Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/srdVhYYK0zkHbXKpX3apk3myp54.roa
File: srdVhYYK0zkHbXKpX3apk3myp54.roa (raw, json)
Hash identifier: CCo8sI0Dti/Pvf1pxOTQrmVpoyCXzUGHbGzWzg4KIAE=
Subject key identifier: B2:B7:55:85:86:0A:D3:39:07:6D:72:A9:5F:76:A9:93:79:B2:A7:9E
Certificate issuer: /CN=c64d2286b5cc7be42f8aebaeb6aae57e7ce7da2b
Certificate serial: 018CC94D72A5995D54DADC1D32950A019ABD
Authority key identifier: C6:4D:22:86:B5:CC:7B:E4:2F:8A:EB:AE:B6:AA:E5:7E:7C:E7:DA:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/srdVhYYK0zkHbXKpX3apk3myp54.roa
Signing time: Tue 02 Jan 2024 08:32:25 +0000
ROA not before: Tue 02 Jan 2024 08:32:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48897
IP address blocks: 195.88.72.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:72:a5:99:5d:54:da:dc:1d:32:95:0a:01:9a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64d2286b5cc7be42f8aebaeb6aae57e7ce7da2b
Validity
Not Before: Jan 2 08:32:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2b75585860ad339076d72a95f76a99379b2a79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:96:a5:62:98:48:3e:00:e0:16:b7:3c:43:7a:
0e:40:08:2e:01:d4:de:25:a2:95:79:d3:c8:be:09:
6c:9c:51:9b:1e:d2:02:ed:13:b1:48:2f:b5:cc:42:
98:d5:27:59:d0:1e:4d:22:e9:3e:4a:85:f1:00:10:
42:10:87:52:dc:2e:95:c2:0d:1b:f5:49:18:17:dd:
0a:65:98:a8:32:8d:75:fe:51:72:c1:eb:21:bc:be:
16:3a:16:5f:ef:48:83:3c:eb:54:05:d0:c1:85:1f:
00:80:ed:c3:c2:72:67:74:0f:65:54:49:52:97:be:
a9:4f:ca:81:a1:40:92:b2:ea:87:0c:3a:28:48:56:
20:43:17:85:c5:e0:ff:19:9f:c0:48:c3:8e:dc:cb:
86:93:b0:bc:7b:ee:c3:4d:a3:83:0a:5c:2a:18:7c:
1d:ee:d9:f6:a1:6d:e8:46:77:16:9d:66:27:20:60:
46:df:5f:3a:c0:ec:a7:35:e4:fe:ae:02:e2:c0:70:
36:d2:cc:05:11:79:9f:6f:b5:36:05:13:c6:b5:33:
ab:43:3e:4a:fe:ed:64:15:c9:15:97:78:88:d4:8e:
cd:a3:f0:6e:21:4c:6c:7c:c5:be:4a:62:84:12:5e:
7b:b1:e4:ae:6e:8b:9e:bb:0b:af:6c:72:b5:cc:ee:
75:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B7:55:85:86:0A:D3:39:07:6D:72:A9:5F:76:A9:93:79:B2:A7:9E
X509v3 Authority Key Identifier:
keyid:C6:4D:22:86:B5:CC:7B:E4:2F:8A:EB:AE:B6:AA:E5:7E:7C:E7:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/srdVhYYK0zkHbXKpX3apk3myp54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.72.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:5e:36:9f:3f:72:59:58:72:5f:4c:96:e9:98:74:47:27:82:
6b:05:a6:8a:d6:8d:73:11:35:77:52:0d:22:94:0d:b1:a1:ae:
28:53:fb:3b:c6:10:d1:df:6a:86:4b:73:a0:fb:55:fb:64:ce:
b3:ba:ca:47:63:f9:db:48:46:e0:4f:74:ac:29:0e:91:13:fa:
81:c1:a0:36:f2:3d:7a:ff:80:43:81:f2:66:e6:c8:b7:aa:8d:
18:10:dd:25:a0:a5:08:55:40:49:37:09:6a:c8:78:0f:c8:57:
e7:1c:60:ee:b0:f0:c0:a5:a3:11:0a:41:cc:ea:7b:1f:f5:29:
ab:25:ca:da:a3:15:a9:ed:e9:e7:26:f4:47:ed:6a:ce:41:37:
be:9d:ba:51:df:91:09:48:50:07:4f:48:bb:7d:90:ae:91:21:
f8:74:a4:a4:26:d5:80:bb:85:a4:29:d2:a6:f0:f8:46:d5:49:
f5:46:c6:b6:ef:a0:83:f3:77:dd:72:f5:9d:ee:9d:f2:eb:3c:
62:39:5b:9e:14:f2:83:99:a4:29:e9:05:f6:49:2f:b4:49:fd:
82:c7:5c:3a:a0:b0:03:3f:97:62:23:05:db:53:6e:05:69:17:
b0:bb:93:0e:bd:12:f9:b4:a4:e4:43:d5:cb:80:0a:80:4f:0c:
61:3f:7c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:17:06 2025 by rpki-client