Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/Sq9GOR5WTJROQ5DItaSAWOx6Ozo.roa
File: Sq9GOR5WTJROQ5DItaSAWOx6Ozo.roa (raw, json)
Hash identifier: e2S6wl6E8kylNsgcZ7GkcN4azPCOZsyIfv/29XMV2nA=
Subject key identifier: 4A:AF:46:39:1E:56:4C:94:4E:43:90:C8:B5:A4:80:58:EC:7A:3B:3A
Certificate issuer: /CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
Certificate serial: 019325836BCD1E2F0298B152FC164C7708AE
Authority key identifier: 32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/Sq9GOR5WTJROQ5DItaSAWOx6Ozo.roa
Signing time: Wed 13 Nov 2024 12:33:09 +0000
ROA not before: Wed 13 Nov 2024 12:33:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 87.251.20.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:25:83:6b:cd:1e:2f:02:98:b1:52:fc:16:4c:77:08:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
Validity
Not Before: Nov 13 12:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4aaf46391e564c944e4390c8b5a48058ec7a3b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:52:23:77:2e:e6:de:c7:79:27:3a:a6:3b:f0:
8b:f1:18:fd:33:6f:ad:a4:b0:88:ed:91:66:d2:35:
a6:e1:91:5b:64:f3:14:3b:94:05:11:f0:7e:0d:b2:
59:b4:ae:79:64:88:a1:3a:25:8b:45:31:2a:23:50:
eb:7f:b7:d4:2b:05:b8:92:56:06:05:7e:2d:3c:6e:
40:82:b4:77:8d:ac:2c:86:3e:8f:51:64:a3:a3:be:
37:d4:ac:f3:5c:f6:df:c8:16:65:1c:04:df:55:60:
b3:a3:2b:77:c9:e6:8c:d2:cc:2e:eb:f2:87:1b:36:
64:bd:97:8a:9c:6c:e1:14:a5:3d:a7:a8:e7:90:bc:
b7:e5:39:77:36:05:42:31:8c:e6:8a:7c:40:48:35:
74:ea:d4:4b:dc:e2:3a:c9:97:8c:9b:59:51:17:8c:
87:f5:05:6c:a3:7d:35:7b:a3:bd:82:5b:65:3b:11:
f6:ae:0b:61:4a:8e:14:e3:e9:f1:d9:83:19:d9:e3:
3a:71:46:90:5f:4d:5c:b0:1d:cb:13:5d:64:2d:fe:
8a:66:53:7d:dd:54:e7:dc:f2:91:88:9c:d8:fc:0d:
a1:e9:ea:f0:1f:46:f5:bb:f0:4d:d8:70:6a:47:e9:
83:35:b9:cc:0d:66:93:ad:51:89:5f:3f:bf:61:f7:
b1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AF:46:39:1E:56:4C:94:4E:43:90:C8:B5:A4:80:58:EC:7A:3B:3A
X509v3 Authority Key Identifier:
keyid:32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/Sq9GOR5WTJROQ5DItaSAWOx6Ozo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.20.0/23
Signature Algorithm: sha256WithRSAEncryption
71:d1:54:b8:01:84:1e:9b:5b:84:e8:13:fa:44:3e:cf:9e:c7:
9a:c7:2b:30:31:0c:bf:5e:0b:35:c0:ec:24:c7:04:ec:c2:6e:
df:0b:dd:b0:7f:a7:8d:11:db:12:95:d7:8a:7d:8f:50:bf:4d:
b4:6b:c9:e1:55:92:e0:57:12:67:71:1c:4e:e1:86:35:26:6b:
57:f2:14:64:0b:17:81:99:51:e0:60:de:a8:b3:9a:56:fb:8a:
2c:ae:02:ac:cf:da:ca:49:95:3e:31:a9:ba:33:a3:d1:94:60:
5b:1a:a3:52:d0:89:a0:36:24:6b:0b:ac:48:1c:f2:5d:93:98:
23:b8:22:c5:1c:aa:bd:19:21:be:40:23:24:95:16:9f:1c:b5:
d2:d8:f3:32:e3:10:41:44:9c:70:61:bb:02:f8:1a:a0:a8:4c:
fe:a6:ea:17:df:76:4a:80:2d:ca:d2:1c:e8:1f:32:62:fe:b5:
bf:cb:0e:12:e5:91:13:4a:68:39:79:55:96:17:70:df:fc:01:
db:75:bf:89:f5:a9:8b:8c:c4:3f:a9:18:de:2d:dc:23:63:b0:
4b:d7:a1:37:f4:e7:51:d4:16:1a:1f:c4:6e:51:3e:3c:c1:c1:
8e:79:74:6a:e0:ad:9f:7c:ea:01:4c:d3:33:23:4a:ea:f1:24:
19:c5:bc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:16 2025 by rpki-client