Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/FTtV1HpuWLfLChHp-agNmzIC7vs.roa
File: FTtV1HpuWLfLChHp-agNmzIC7vs.roa (raw, json)
Hash identifier: haAWWzYbSocU/b0STn73PjG63rLAExG1qM2+KwLQwpw=
Subject key identifier: 15:3B:55:D4:7A:6E:58:B7:CB:0A:11:E9:F9:A8:0D:9B:32:02:EE:FB
Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Certificate serial: 0193CA1E97A5CF6D6559354698567AA0ECD0
Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/FTtV1HpuWLfLChHp-agNmzIC7vs.roa
Signing time: Sun 15 Dec 2024 11:40:22 +0000
ROA not before: Sun 15 Dec 2024 11:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51579
IP address blocks: 45.143.236.0/23 maxlen: 23
193.26.133.0/24 maxlen: 24
193.26.208.0/24 maxlen: 24
2a0e:e6c0:2000::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ca:1e:97:a5:cf:6d:65:59:35:46:98:56:7a:a0:ec:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Validity
Not Before: Dec 15 11:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=153b55d47a6e58b7cb0a11e9f9a80d9b3202eefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a7:19:d4:cd:66:28:1f:fe:bd:73:97:3a:98:
9d:78:e3:70:ec:9f:55:f6:16:55:a7:cb:aa:d2:53:
3e:7a:49:5d:77:b9:44:ad:f5:53:e5:62:61:a2:df:
5a:aa:f0:aa:f1:58:b8:cd:e0:57:19:d1:78:08:6e:
b3:59:c7:44:29:ae:a5:43:3d:41:ab:9e:ad:6c:1f:
da:e1:73:fe:e5:06:5c:27:93:60:77:64:35:5b:ab:
d6:69:85:fb:f6:56:08:15:0b:20:36:d4:29:b7:0e:
fe:ee:82:92:c1:a5:a3:e7:a1:2a:67:e7:f3:3a:0b:
df:af:af:43:db:f8:2f:ee:5e:2d:e5:ec:69:21:27:
17:98:21:af:a8:11:0a:17:41:d5:6b:dc:64:24:f4:
bf:5a:ca:9f:45:f8:41:a4:7a:24:65:c5:63:63:93:
12:42:df:4b:36:1b:94:d0:e2:0b:29:46:a0:34:4b:
df:5b:c3:20:3d:b3:f4:19:f5:02:09:cb:23:49:79:
bc:19:be:b2:59:b4:83:5f:e6:53:89:d9:fa:54:66:
fe:97:7e:f5:d1:4e:db:86:f3:3c:14:85:0e:d9:a0:
bf:1e:4c:ef:49:c8:36:18:19:e0:85:47:c7:c2:e4:
b2:e4:59:f2:d0:70:71:8f:6e:b7:cf:e6:41:58:1d:
e2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3B:55:D4:7A:6E:58:B7:CB:0A:11:E9:F9:A8:0D:9B:32:02:EE:FB
X509v3 Authority Key Identifier:
keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/FTtV1HpuWLfLChHp-agNmzIC7vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.236.0/23
193.26.133.0/24
193.26.208.0/24
IPv6:
2a0e:e6c0:2000::/36
Signature Algorithm: sha256WithRSAEncryption
3e:ce:82:f7:6b:cd:33:d3:30:a6:c0:72:42:a0:70:ba:43:60:
30:e7:b1:9a:90:b4:60:49:60:d3:07:10:17:c3:cf:45:23:0e:
7d:ae:ba:13:d5:68:c5:81:88:5a:27:32:d3:63:c5:f7:89:ef:
ec:54:8c:c5:8c:8c:d1:7f:70:b2:45:29:76:43:7b:4d:39:9d:
a1:07:f5:2f:db:d3:26:da:84:b4:14:61:8b:c3:03:a2:bb:88:
6a:1d:e1:f3:c5:19:67:05:88:1c:a9:39:4d:3b:be:bf:b6:83:
7d:4d:f1:23:c9:09:e1:e2:d8:b9:e6:cc:42:32:c5:3e:f6:a9:
ba:8b:c9:11:02:8f:9e:68:e2:b5:6d:16:86:bd:e7:38:1a:9f:
6c:ab:7a:db:50:81:73:5b:76:64:9d:b6:e2:f8:a8:2d:0f:7d:
d7:0e:0e:45:4c:a2:09:67:12:20:d1:ea:4c:58:6d:0d:0f:73:
32:10:5f:a3:02:28:0e:a1:76:6b:ae:72:08:3a:a7:ff:6e:f9:
71:52:89:82:d0:ae:96:c4:da:8b:d0:84:a3:58:3a:f5:6b:62:
10:18:d0:a3:ed:eb:34:c4:17:78:62:32:17:81:2c:51:4e:a6:
3c:a5:f9:05:5c:20:85:43:7d:4b:dd:1a:1f:4e:8f:11:32:fe:
76:58:87:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:16:49 2025 by rpki-client