Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/P6I4LIe2olUf3NjJXkfLNSBas94.roa
File: P6I4LIe2olUf3NjJXkfLNSBas94.roa (raw, json)
Hash identifier: Hv9k3pAhVSyxosbAH7guzz2BgWc0lXLc60uuV+niuQE=
Subject key identifier: 3F:A2:38:2C:87:B6:A2:55:1F:DC:D8:C9:5E:47:CB:35:20:5A:B3:DE
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018CC9BCBFC97BC1E3BF79772DB3FB2A226F
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/P6I4LIe2olUf3NjJXkfLNSBas94.roa
Signing time: Tue 02 Jan 2024 10:33:59 +0000
ROA not before: Tue 02 Jan 2024 10:33:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206046
IP address blocks: 195.55.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:bf:c9:7b:c1:e3:bf:79:77:2d:b3:fb:2a:22:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 2 10:33:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fa2382c87b6a2551fdcd8c95e47cb35205ab3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:95:91:16:20:45:eb:be:3d:ff:dd:7d:7c:4a:
83:3c:4f:d3:77:43:99:24:9b:7a:41:69:62:f2:e4:
a7:cd:e3:98:cb:2b:5a:4e:b2:f9:14:1b:89:61:99:
e8:bd:71:da:d1:29:11:ef:64:2c:e9:1a:1f:9d:98:
72:2e:9e:0f:d6:51:67:75:7a:25:1a:62:0a:84:f1:
f5:85:c9:a7:d7:39:03:63:68:58:6e:ed:87:31:28:
c4:0e:9c:38:0c:37:7e:e5:9d:43:ef:8a:a0:51:fd:
bb:0d:a6:da:25:47:d6:6d:71:e1:1c:70:79:62:db:
18:63:2d:a3:97:01:79:47:b6:21:e5:74:fb:2e:4d:
cd:75:78:f4:c3:23:b4:87:93:9d:54:cf:d1:cd:f5:
29:68:e3:10:79:6f:cb:59:86:37:d7:68:52:95:2b:
aa:3d:69:13:40:62:5a:03:27:be:ac:a9:88:9d:2f:
56:f8:51:58:0e:41:aa:c8:44:6e:03:e1:a3:a3:fd:
4d:0f:45:6d:10:84:a4:53:ea:fd:b1:b9:4f:e5:c9:
71:44:34:34:0b:52:2b:8d:5b:27:46:4d:7c:f8:a5:
f4:2e:e6:f4:76:64:fa:85:d9:8a:77:27:43:b7:77:
08:bf:f3:c0:23:fa:cd:53:b5:c6:fa:90:48:e0:0f:
7d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A2:38:2C:87:B6:A2:55:1F:DC:D8:C9:5E:47:CB:35:20:5A:B3:DE
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/P6I4LIe2olUf3NjJXkfLNSBas94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.55.44.0/24
Signature Algorithm: sha256WithRSAEncryption
05:76:01:76:e9:de:1b:10:fd:59:15:54:48:ff:ce:f1:68:9f:
45:4c:9d:97:77:f0:29:8c:7f:a9:6c:cc:3e:b7:9b:b1:20:af:
c5:49:d9:30:b6:3d:2e:ef:d6:87:e2:10:e1:1f:79:10:3f:0f:
d4:ca:36:d7:79:62:09:99:bf:f6:6f:d1:2b:15:4b:6a:11:27:
2f:a5:d8:17:8e:27:89:7a:f7:99:eb:45:54:da:9a:1c:88:c3:
26:21:53:94:62:5c:30:f5:f7:3d:59:0f:85:c3:e6:08:5c:62:
f6:68:35:16:46:d2:ff:81:89:64:2b:54:88:ac:c6:0f:97:6c:
e8:75:bf:5c:85:56:9b:54:da:c7:4f:8b:42:8e:eb:fa:39:c7:
ef:8a:a0:a7:46:3c:83:3b:a0:67:94:43:b3:36:fe:9c:23:ae:
84:bb:31:52:cd:0e:86:ce:64:78:58:fb:74:b9:b9:f9:67:99:
f7:32:c5:e1:c8:be:2c:17:99:4d:13:d0:49:78:30:f8:d7:c8:
55:78:1e:d6:c1:ec:c2:60:02:8f:d3:ad:42:0d:e8:47:82:44:
15:62:d7:e8:32:df:46:92:f1:d2:f4:48:e8:22:28:a6:4c:cd:
6b:1d:09:0e:38:92:93:d3:2f:f1:cb:dc:37:9f:6f:c9:7d:6c:
5f:27:d8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:59:42 2025 by rpki-client