Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/qDPTVgk29Xk0BnsugNFlOgfAwkM.roa
File: qDPTVgk29Xk0BnsugNFlOgfAwkM.roa (raw, json)
Hash identifier: A3XWcI0QxX3HX1kzV9VC6XkLP1FPMYHqGY2I4T2yB5s=
Subject key identifier: A8:33:D3:56:09:36:F5:79:34:06:7B:2E:80:D1:65:3A:07:C0:C2:43
Certificate issuer: /CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Certificate serial: 018F9997A9A9D40A1250FA0339A702F544EE
Authority key identifier: 03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/qDPTVgk29Xk0BnsugNFlOgfAwkM.roa
Signing time: Tue 21 May 2024 05:20:04 +0000
ROA not before: Tue 21 May 2024 05:20:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209823
IP address blocks: 195.24.245.0/24 maxlen: 24
2a12:5541:1::/48 maxlen: 48
2a12:5541:2::/48 maxlen: 48
2a12:5541:a::/48 maxlen: 48
2a12:5541:331::/48 maxlen: 48
2a12:5542::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:99:97:a9:a9:d4:0a:12:50:fa:03:39:a7:02:f5:44:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Validity
Not Before: May 21 05:20:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a833d3560936f57934067b2e80d1653a07c0c243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:94:6b:08:1a:76:20:d2:75:5a:ab:c0:b7:0d:
82:f8:1b:61:28:98:e3:dc:80:45:cf:ef:3d:c9:d1:
30:cc:ad:b5:04:3e:ba:4a:ae:8b:1f:c5:f8:0e:67:
01:af:5a:c2:c1:82:38:a1:86:37:fc:97:08:c2:1d:
1b:d7:d8:16:ca:9a:26:f4:49:30:99:08:5a:e1:25:
3a:0c:ba:0b:58:1e:61:e7:8a:43:71:07:b5:e5:ff:
6f:6d:55:f0:bc:15:8c:86:4c:c3:cf:4c:5a:a3:d8:
94:a8:64:33:f6:b8:2e:60:b5:5b:ee:6e:64:00:2f:
8a:e3:88:21:5c:e8:3b:5a:fb:bd:ab:98:9f:08:c6:
9a:05:10:99:11:ec:99:f2:6e:4d:77:77:d3:4f:4e:
17:14:e0:f0:15:b8:88:80:8d:74:8f:62:e8:e9:52:
30:49:a5:c5:d4:b7:8f:ad:5d:42:52:17:5e:71:17:
a3:33:e2:14:97:b3:23:a0:b5:cc:69:ea:a8:3e:25:
c6:a6:9e:a2:2e:54:12:c0:c2:c1:66:26:50:df:3c:
0c:f8:0e:dc:e7:c5:fd:6c:71:2e:ae:4e:29:26:13:
5e:32:71:90:fa:12:84:06:37:a1:ee:96:aa:58:2d:
16:3b:41:77:2f:0d:92:75:a4:fa:47:96:93:0f:2e:
2c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:33:D3:56:09:36:F5:79:34:06:7B:2E:80:D1:65:3A:07:C0:C2:43
X509v3 Authority Key Identifier:
keyid:03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/qDPTVgk29Xk0BnsugNFlOgfAwkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.24.245.0/24
IPv6:
2a12:5541:1::-2a12:5541:2:ffff:ffff:ffff:ffff:ffff
2a12:5541:a::/48
2a12:5541:331::/48
2a12:5542::/32
Signature Algorithm: sha256WithRSAEncryption
53:de:6a:a9:03:a2:66:47:99:3c:04:fe:1a:4d:bd:9d:9a:f5:
af:ff:a2:fd:16:15:ce:c6:94:d1:a8:24:67:90:bb:d8:ba:7c:
0d:ac:3d:31:d2:e4:bf:1c:28:5d:aa:a3:71:c0:8a:d0:92:36:
0d:3b:c7:d6:c0:54:e3:8a:9f:12:2c:0d:f9:f5:43:78:ed:df:
f7:12:9e:ac:6e:b9:fd:06:a6:97:d5:5c:dd:82:47:f1:7e:f1:
77:36:01:2e:49:62:d4:64:09:0f:b0:a3:6e:80:b7:ae:12:14:
1f:fe:1a:4a:dc:77:b6:39:af:5e:60:10:49:08:ad:ce:a9:dc:
0e:4b:e8:0e:99:96:b9:07:5a:48:ed:09:ef:3f:1a:2c:05:f9:
b9:51:4e:d5:b7:a6:09:f9:05:da:89:9f:99:29:ee:6d:95:07:
bb:e2:b1:94:85:f2:d5:18:22:21:30:92:b2:4c:5c:4e:6a:e4:
32:0d:36:20:24:f8:03:cd:c2:1b:28:7c:28:5f:96:25:79:b5:
69:f2:76:fd:a1:08:78:11:85:67:d5:3b:8e:26:ca:c0:36:b9:
17:ee:a1:75:13:1d:28:ad:e9:15:ef:1b:a2:17:da:4f:34:61:
9d:14:b2:94:7f:d3:14:34:d8:d3:39:2f:fd:6c:9b:c1:f6:95:
a0:0c:81:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:53 2025 by rpki-client