Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/O0TVIq4MtNptLX52_APSEXSALaA.roa
File: O0TVIq4MtNptLX52_APSEXSALaA.roa (raw, json)
Hash identifier: Vw30ztJiAV5mTlsqKGbbM1xjo7Qk6itQ5Lvjh5SX3KI=
Subject key identifier: 3B:44:D5:22:AE:0C:B4:DA:6D:2D:7E:76:FC:03:D2:11:74:80:2D:A0
Certificate issuer: /CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Certificate serial: 018CCA29A3B43729258EA7B9E768A83CEF3F
Authority key identifier: 17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/O0TVIq4MtNptLX52_APSEXSALaA.roa
Signing time: Tue 02 Jan 2024 12:32:55 +0000
ROA not before: Tue 02 Jan 2024 12:32:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2200
IP address blocks: 140.77.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:a3:b4:37:29:25:8e:a7:b9:e7:68:a8:3c:ef:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Validity
Not Before: Jan 2 12:32:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b44d522ae0cb4da6d2d7e76fc03d21174802da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:07:2d:62:99:ab:34:fb:05:b1:24:ec:77:76:
7c:1a:cb:b9:5f:46:71:d1:1f:14:e2:c4:c2:5f:ec:
9d:70:cd:a5:f4:a1:95:7b:f3:10:3e:78:94:c4:d1:
4e:ea:61:0b:d9:bc:42:c0:a0:f7:23:a8:a2:a6:0b:
94:2f:99:e8:f4:68:4b:75:a2:4a:a1:f8:66:83:13:
56:4f:7e:d8:b5:aa:54:00:7d:ed:b3:b1:10:9b:a4:
4d:bd:f2:e8:c7:3b:1f:c7:25:bf:d6:d6:d9:a7:77:
74:e2:6d:1e:82:b6:66:24:d2:a4:a8:77:35:f6:77:
90:80:92:53:d7:46:f5:c0:b8:db:04:e6:93:10:56:
c9:52:10:fa:1e:61:b1:36:17:91:b4:36:58:3f:3d:
a7:a3:c9:fe:e5:cd:1a:12:a8:7a:60:f0:f4:d7:e7:
92:7e:c2:0c:86:08:7d:96:5f:c7:9a:c7:5e:de:29:
57:66:77:44:40:d0:43:19:f0:6a:0f:ba:f0:db:04:
c9:58:40:72:88:df:c8:ed:d8:81:f7:00:1e:c4:05:
e0:db:64:87:bb:a1:18:90:56:e4:ba:31:68:60:4a:
89:df:a1:9c:82:0d:28:68:20:27:b2:35:f6:19:ec:
d6:d2:cb:cb:25:96:70:8f:79:6f:91:60:54:88:8d:
67:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:44:D5:22:AE:0C:B4:DA:6D:2D:7E:76:FC:03:D2:11:74:80:2D:A0
X509v3 Authority Key Identifier:
keyid:17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/O0TVIq4MtNptLX52_APSEXSALaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.77.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3a:1a:b0:f6:1d:a5:20:3a:c8:47:85:e8:ce:d6:cb:c3:1b:bb:
91:74:d5:5d:e7:e9:02:7e:5d:a5:b3:d7:77:30:e8:e7:ab:16:
91:f6:fc:43:d3:5a:4d:3f:ea:71:04:2e:f7:d2:a7:0a:5f:5a:
d4:0a:df:6a:31:fe:5e:49:2e:e5:ed:12:51:6b:90:54:b4:b7:
af:c6:48:7a:a9:f1:d3:07:76:d1:6c:01:5f:ba:eb:f1:af:e1:
0b:11:4d:d0:28:2e:bc:f3:4e:1b:a5:d8:b0:51:b8:3c:fb:1f:
b8:62:69:88:70:61:fb:fd:ad:ff:aa:a8:01:41:a3:2a:7f:63:
57:6e:ac:be:81:65:c1:95:52:90:68:0e:3e:d0:00:3a:40:4c:
09:cd:88:84:6a:da:7a:b5:cd:29:80:94:1b:2a:e5:1c:fe:df:
35:46:95:e3:d8:6d:44:e3:c4:f5:2d:1f:4b:d7:33:f1:34:b8:
32:c8:5e:69:22:26:4e:a7:a9:7a:5d:47:0c:af:18:88:ad:aa:
10:8e:0b:99:a1:75:b4:35:3d:c4:4f:76:6d:81:42:a4:2e:b7:
e1:ba:0d:64:11:a7:4e:af:04:05:19:fb:3c:7b:4d:f8:5a:25:
f0:95:dd:f2:95:e5:d1:e3:ad:5f:b7:b3:c9:33:bd:a6:aa:aa:
c2:53:9d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 05:07:29 2025 by rpki-client