Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/E51nOmohcRVbX5SKvu3VWWlOTzw.roa
File: E51nOmohcRVbX5SKvu3VWWlOTzw.roa (raw, json)
Hash identifier: 3iTNjhqZJj7n/HoeeV8SrM0I7Ys7xmOYMEGLqvmVrPc=
Subject key identifier: 13:9D:67:3A:6A:21:71:15:5B:5F:94:8A:BE:ED:D5:59:69:4E:4F:3C
Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Certificate serial: 018CC8709613AD09530D6635C89116182BC7
Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/E51nOmohcRVbX5SKvu3VWWlOTzw.roa
Signing time: Tue 02 Jan 2024 04:31:10 +0000
ROA not before: Tue 02 Jan 2024 04:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208062
IP address blocks: 149.3.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:96:13:ad:09:53:0d:66:35:c8:91:16:18:2b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Validity
Not Before: Jan 2 04:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=139d673a6a2171155b5f948abeedd559694e4f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:12:11:83:74:1f:69:e9:10:07:68:6f:3e:
99:0f:90:e2:b6:7a:30:8b:66:a4:75:9a:9c:e5:7b:
a5:a4:8a:ab:6e:ad:6e:5a:7c:19:78:6a:9a:78:c7:
91:5b:25:1e:e4:c8:2d:ff:b5:ee:8e:21:4f:51:57:
97:d5:74:22:74:20:df:81:f1:76:b7:52:81:ef:f3:
e0:95:89:dd:c4:bb:34:d3:7c:00:4b:38:67:60:50:
4d:b5:67:32:b2:f0:eb:d5:de:fa:ee:e5:7f:70:d4:
44:79:fa:85:a9:75:bc:ed:22:dd:af:ea:63:04:ca:
db:9c:da:c5:b7:fe:d3:56:4c:56:71:c3:57:45:fa:
38:6e:e5:e6:e0:8a:b7:2f:79:e6:3f:fa:77:df:0c:
3f:9b:8e:80:0f:f4:45:46:05:18:a1:50:23:96:e0:
d2:84:86:1a:b3:1b:0e:65:cb:e7:14:6c:4b:53:33:
c5:b5:c0:2c:c3:8d:8d:4a:fd:c1:44:39:8d:f8:55:
6a:2c:c3:f0:70:97:38:2c:95:a7:21:f3:6e:28:10:
07:8c:1c:f8:4e:b8:a0:5e:5d:79:be:ba:de:9b:b9:
df:51:87:df:83:05:43:7d:71:d7:66:c9:06:bf:29:
eb:61:15:29:53:6b:02:14:43:0a:1c:97:c4:cd:54:
3f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9D:67:3A:6A:21:71:15:5B:5F:94:8A:BE:ED:D5:59:69:4E:4F:3C
X509v3 Authority Key Identifier:
keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/E51nOmohcRVbX5SKvu3VWWlOTzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.3.188.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:23:2e:0a:c5:9a:f3:5e:ab:4f:2a:39:c3:9e:26:16:76:f2:
cb:14:18:15:ba:b3:53:cb:f5:95:0e:2b:60:8e:cf:8f:df:7c:
32:e9:5a:2e:98:6f:26:44:bc:55:8c:07:35:ba:26:70:d8:41:
4f:0d:98:96:0e:ea:0c:44:f0:a1:da:42:fa:4a:7b:dd:cb:4d:
5b:f9:41:12:47:5a:b9:a9:f6:69:db:b7:00:a4:2d:4f:bc:1b:
87:35:f0:5c:2b:87:73:f7:f8:4d:3d:5c:8d:ad:83:96:f5:11:
30:34:a1:cb:3a:6e:ee:61:ff:9c:ef:c0:b5:31:1c:47:c7:fc:
a6:a2:31:40:46:76:49:49:d7:e3:3d:ab:f0:e7:af:09:a8:68:
33:05:3c:54:79:11:10:0c:a8:02:d0:49:c1:af:d5:3e:15:05:
2f:f7:93:ab:aa:ad:3c:4a:f8:7b:71:e0:ed:fa:38:1b:87:33:
87:cc:65:01:07:27:05:8c:e2:7f:38:60:bb:fd:6b:79:c4:07:
1c:c2:f9:09:d2:be:57:a4:f5:a5:4c:6c:de:fa:1b:2d:99:64:
e5:ec:da:e0:67:49:89:55:a6:2e:ab:eb:03:a8:54:0b:3b:57:
fd:75:b3:3c:21:ff:71:7e:b0:c8:05:e1:18:60:fc:7c:a7:64:
97:5f:b7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:15 2025 by rpki-client