Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/aH8tZ5P3IowImgro3fzyWkW08yY.roa
File: aH8tZ5P3IowImgro3fzyWkW08yY.roa (raw, json)
Hash identifier: pZIpR9Da29usRnHrpkUc2mISJFMDjWhYasHr8oB82NY=
Subject key identifier: 68:7F:2D:67:93:F7:22:8C:08:9A:0A:E8:DD:FC:F2:5A:45:B4:F3:26
Certificate issuer: /CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Certificate serial: 018DC912AA3DBC26FB2D160C7CBC57FD598F
Authority key identifier: 4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/aH8tZ5P3IowImgro3fzyWkW08yY.roa
Signing time: Wed 21 Feb 2024 00:31:00 +0000
ROA not before: Wed 21 Feb 2024 00:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197404
IP address blocks: 194.150.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c9:12:aa:3d:bc:26:fb:2d:16:0c:7c:bc:57:fd:59:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Validity
Not Before: Feb 21 00:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=687f2d6793f7228c089a0ae8ddfcf25a45b4f326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:c1:1f:83:2c:11:82:88:5c:c1:1a:13:5c:
68:61:a9:cd:43:7a:7f:fd:8e:59:9b:4a:db:30:9d:
0a:d5:e8:92:06:e6:ce:ba:8a:73:2e:32:4f:76:37:
3e:5a:a8:94:8f:73:31:fa:49:70:f6:31:d0:fc:9c:
50:e9:67:3e:b3:c6:e5:6d:a6:21:03:28:5d:15:58:
ae:c1:02:27:5b:7e:51:db:c5:be:f5:eb:cb:cd:eb:
0d:56:6f:74:22:7d:31:eb:f5:8c:88:b0:31:2d:4f:
cd:5a:3b:03:5b:35:50:81:41:96:eb:7b:63:84:a8:
15:b9:7e:d9:99:ef:80:4a:bb:3d:73:e5:2d:c9:4f:
2b:7e:20:89:12:74:4e:6c:5a:b9:1b:11:27:a1:26:
c7:16:38:aa:1c:69:cc:58:e3:4a:df:49:77:db:4e:
7a:e0:62:32:9a:62:34:0c:88:b1:5d:a4:da:0f:86:
04:58:95:73:97:66:71:d2:c4:cb:1e:64:ed:d3:ee:
be:d9:19:ca:94:5f:48:6f:05:d3:b5:c8:ed:65:2f:
e4:40:f0:81:0d:24:ad:ee:98:c0:8d:1e:e1:86:81:
45:1f:8a:1f:cd:54:b5:dd:1c:dc:9a:ef:f5:43:69:
8c:d7:c6:b2:55:30:46:55:69:63:3e:ab:b7:50:d3:
89:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7F:2D:67:93:F7:22:8C:08:9A:0A:E8:DD:FC:F2:5A:45:B4:F3:26
X509v3 Authority Key Identifier:
keyid:4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/aH8tZ5P3IowImgro3fzyWkW08yY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.214.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:cf:3e:0f:a3:0a:99:1c:05:bb:75:41:a4:db:0a:19:66:eb:
5b:2f:ac:54:b5:9b:3d:2c:f4:7e:02:5f:c2:98:9f:25:67:f2:
3a:a0:9d:65:b2:28:77:1c:5f:4d:a8:60:0e:ed:6e:13:7a:f7:
aa:5e:c5:f5:a2:dd:42:ad:70:58:cf:1c:fe:27:af:bb:04:be:
33:5e:d2:1c:36:8a:90:bb:03:49:30:18:b9:3b:69:bc:98:ef:
1c:b1:e1:4d:4b:f6:93:31:ed:b6:00:94:1b:c4:f8:38:64:41:
df:c6:69:85:ea:8c:14:1a:45:10:ff:68:c4:e4:ab:95:1d:48:
7e:ec:53:c9:05:05:d1:d5:89:dc:df:1a:04:ad:fc:96:db:6f:
6f:bf:6e:aa:89:77:b1:4a:62:15:5c:58:12:11:73:b1:f6:ab:
56:82:a9:26:dd:57:62:65:cf:4d:e4:27:6a:de:1a:ce:54:4f:
43:2f:da:ee:95:84:4f:c0:54:59:36:6d:9b:89:90:7d:0e:06:
f8:ae:01:95:b7:b4:3f:6e:91:af:fa:74:c9:81:6a:ee:88:94:
5e:d4:3a:da:6f:78:9b:45:78:5b:e1:b2:bd:38:f7:3a:50:f9:
bf:82:e0:40:45:6a:64:e3:14:48:46:65:03:89:38:c5:93:15:
29:8a:8b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:32 2025 by rpki-client