Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/P0mAuqqCAXSFXvbQSHhqIu5GwIo.roa
File: P0mAuqqCAXSFXvbQSHhqIu5GwIo.roa (raw, json)
Hash identifier: a9Ooo1f3eQ9hB5f1pYWAHugfSYa/x8rvs2u3Q2YlTDI=
Subject key identifier: 3F:49:80:BA:AA:82:01:74:85:5E:F6:D0:48:78:6A:22:EE:46:C0:8A
Certificate issuer: /CN=1517d4f58af84f50ce42f13293ede4aff12d173f
Certificate serial: 018CC7935C20156E200CE34B85AF25593D68
Authority key identifier: 15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/P0mAuqqCAXSFXvbQSHhqIu5GwIo.roa
Signing time: Tue 02 Jan 2024 00:29:32 +0000
ROA not before: Tue 02 Jan 2024 00:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210595
IP address blocks: 37.8.160.0/20 maxlen: 22
Validation: Failed, certificate revoked on Mon 08 Apr 2024 08:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:5c:20:15:6e:20:0c:e3:4b:85:af:25:59:3d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1517d4f58af84f50ce42f13293ede4aff12d173f
Validity
Not Before: Jan 2 00:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f4980baaa820174855ef6d048786a22ee46c08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e4:18:f0:f5:65:ed:ad:c2:4c:77:bd:8f:b7:
4b:28:cf:e0:fd:c8:6a:f3:e7:ba:5c:94:24:b8:05:
56:bc:35:b0:58:35:82:0f:b9:13:ed:90:b6:91:5e:
21:be:ca:de:5b:7a:a5:b3:6f:64:da:0b:6b:bb:47:
c7:01:6c:c4:c2:52:1e:8d:43:25:63:93:cf:37:91:
18:28:25:86:33:00:66:bb:05:bf:aa:71:63:b7:6b:
e4:51:1e:42:87:1b:fc:8e:c3:08:ba:4d:7f:c3:a3:
3a:b1:33:86:53:2a:9d:f1:99:be:08:c5:bc:37:72:
d3:43:fd:76:26:26:41:8c:5b:f5:0d:3c:52:eb:04:
13:7b:66:1d:13:1b:3a:d2:ac:8a:be:97:c6:3e:c8:
3c:3f:76:a8:79:86:9d:b4:3c:7b:c9:0c:50:13:c2:
2f:2a:42:34:df:52:24:fa:01:10:46:25:55:c2:f8:
84:70:a7:1b:91:00:46:cb:77:b0:82:aa:be:6c:e3:
c9:89:7f:9e:47:e9:61:6b:c0:4b:2d:89:22:32:69:
7a:7e:04:cb:73:99:f5:76:9d:63:e1:db:21:c2:f5:
ab:4b:06:1d:8e:c9:bb:27:03:18:02:c3:62:d9:41:
bf:68:57:4c:60:31:82:c8:49:5c:db:97:46:b8:f2:
59:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:49:80:BA:AA:82:01:74:85:5E:F6:D0:48:78:6A:22:EE:46:C0:8A
X509v3 Authority Key Identifier:
keyid:15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/P0mAuqqCAXSFXvbQSHhqIu5GwIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.8.160.0/20
Signature Algorithm: sha256WithRSAEncryption
5a:c2:3b:1f:a9:49:e3:d5:c4:b8:68:c6:c1:20:aa:76:5c:81:
d7:75:71:80:33:4f:5c:b8:6b:26:76:26:d0:38:18:cf:5b:0a:
ad:9d:cf:f4:57:5d:94:bd:b2:9f:7a:4e:ce:fc:31:39:ff:ea:
19:32:64:40:6d:8b:eb:08:56:5f:2e:69:d5:76:72:01:d1:eb:
51:e1:54:13:ed:2c:2e:73:4a:61:fc:ed:ef:f0:a7:1d:a7:21:
9d:ed:e9:d1:37:03:8e:95:47:ef:ce:d3:5b:ba:52:4a:a1:b2:
f2:cb:2e:bb:34:b1:e8:23:be:9a:34:54:21:c5:8e:fe:7f:e3:
9e:c9:53:55:fe:57:f4:f4:aa:55:08:ac:b2:49:8e:15:c0:da:
2e:08:ec:8a:34:b4:4b:6a:7a:bf:6a:73:ad:9d:f1:ac:d8:a2:
64:b8:cd:89:41:cb:e9:d8:08:10:d1:71:49:70:c1:d4:2c:1b:
da:b7:09:62:0c:67:b6:69:dd:38:e6:4a:f9:a3:88:78:49:5c:
92:17:fa:77:cf:75:96:7e:ba:1a:ad:fe:b8:06:dd:63:ea:bd:
55:b9:ca:cc:65:40:8c:09:33:83:ce:3c:e8:ea:67:90:0e:fc:
04:34:63:0a:fe:30:82:97:98:75:6f:e9:53:42:31:d7:59:61:
64:d1:f7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:33:26 2025 by rpki-client