Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/f64qbOKXPE_reQ2MKBvkpRdSaUI.roa
File: f64qbOKXPE_reQ2MKBvkpRdSaUI.roa (raw, json)
Hash identifier: Al5CkC72oJHlxtpEvaGH/4qXI/KTUuygkyzB3Gqq4CQ=
Subject key identifier: 7F:AE:2A:6C:E2:97:3C:4F:EB:79:0D:8C:28:1B:E4:A5:17:52:69:42
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 01932C764A3F91FDA5F2B57C7E820E1A8877
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/f64qbOKXPE_reQ2MKBvkpRdSaUI.roa
Signing time: Thu 14 Nov 2024 20:56:09 +0000
ROA not before: Thu 14 Nov 2024 20:56:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 194.59.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Dec 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2c:76:4a:3f:91:fd:a5:f2:b5:7c:7e:82:0e:1a:88:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Nov 14 20:56:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fae2a6ce2973c4feb790d8c281be4a517526942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:70:9d:de:a5:69:b8:f9:fc:f6:62:a7:5b:ad:
17:7e:43:4c:98:67:64:b3:ab:ff:da:af:2a:e8:a7:
9e:20:a1:4b:84:4b:cc:2c:92:76:b5:11:2d:00:e6:
a7:00:b2:96:b1:cf:86:fd:66:98:dc:4e:20:ee:62:
37:5a:8c:58:ab:c9:19:67:41:fb:7a:4d:42:33:37:
b1:82:20:f2:e4:94:6f:86:9c:e6:a4:91:70:4e:4e:
8f:69:c2:b8:59:01:0d:06:97:4f:16:67:06:4f:9f:
13:6f:be:b1:94:62:b3:e4:09:36:b4:f7:74:ce:9d:
63:4c:3a:73:ea:0c:47:ca:e7:92:27:54:09:97:87:
7f:14:29:12:63:dc:96:3a:1f:b3:3b:6f:74:23:e6:
64:05:41:c7:42:2a:e2:41:93:a3:ff:80:e1:d7:55:
50:de:f0:30:62:cf:ea:49:09:63:ad:38:8d:a9:f3:
da:a9:91:41:00:08:6c:85:92:62:c7:f4:e8:7e:ab:
e8:8f:38:2a:55:a1:f7:2b:18:1a:1a:3a:83:e1:84:
17:3d:3d:33:74:ae:9d:b6:39:ba:df:c4:a3:cd:c9:
98:a0:70:f0:6c:dc:b1:b2:51:5d:b5:8f:da:97:79:
1c:3e:49:65:17:32:28:e2:82:6e:71:10:9f:d5:83:
e6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AE:2A:6C:E2:97:3C:4F:EB:79:0D:8C:28:1B:E4:A5:17:52:69:42
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/f64qbOKXPE_reQ2MKBvkpRdSaUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.6.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:41:b0:b1:39:55:f4:ca:3f:94:dc:bc:17:eb:9f:9f:12:20:
5c:86:8f:a8:eb:f2:7f:9f:0a:10:b0:08:77:66:b6:89:24:84:
78:fc:f5:a9:28:7f:39:48:b7:65:80:e5:8f:f8:bc:d2:bf:0e:
d3:52:d9:4c:60:34:e7:a1:4a:26:e6:c4:f4:a9:5e:46:52:f2:
f3:64:d9:56:a3:70:85:da:f9:09:f8:b9:23:00:57:80:3c:ae:
24:c2:ef:da:7e:9d:9e:80:25:ac:c1:ce:21:81:f4:f7:bc:af:
19:e1:0c:9d:6a:3e:53:2a:eb:cb:63:4c:04:27:00:0c:ea:0d:
3c:c8:09:38:38:a3:62:57:26:14:c5:72:69:9b:42:3b:2f:94:
c6:67:2a:1d:b8:92:d8:ef:a6:8a:6e:9a:c3:66:d5:ab:94:28:
6e:ee:91:c7:31:46:bc:3e:88:34:ac:f8:cb:12:fe:43:c9:b8:
10:58:9e:d2:c6:d6:3d:2c:de:16:ba:62:fd:fa:eb:43:1b:73:
3e:37:11:0f:fa:4a:51:fa:0b:f4:0a:2e:56:45:42:f3:31:93:
10:36:00:c7:34:6c:9c:75:20:8f:e6:62:86:15:cb:c6:0b:05:
68:a2:37:c2:0e:f5:af:c1:5e:a4:43:9f:39:57:95:93:26:86:
6e:ae:0c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:13 2025 by rpki-client