Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/ExSdH07FcpEuZHZrrvqWMqlHqiw.roa
File: ExSdH07FcpEuZHZrrvqWMqlHqiw.roa (raw, json)
Hash identifier: zXlvFfUgqw64yxcO53DFMEWlVVG0fP2VHU/VQeyYELs=
Subject key identifier: 13:14:9D:1F:4E:C5:72:91:2E:64:76:6B:AE:FA:96:32:A9:47:AA:2C
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 018D5EE9D7C3918CF41CC6DA0B15CCD8D217
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/ExSdH07FcpEuZHZrrvqWMqlHqiw.roa
Signing time: Wed 31 Jan 2024 09:46:39 +0000
ROA not before: Wed 31 Jan 2024 09:46:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 62.68.92.0/24 maxlen: 24
130.255.168.0/24 maxlen: 24
193.108.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Aug 2024 17:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5e:e9:d7:c3:91:8c:f4:1c:c6:da:0b:15:cc:d8:d2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Jan 31 09:46:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13149d1f4ec572912e64766baefa9632a947aa2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a4:72:20:70:dc:d0:8a:6b:0a:1e:a4:86:f7:
05:cd:25:fe:26:df:16:47:c0:90:68:0e:24:90:aa:
5d:1e:39:c0:24:7e:54:9f:16:4b:b2:1e:eb:2c:14:
83:79:99:2d:7d:91:7f:13:f3:6e:0d:97:55:57:87:
d8:cd:93:2e:9a:6b:6c:29:3e:4d:bd:14:d3:b7:2f:
5c:cb:15:03:05:1b:30:48:d8:84:74:41:a8:f9:a4:
0e:7e:30:71:10:7b:3c:01:e2:56:ad:f8:d7:0b:5c:
88:50:ee:1d:95:39:7c:51:60:82:2d:f7:4c:5d:5f:
0f:0c:eb:ff:86:77:33:84:42:7d:36:04:3c:72:f4:
88:b7:08:f2:c4:e5:2b:07:c3:4c:48:85:0d:26:55:
01:b6:0f:76:83:b1:96:cd:a3:54:bb:cc:e7:b4:ac:
e3:56:34:35:f1:4e:ed:60:d2:af:2f:9e:72:01:38:
01:62:90:86:78:c1:c3:a7:ab:81:d7:26:83:e8:3c:
96:7d:4c:2c:4e:90:4c:98:e7:25:41:df:e2:f5:1d:
97:a0:ca:bb:b8:8c:2c:46:63:62:09:83:88:c9:ed:
97:40:78:57:50:9a:07:e9:25:b8:c2:51:bf:17:57:
fc:18:27:f0:1a:51:c4:7b:df:58:0b:27:ed:de:d3:
70:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:14:9D:1F:4E:C5:72:91:2E:64:76:6B:AE:FA:96:32:A9:47:AA:2C
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/ExSdH07FcpEuZHZrrvqWMqlHqiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.92.0/24
130.255.168.0/24
193.108.131.0/24
Signature Algorithm: sha256WithRSAEncryption
12:44:d7:d0:0b:72:5c:46:9e:b0:3b:fe:f9:e3:39:a0:16:ea:
2d:5c:6e:20:e6:98:f5:ec:45:79:58:6c:19:16:a4:66:50:65:
4f:4e:43:9e:f5:e4:28:33:fd:47:27:be:b1:6a:92:94:54:83:
db:93:5b:02:b9:3d:d9:e0:d2:6d:05:7e:9c:de:4a:2a:d0:21:
cd:30:ea:25:06:1d:77:7a:d2:b7:67:45:c5:0f:cc:0a:92:58:
09:f9:ba:35:ad:01:e6:af:1f:61:07:0f:12:6e:18:4b:23:3e:
fd:65:19:8a:20:23:a3:e4:62:91:68:43:08:1f:b0:73:f5:54:
3a:e6:5d:eb:a8:db:00:2d:1e:08:85:ac:8e:a5:07:fd:61:5e:
10:86:5f:74:ef:4a:bf:7f:1c:7a:e0:08:14:4d:ef:10:45:7d:
69:56:63:26:00:35:6d:25:6b:8c:d7:57:00:88:c3:b0:27:06:
44:d9:fd:0e:ba:ed:87:85:83:30:2a:9b:45:f7:b0:a6:6c:41:
07:a3:c9:08:58:60:b0:7a:2a:18:bb:78:1c:62:76:41:16:82:
50:34:40:1d:47:b3:24:69:96:3f:40:db:9e:2e:94:17:34:46:
8c:e8:bb:55:36:d2:0f:df:09:e7:27:2f:3d:b6:0b:14:0c:a2:
3b:8e:13:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:05 2025 by rpki-client