Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/SBT7n6aYstIWvSOzaQMQYt-pzkc.roa
File: SBT7n6aYstIWvSOzaQMQYt-pzkc.roa (raw, json)
Hash identifier: mZAvl3m3azR19U5DbBz+2IhcP8WG9YnifBbiH63uBF8=
Subject key identifier: 48:14:FB:9F:A6:98:B2:D2:16:BD:23:B3:69:03:10:62:DF:A9:CE:47
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018CC9BCC29E1FDAD3A9AC0E62E2CF93EE3B
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/SBT7n6aYstIWvSOzaQMQYt-pzkc.roa
Signing time: Tue 02 Jan 2024 10:34:00 +0000
ROA not before: Tue 02 Jan 2024 10:34:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211359
IP address blocks: 194.224.205.0/24 maxlen: 24
194.224.204.0/23 maxlen: 23
194.224.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:c2:9e:1f:da:d3:a9:ac:0e:62:e2:cf:93:ee:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 2 10:34:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4814fb9fa698b2d216bd23b369031062dfa9ce47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ee:94:94:ab:9d:9e:8f:98:9d:fd:5d:b3:1d:
18:4b:c9:31:7e:cf:d8:5b:fd:8a:70:98:0f:4f:f3:
94:b2:e8:d3:5c:60:d4:83:53:96:ed:95:31:f3:5e:
91:94:5d:27:77:22:3f:0b:57:ed:2e:62:2b:30:a2:
8c:47:f2:69:b5:31:aa:5e:37:9d:97:e4:fa:31:dc:
0e:79:0c:21:81:6c:cc:f7:67:c5:d3:47:65:3a:39:
69:e9:22:50:d9:90:81:e4:21:56:0c:02:e4:1b:53:
74:75:59:cd:2b:7c:f6:4b:66:be:9a:f0:b0:72:0a:
c6:a0:2f:83:50:ec:58:78:9e:6a:c7:eb:19:b6:4c:
04:c8:92:90:5a:86:2e:cf:3b:65:63:78:53:0e:0b:
b4:ba:e9:84:75:06:99:1e:96:8b:7f:7a:31:c4:16:
3e:cc:82:0a:c0:25:83:20:db:fa:96:16:da:40:4a:
c0:23:42:b6:aa:21:cd:77:ce:ab:f6:47:e5:29:07:
70:d0:00:3f:0e:b4:e4:1a:97:c0:80:82:c4:f6:a5:
a1:43:91:cd:e1:c9:d4:8e:94:ba:fc:f3:ee:1e:62:
4a:24:fe:0c:28:19:48:51:a4:d7:86:78:83:d5:aa:
42:97:3f:03:3e:8f:d8:43:e9:c2:41:af:af:c0:66:
ed:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:14:FB:9F:A6:98:B2:D2:16:BD:23:B3:69:03:10:62:DF:A9:CE:47
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/SBT7n6aYstIWvSOzaQMQYt-pzkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.224.204.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:de:ad:40:f0:04:0b:de:16:e5:dd:4d:4c:a0:b2:db:a5:09:
18:63:e5:7f:c9:c3:6c:e5:8a:b1:33:dc:80:3a:41:5f:81:3e:
0c:4f:23:78:52:6b:40:2b:37:50:c9:bd:26:e4:a5:2f:a7:3a:
d8:4e:e3:91:8d:98:5e:5a:ee:45:46:39:ba:91:23:6d:8f:c1:
6a:2b:68:85:a5:f0:aa:97:8c:13:88:0d:1e:e0:d6:fc:f7:56:
75:d6:ae:ba:22:12:10:2f:92:fd:7c:9a:1a:45:f8:5b:ef:de:
e4:e9:55:53:89:01:85:80:19:96:1c:b9:6e:75:a4:c5:12:a2:
20:75:77:9c:5d:16:3a:b4:c5:01:bb:d7:1e:bb:8d:26:68:a7:
25:03:b5:42:13:18:07:32:7d:64:62:eb:2b:8a:96:18:8d:cc:
39:0c:e3:04:47:fa:7a:c6:06:40:f8:e7:23:aa:a7:7c:70:20:
ac:a4:04:34:af:59:20:35:99:3b:95:c7:9c:1f:d2:53:53:54:
c4:4c:45:28:85:e8:32:f4:d5:73:f4:00:de:09:df:19:1e:75:
ca:21:50:59:2d:97:4f:b8:a5:c6:ab:f6:c0:75:87:67:15:7a:
49:55:7a:d9:29:81:2d:db:ea:83:0b:04:87:a9:27:4a:00:cf:
45:8a:58:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:33 2025 by rpki-client