Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/TS8vfbj0bu-jnyBjz__LVU11vY0.roa
File: TS8vfbj0bu-jnyBjz__LVU11vY0.roa (raw, json)
Hash identifier: P6ukq0j5TeUebpaW9jtR0xJaPyLYefhjkJgd6I7PqfM=
Subject key identifier: 4D:2F:2F:7D:B8:F4:6E:EF:A3:9F:20:63:CF:FF:CB:55:4D:75:BD:8D
Certificate issuer: /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Certificate serial: 01933F260EADCFF329F9160FEB9020F5B50B
Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/TS8vfbj0bu-jnyBjz__LVU11vY0.roa
Signing time: Mon 18 Nov 2024 12:01:18 +0000
ROA not before: Mon 18 Nov 2024 12:01:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 195.14.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Dec 2024 09:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3f:26:0e:ad:cf:f3:29:f9:16:0f:eb:90:20:f5:b5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Validity
Not Before: Nov 18 12:01:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d2f2f7db8f46eefa39f2063cfffcb554d75bd8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:90:0b:06:37:00:7e:f5:ce:73:89:e9:d6:
30:41:cc:83:3c:48:7e:d3:3c:cd:3a:6a:be:11:f3:
4a:f3:aa:a9:11:e8:b2:22:26:45:61:f1:7b:7b:a8:
a6:8a:c1:d3:9c:3d:28:22:83:c0:1e:03:f4:91:02:
d9:be:09:52:ae:15:8b:d1:9d:a5:87:38:77:f8:c0:
57:9e:9a:9e:25:12:8f:df:49:b7:62:72:91:77:22:
9f:7c:77:de:c4:b4:21:2e:76:62:09:ef:1c:2b:e0:
00:5c:24:2a:2c:99:12:2f:ee:5d:77:30:f8:f3:cd:
30:7c:04:1e:4f:c8:66:de:10:aa:6c:40:fa:4d:8c:
79:ec:fa:d0:5a:41:1a:de:46:41:5c:36:fa:b3:4a:
e7:12:f8:30:b5:d6:6e:39:d0:93:8b:eb:72:4d:43:
58:20:81:f4:fc:1e:66:51:2d:74:42:f9:40:ad:16:
c3:55:34:35:73:29:d9:9c:60:8a:67:a5:af:2a:5f:
45:bc:45:cf:7b:2c:82:54:8a:7d:cc:e3:3d:a7:01:
64:a7:3c:af:5e:96:3d:1a:3b:64:ac:47:e9:4e:8e:
ac:7c:4c:6f:ec:5d:3b:87:01:c7:65:b1:ce:67:39:
a5:03:4b:dd:17:89:66:c9:ea:b3:83:89:f6:40:55:
e5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2F:2F:7D:B8:F4:6E:EF:A3:9F:20:63:CF:FF:CB:55:4D:75:BD:8D
X509v3 Authority Key Identifier:
keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/TS8vfbj0bu-jnyBjz__LVU11vY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.14.94.0/24
Signature Algorithm: sha256WithRSAEncryption
24:4c:41:61:9a:41:a5:24:2b:51:c2:be:9f:5d:ae:24:0f:53:
8e:d6:ea:fd:16:39:80:d1:a6:d6:35:5b:2e:70:62:05:12:d3:
82:27:fa:7f:86:5a:56:da:01:49:30:16:7a:d8:95:8b:ac:bd:
f7:82:0c:c7:2b:62:69:21:a9:71:64:8a:1f:f9:84:4c:5d:6a:
f2:60:06:a4:32:6d:a8:ba:22:ff:f2:ba:6d:dd:b3:fb:52:b8:
2e:c7:ce:d0:00:0c:83:e5:89:91:74:8f:09:01:dc:2b:45:cf:
cb:af:1c:2e:94:70:46:2c:a4:8a:81:4a:3c:de:c4:24:64:51:
d3:1c:cd:58:e3:aa:4c:aa:f5:77:39:82:86:65:6f:0b:3a:72:
12:8d:3b:5d:0e:eb:59:4d:b8:0f:0c:9b:ed:74:2e:4b:b9:d8:
d7:cb:75:29:e1:b2:d7:67:e4:b7:e0:4c:36:0e:8f:5f:c0:44:
c6:a6:82:9e:a3:9c:45:35:9b:94:7e:2f:b4:50:9c:f5:e2:07:
6e:df:93:60:d6:ac:b8:a1:17:a7:3d:70:25:99:5b:bc:b5:88:
fc:46:3e:45:f5:8a:a3:c6:57:9a:b2:24:4e:ac:c7:9c:ca:ef:
45:9f:6d:2b:5d:ac:d0:27:89:6f:8d:7b:89:18:97:59:3f:8e:
1e:fd:0b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:49 2025 by rpki-client