Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/ITd58RFO0qQCEoLcHtpidJveyQM.roa
File: ITd58RFO0qQCEoLcHtpidJveyQM.roa (raw, json)
Hash identifier: tqolXbTW5Xz7XahWdmYsVeJ8K8cUlEG4wgr/R8vv8j4=
Subject key identifier: 21:37:79:F1:11:4E:D2:A4:02:12:82:DC:1E:DA:62:74:9B:DE:C9:03
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 01941F8C5F8288A6CCEC60BB97031445273A
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/ITd58RFO0qQCEoLcHtpidJveyQM.roa
Signing time: Wed 01 Jan 2025 01:48:00 +0000
ROA not before: Wed 01 Jan 2025 01:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 64.190.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Jan 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5f:82:88:a6:cc:ec:60:bb:97:03:14:45:27:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Jan 1 01:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=213779f1114ed2a4021282dc1eda62749bdec903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b6:a6:3d:fb:7b:7e:74:91:f0:73:e2:42:9d:
01:50:d2:61:27:3d:34:ed:9c:98:42:e1:47:85:0d:
6e:07:1a:90:bf:a7:19:6e:62:06:7b:fb:ad:e6:c9:
1b:db:dc:3b:c4:bc:e2:e8:5d:c9:23:1d:8c:e3:5c:
75:fe:98:8f:4c:22:c2:ae:0d:00:9c:50:6a:ea:68:
9e:4b:ee:17:32:a7:8e:da:e1:85:d3:d4:2c:96:0a:
80:60:f5:56:fd:88:bc:a6:d7:e6:d2:7a:60:a3:b1:
70:dc:b5:87:ec:cb:95:5b:1f:69:d6:b1:63:af:4f:
3d:62:6f:0d:03:5a:be:e4:dd:68:66:f2:1f:4e:b8:
ac:0e:e6:36:aa:ce:f1:9f:5a:b9:19:79:1b:96:e4:
3a:41:20:37:bd:e8:bd:05:6a:e5:87:d2:05:c6:a1:
4b:83:4a:00:79:74:75:1b:f9:6e:73:9f:14:ca:7e:
53:51:cb:74:b0:dc:c9:59:9d:71:03:ba:67:95:52:
0b:9a:9a:cd:53:af:ce:50:7d:89:4f:f9:88:3a:25:
9d:2d:f3:38:5d:e2:2c:e7:2d:33:ed:d5:0d:2d:f2:
f8:d4:d1:70:e5:18:aa:6c:9f:44:3f:30:a4:d4:d1:
2c:58:36:d5:bd:ed:c3:e7:97:27:4d:e6:4b:fd:76:
f3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:37:79:F1:11:4E:D2:A4:02:12:82:DC:1E:DA:62:74:9B:DE:C9:03
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/ITd58RFO0qQCEoLcHtpidJveyQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.190.139.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:d8:fc:a8:9e:19:1c:b2:f2:40:31:dd:e5:37:40:88:e8:ed:
6b:e3:b6:00:1b:c6:f9:c7:38:bf:cd:26:bf:5f:c7:ed:ee:b4:
86:24:34:84:59:19:1b:2e:cf:12:80:9c:f6:45:58:53:cb:e7:
56:07:0d:88:f8:a4:60:bd:d0:e7:0d:d8:e0:86:ef:52:fa:06:
9d:e1:3a:f9:62:8e:10:ef:82:fe:48:7e:b6:a1:e8:e2:17:62:
b6:9f:ad:47:90:eb:32:10:75:1c:7a:7b:68:d7:93:80:d0:64:
85:4c:5a:21:2c:e6:fb:64:16:a2:da:89:2c:8e:03:bd:8b:03:
77:68:0b:05:c2:60:7c:a9:ab:1d:e1:5e:1c:00:75:8a:01:a7:
c3:ae:b4:5e:5c:7b:2f:5a:82:a8:5f:a3:c2:d0:a7:53:de:bc:
99:23:2a:d3:fe:2b:ed:0b:5d:1c:37:76:29:3b:92:14:4f:9a:
08:e9:8f:e8:49:80:28:8f:10:17:8d:8b:9d:3e:c4:68:a3:8c:
60:df:ed:10:04:69:b9:a5:c9:0a:b0:3e:6d:49:26:42:f5:20:
df:2a:30:9f:9f:45:be:4b:d6:23:ee:93:58:cd:30:d6:93:09:
97:d2:35:00:a4:eb:64:ae:ed:71:71:df:9b:0a:0b:76:c8:d5:
7f:3a:f7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:17:13 2025 by rpki-client