Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/CMtZyhWU0kx7YB_S-42Ra_txtLE.roa
File: CMtZyhWU0kx7YB_S-42Ra_txtLE.roa (raw, json)
Hash identifier: dzfXYPsvVXRlg+4jueIbLIyKzaMp5ib4GmxvpqGustM=
Subject key identifier: 08:CB:59:CA:15:94:D2:4C:7B:60:1F:D2:FB:8D:91:6B:FB:71:B4:B1
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC50119D37AEBFCC5398E4D7C0AFE3582
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/CMtZyhWU0kx7YB_S-42Ra_txtLE.roa
Signing time: Mon 01 Jan 2024 12:30:32 +0000
ROA not before: Mon 01 Jan 2024 12:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61272
IP address blocks: 194.32.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:19:d3:7a:eb:fc:c5:39:8e:4d:7c:0a:fe:35:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08cb59ca1594d24c7b601fd2fb8d916bfb71b4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6e:21:1e:f1:13:0e:a7:5b:26:87:34:96:05:
5b:ca:a5:a9:da:41:52:62:b9:8f:35:7c:01:9b:e3:
1e:d7:42:00:a6:00:4e:d3:9f:91:6a:72:c3:e1:53:
73:2a:70:66:79:0c:d6:8b:c1:38:28:00:f3:d1:6e:
5d:51:a9:93:dc:ad:25:8e:09:c7:a9:70:5e:9c:05:
be:30:cd:ec:10:95:c3:f6:3a:d4:35:fe:d9:12:4a:
14:f6:0b:a3:39:51:21:14:ca:8a:ac:01:5e:e1:81:
8a:55:6e:9b:04:12:10:a4:30:fb:28:d1:41:f8:b0:
b7:bf:9b:d9:7e:3a:60:5d:9f:c6:e0:b0:5b:17:12:
0b:1e:c3:61:2b:9a:3e:2a:85:d1:7a:5a:77:b8:9e:
6f:22:ca:c4:32:08:61:f0:6d:62:50:69:4d:61:bb:
cc:41:9b:2b:4b:c6:5b:56:36:89:a1:ba:cf:e8:cd:
c8:cf:63:a5:09:77:10:33:f8:7d:42:04:5a:91:9a:
d6:79:1c:ed:9f:62:9b:89:68:1e:f2:33:45:82:df:
9b:7b:6b:e9:0e:1b:ed:d1:33:16:10:86:32:cf:68:
5c:9b:7c:16:87:1f:98:db:c2:68:a2:05:12:7e:a4:
5b:14:2d:c4:11:60:88:73:98:2c:ec:e8:66:1e:17:
ce:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CB:59:CA:15:94:D2:4C:7B:60:1F:D2:FB:8D:91:6B:FB:71:B4:B1
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/CMtZyhWU0kx7YB_S-42Ra_txtLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.122.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:80:67:cd:90:88:f2:9f:f3:74:e0:f6:c0:6d:57:17:cc:60:
68:42:20:5b:4d:65:6b:04:0d:ae:dd:1a:34:79:45:5c:41:38:
0c:43:36:ab:ed:07:0b:4e:01:f7:d8:54:08:32:3f:e0:57:fb:
39:3b:6e:ff:d7:04:55:ef:4e:72:ef:c4:24:8d:2a:f8:03:08:
29:82:ab:55:c9:e7:36:6a:de:be:b2:6a:00:cd:ba:5f:88:d1:
25:cf:70:48:bd:a4:4b:a9:3c:59:4b:64:e4:de:0a:65:39:51:
c9:7a:b5:16:c4:c3:98:f5:c9:cf:c1:eb:55:ed:fb:ad:02:fb:
31:9d:d8:b6:95:35:68:23:d6:9d:28:ad:8b:c6:20:aa:1a:ad:
ed:7a:d1:ae:d2:ac:50:fd:11:47:a0:ce:85:1c:e5:98:34:c5:
1e:e7:fb:22:32:7d:78:4c:11:9d:54:31:57:63:86:50:58:06:
b0:43:e1:ac:ee:09:fb:89:2b:48:6a:9c:4e:62:00:fb:b2:4e:
6f:45:7a:e3:71:9c:9b:8a:44:59:05:19:87:8d:ce:b3:61:98:
7d:9c:c2:90:ec:ca:d4:d1:d9:51:0f:78:86:6f:58:6b:fc:4c:
39:09:09:3c:e4:d9:ca:e6:6d:61:3f:c0:a8:0a:8a:4e:b1:12:
e5:cc:a6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:11 2025 by rpki-client