1d:b4:23:09:5f:bc:06:4e:1e:95:4b:b0:01:0a:e6:c4:41:56:
ac:df:90:18:1d:48:22:af:70:81:1f:ef:38:75:01:9d:0c:96:
a0:36:ae:20:a8:90:33:1c:f6:c9:2d:95:94:16:67:1e:b7:33:
b8:be:14:ec:e0:a3:58:18:e1:42:b0:4f:83:78:14:35:ff:98:
b8:09:14:80:79:df:bb:ba:24:6c:f0:b1:ce:17:d7:ca:9e:f2:
59:bf:aa:50:e4:2d:1f:16:bd:1c:54:3f:cb:71:a7:42:65:43:
3e:98:0b:7a:df:d0:23:22:9a:fc:86:56:71:64:e0:1e:bd:ca:
8a:9c:5d:4d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:38:28 2025 by rpki-client