Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/P5sFua-9XSzGYAB59FdFUtOF7x4.roa
File: P5sFua-9XSzGYAB59FdFUtOF7x4.roa (raw, json)
Hash identifier: /mBzvD6O/nxpli/U1/Aw6hs3100iFP5r0jhybjoklA0=
Subject key identifier: 3F:9B:05:B9:AF:BD:5D:2C:C6:60:00:79:F4:57:45:52:D3:85:EF:1E
Certificate issuer: /CN=0039f741686da11e79ae7c5e486aa290808cb1b7
Certificate serial: 018CC9BB0CF9640EE6852BC414CC2E6B20FD
Authority key identifier: 00:39:F7:41:68:6D:A1:1E:79:AE:7C:5E:48:6A:A2:90:80:8C:B1:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/P5sFua-9XSzGYAB59FdFUtOF7x4.roa
Signing time: Tue 02 Jan 2024 10:32:08 +0000
ROA not before: Tue 02 Jan 2024 10:32:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211045
IP address blocks: 194.31.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:0c:f9:64:0e:e6:85:2b:c4:14:cc:2e:6b:20:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0039f741686da11e79ae7c5e486aa290808cb1b7
Validity
Not Before: Jan 2 10:32:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f9b05b9afbd5d2cc6600079f4574552d385ef1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:78:ca:ce:b0:5a:d1:ec:ff:25:7a:29:aa:bf:
06:7f:94:f7:02:ab:bd:4a:08:dd:14:4f:06:a9:87:
e9:4a:bc:94:8e:cd:b5:96:98:81:c3:71:05:12:ac:
2d:c2:86:4a:df:02:4f:ae:05:73:df:0c:9b:37:18:
be:71:17:57:1e:55:fe:54:c8:75:94:e8:00:2a:2c:
60:f9:6d:d4:5f:77:8f:98:3c:87:19:c4:7c:fb:42:
16:94:ce:ef:90:d7:32:c4:cd:0a:79:84:58:a3:91:
9d:26:86:2c:0c:70:af:9c:75:61:fe:b0:4b:8f:78:
6d:ae:9e:2b:67:c6:cf:c4:a2:76:7e:c2:f7:aa:98:
4c:01:4f:a8:b2:a2:cc:ea:61:06:c0:0e:0c:74:af:
55:37:8e:71:a6:10:d4:cb:46:86:bb:1b:9b:1a:28:
dc:e7:7b:cf:43:c5:7c:d3:eb:29:b2:66:94:36:bf:
7a:03:9b:17:ef:93:08:d6:70:f5:0e:da:ad:bc:96:
9c:62:98:63:6a:48:87:57:2e:90:20:75:eb:85:d4:
f8:fc:ba:e5:00:e7:da:c7:01:74:12:8e:23:63:01:
57:eb:7e:57:f8:a1:b5:fd:55:57:02:5f:2e:10:96:
f0:92:df:61:68:6d:56:f2:e3:1c:83:00:93:dd:3e:
73:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9B:05:B9:AF:BD:5D:2C:C6:60:00:79:F4:57:45:52:D3:85:EF:1E
X509v3 Authority Key Identifier:
keyid:00:39:F7:41:68:6D:A1:1E:79:AE:7C:5E:48:6A:A2:90:80:8C:B1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/P5sFua-9XSzGYAB59FdFUtOF7x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.67.0/24
Signature Algorithm: sha256WithRSAEncryption
08:e1:b0:ba:c1:3d:a5:41:19:22:13:c2:29:d1:9e:79:54:37:
00:df:61:93:f6:c2:3f:cc:3c:2c:44:6d:72:6a:3e:a0:c9:14:
de:13:7d:1f:ee:cd:bc:3a:84:fd:a0:04:bb:d9:d6:d5:c9:f6:
c4:2c:d9:a9:04:03:86:9e:20:e5:63:fa:d2:21:7c:a9:56:82:
ab:2d:5e:e5:72:ed:c0:89:bb:7f:75:cd:78:e9:dd:4e:66:3d:
9e:34:a8:0e:ec:71:12:72:e4:e8:5a:cf:4f:6a:3d:cc:42:7e:
f3:c4:0b:0d:9e:8c:ca:cf:f1:9f:83:63:ac:d8:15:ad:c1:08:
73:49:d8:33:dd:7e:70:6a:bc:42:05:90:94:52:9a:77:3a:a7:
67:51:c7:15:f6:fb:24:7d:cf:3c:ec:69:66:b5:f4:ee:e4:fc:
e6:0c:d8:01:f9:10:53:41:29:f6:c7:30:d3:09:24:f9:e8:df:
1f:47:30:96:88:b8:bc:94:45:24:c3:a0:dc:0c:d8:96:0e:07:
11:fb:ce:9a:56:df:1c:e3:0b:71:81:f7:0a:a8:5a:15:43:73:
60:ae:bf:f3:4f:30:8c:05:a0:ee:d3:57:a5:24:36:74:f7:f5:
2c:f7:6a:79:97:70:d4:4a:02:0e:ef:e4:c4:67:e6:fb:0d:b4:
f5:1c:98:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:59:43 2025 by rpki-client