Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/aBbx5cxQU7q__I8EWrYjtazyQxk.roa
File: aBbx5cxQU7q__I8EWrYjtazyQxk.roa (raw, json)
Hash identifier: TdvgF9jEg+GJiYk/Apmp5Nc50tFBJIY+yevbI7C+iHo=
Subject key identifier: 68:16:F1:E5:CC:50:53:BA:BF:FC:8F:04:5A:B6:23:B5:AC:F2:43:19
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 01932EEB4263306E85801CD3D9DAF23862FB
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/aBbx5cxQU7q__I8EWrYjtazyQxk.roa
Signing time: Fri 15 Nov 2024 08:23:10 +0000
ROA not before: Fri 15 Nov 2024 08:23:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 64.190.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Nov 2024 08:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2e:eb:42:63:30:6e:85:80:1c:d3:d9:da:f2:38:62:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Nov 15 08:23:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6816f1e5cc5053babffc8f045ab623b5acf24319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b4:d3:ca:3f:41:da:2b:50:e5:b4:54:dd:a4:
b5:a9:3f:08:28:b9:69:3d:91:81:5e:57:c5:73:bc:
12:52:d1:54:b9:df:20:03:a0:92:fd:1c:0a:5b:a3:
1f:01:18:4a:bc:4c:84:d2:62:70:85:3c:9e:91:ef:
0a:7c:3f:8f:39:1a:5d:da:e6:05:b7:22:16:4b:79:
02:34:51:3c:46:cd:a8:3a:ee:f7:71:1e:ae:ba:b0:
16:cf:b4:f3:a8:b3:ae:2c:28:48:13:67:99:28:cd:
14:30:6d:70:6c:8a:d4:43:4d:4b:82:69:4a:fd:26:
0b:3a:f9:0c:ce:29:47:cc:3b:68:05:87:f9:aa:5d:
66:13:e7:10:ea:58:5b:71:23:a5:5e:1a:ce:18:fe:
b5:71:88:93:ce:3d:97:02:c3:8b:51:7f:3a:0e:97:
02:39:a8:67:c4:95:58:b9:b0:12:51:e1:e0:91:4b:
84:4e:2a:7a:35:67:93:d0:10:23:40:e0:50:a2:cd:
3b:09:b3:76:3f:d5:ee:d1:7d:b4:6e:e9:5c:1b:f2:
75:aa:82:9d:cb:8d:f2:65:45:99:43:13:f0:16:17:
ef:d1:a2:1c:8b:cb:4c:08:f1:a3:37:c1:ad:76:32:
c6:4e:23:39:e5:aa:3c:c2:cd:7a:72:3e:47:91:ff:
c1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:16:F1:E5:CC:50:53:BA:BF:FC:8F:04:5A:B6:23:B5:AC:F2:43:19
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/aBbx5cxQU7q__I8EWrYjtazyQxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.190.139.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:f0:c4:ec:f2:20:45:2d:73:cc:26:2e:dc:4f:67:d4:f7:17:
14:dd:db:7b:e1:89:d3:b5:78:ef:fb:c9:3c:c5:4d:d8:a2:b4:
05:10:5b:68:f0:e7:5a:97:ff:2b:6b:3f:d2:4f:87:47:b2:a8:
f8:06:c6:e5:64:5b:fc:c7:a9:2e:74:5b:d8:ac:c6:a5:06:90:
b2:6e:36:5e:bc:62:3e:d7:ab:6d:92:f2:db:3e:c4:1b:69:5f:
99:6b:2e:e0:7a:05:09:b9:28:68:75:09:03:16:99:ff:47:8a:
92:2c:95:e8:47:9f:9b:72:9f:bf:35:fe:2a:f2:97:16:64:54:
41:35:2b:4e:55:18:2c:95:a1:f5:a4:d7:18:8a:c8:c7:71:6d:
78:27:36:4e:a4:f0:9e:3f:9d:b2:0c:0e:59:eb:60:57:e3:65:
cc:ec:f3:a3:09:1f:bc:32:51:0e:3d:2a:66:62:cd:d9:62:f5:
00:4e:f9:6f:91:f5:9d:d9:32:01:69:cd:93:5c:27:e1:24:f1:
ff:75:96:cf:01:4a:1f:cc:e2:e8:fa:4f:66:a0:42:30:a1:a4:
97:23:2d:fa:b8:a0:58:fc:af:d3:2f:a4:fe:2a:51:19:54:22:
91:97:2a:b3:6e:cd:e8:58:58:6d:46:2b:a3:77:f7:7d:35:65:
5b:6d:1a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:10 2025 by rpki-client