Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/4-cNPjWGd6PXRyQXQBs-AhX9TU4.roa
File: 4-cNPjWGd6PXRyQXQBs-AhX9TU4.roa (raw, json)
Hash identifier: iCxwvmwx+sJF5+eFzghJl23eCj7cGOo9pjN+lEkBX/U=
Subject key identifier: E3:E7:0D:3E:35:86:77:A3:D7:47:24:17:40:1B:3E:02:15:FD:4D:4E
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 01933E7D9FD96E0BF8669D981D164CA15EB7
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/4-cNPjWGd6PXRyQXQBs-AhX9TU4.roa
Signing time: Mon 18 Nov 2024 08:57:20 +0000
ROA not before: Mon 18 Nov 2024 08:57:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208975
IP address blocks: 194.190.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3e:7d:9f:d9:6e:0b:f8:66:9d:98:1d:16:4c:a1:5e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Nov 18 08:57:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3e70d3e358677a3d7472417401b3e0215fd4d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:5e:03:22:6e:41:c8:be:d2:fd:e9:a3:a7:
ba:ed:5d:95:57:2a:17:3b:67:6b:99:5a:cb:22:b3:
5e:91:16:f3:6a:b1:3a:65:36:9b:db:de:86:8b:46:
67:5f:f3:ed:7a:0b:3d:98:2e:0c:2c:c2:30:97:38:
e7:4e:cc:9a:9c:47:19:8a:8f:fd:22:f2:41:fe:2a:
35:d6:41:56:9a:c2:f3:7a:54:55:9d:d6:8c:a0:05:
93:88:a8:b6:40:50:21:e9:b9:05:e2:9d:6d:13:e2:
2c:87:24:e2:89:30:4f:99:0d:e1:3b:7a:ca:c0:d7:
df:64:b4:ef:72:1d:48:77:a5:55:91:77:06:8e:e2:
74:69:64:5c:f4:d4:5e:2b:c3:24:a2:b1:ab:13:9f:
b1:a5:03:a2:1a:02:f0:b3:17:f3:e7:19:bf:93:45:
19:8b:af:89:5c:49:d6:6d:ab:ae:cd:69:50:ff:5e:
fc:d1:95:6c:c3:e7:a2:c7:f6:43:ce:51:86:a6:d4:
08:5e:27:0d:f0:e8:25:ed:09:98:27:e3:93:43:01:
73:35:44:4d:2c:e1:e3:c7:1d:c1:23:a7:5e:5e:ee:
c1:e7:dd:ff:10:98:88:e4:72:3e:79:a6:b9:a1:ee:
66:47:68:3f:97:2d:a8:d7:28:d2:90:8a:7c:39:33:
8d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E7:0D:3E:35:86:77:A3:D7:47:24:17:40:1B:3E:02:15:FD:4D:4E
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/4-cNPjWGd6PXRyQXQBs-AhX9TU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.190.151.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:f0:6b:32:0f:f8:3c:dc:a0:af:f7:14:e2:f4:f7:af:7c:c1:
44:8d:30:e9:c2:b1:60:f2:2a:b9:f4:bd:18:fb:60:ed:bf:bd:
53:89:c9:0d:89:41:c7:75:3c:17:16:9c:93:ac:1a:ee:61:01:
80:d2:a9:fa:9b:67:c4:0d:5c:02:d8:63:d0:44:6a:d1:63:5b:
7d:73:09:f1:e6:9e:b1:06:d3:ea:02:02:c0:8a:a7:c5:cf:32:
92:50:91:bf:fd:dc:65:c9:d1:36:5e:96:02:47:dc:a9:f4:c7:
60:6d:ec:15:65:01:11:c0:b1:8b:96:ee:3c:42:24:09:ff:cf:
52:26:4d:f3:93:5c:15:dc:e5:7b:eb:c8:45:73:f7:99:e5:4b:
ea:cd:e5:54:1a:4f:b1:bd:88:3c:9b:de:2a:4c:6a:f5:82:b5:
e9:23:60:43:0c:31:13:7a:62:63:63:ad:56:6e:1e:ee:8d:8a:
77:62:70:75:d7:29:63:c9:6f:fc:43:d7:c7:a5:b1:10:fa:86:
d9:1a:da:ad:3b:aa:e8:d7:1d:46:e6:bd:9c:fe:b1:32:ed:78:
e3:84:37:69:bd:ff:48:10:3d:1c:53:3b:7a:ab:1c:ac:98:b3:
e3:b8:a4:9e:12:6a:1b:56:ff:aa:4d:b8:51:9e:68:56:ef:63:
66:71:e6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:39:19 2025 by rpki-client