Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ppWJBfixWYZtAp4SnVNmr7e-3nk.roa
File: ppWJBfixWYZtAp4SnVNmr7e-3nk.roa (raw, json)
Hash identifier: 6tlCSBtwbEt8BF7rTmHBJOKEFfBEoMnaJBNNGmHVE7g=
Subject key identifier: A6:95:89:05:F8:B1:59:86:6D:02:9E:12:9D:53:66:AF:B7:BE:DE:79
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018CC2DB61C218272CC170F4A85369B6F97B
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ppWJBfixWYZtAp4SnVNmr7e-3nk.roa
Signing time: Mon 01 Jan 2024 02:30:06 +0000
ROA not before: Mon 01 Jan 2024 02:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43581
IP address blocks: 194.169.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:61:c2:18:27:2c:c1:70:f4:a8:53:69:b6:f9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 02:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6958905f8b159866d029e129d5366afb7bede79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:23:f3:ff:4b:15:2d:47:68:ba:bf:b1:08:75:
9f:91:ec:17:cd:ee:66:25:e1:22:b5:5e:0a:35:3a:
80:dd:74:44:df:3a:e0:38:ae:58:b4:d2:51:3b:7f:
50:2b:06:c0:39:42:2c:42:48:c0:a8:bc:84:fc:a6:
e6:94:a2:a0:30:1a:80:56:01:bf:17:cb:f4:88:6d:
21:a9:7c:3d:ea:ee:04:cc:1b:b3:10:f6:b3:3a:71:
46:a9:16:aa:d6:59:87:36:4b:73:91:b6:91:b2:57:
fa:9d:b8:98:8c:7b:56:d7:73:35:b2:44:06:42:80:
0c:ff:98:a4:3d:91:fb:bc:ce:c9:86:f0:9a:4f:ab:
e8:58:b1:ad:b2:86:f2:62:b7:63:48:8b:c7:d5:a3:
1b:0a:c7:ce:7b:8f:c3:c3:1a:fc:18:5f:8e:d0:b5:
3a:95:cb:56:48:17:77:09:2a:95:14:72:d4:f9:e9:
4a:bb:b3:6a:b0:69:29:aa:cb:de:e8:03:b4:16:ce:
8f:eb:ce:8a:71:bb:eb:20:bc:c1:a0:58:a5:64:09:
68:0c:9e:37:38:52:d2:48:4e:6e:40:08:65:dd:9e:
ee:98:93:f0:89:61:a8:6a:1f:b7:be:16:a7:76:b9:
27:6f:7c:8f:fd:2e:45:a8:6d:50:59:42:29:ea:0b:
0f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:95:89:05:F8:B1:59:86:6D:02:9E:12:9D:53:66:AF:B7:BE:DE:79
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ppWJBfixWYZtAp4SnVNmr7e-3nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.160.0/24
Signature Algorithm: sha256WithRSAEncryption
94:3b:9f:d5:13:f1:a5:d8:e8:06:ba:ff:eb:96:c2:68:6e:cb:
18:b7:c2:7d:90:40:a0:03:ec:11:87:71:0a:5d:d1:83:a0:8a:
e0:55:be:05:2e:a7:68:93:20:7b:f0:0b:47:82:f7:bd:3e:83:
b2:f7:f7:11:6a:bd:5e:79:83:a9:b8:4f:52:fa:7b:6e:36:8b:
64:2d:ea:5a:47:9a:cc:44:95:d5:40:39:be:b3:c6:35:cd:f4:
f9:1f:42:03:ba:26:69:a8:2e:06:04:a5:3c:f3:e8:08:0e:fd:
e6:70:be:da:fd:aa:2d:f9:e1:52:10:16:25:9d:46:77:2f:24:
fb:0f:0a:21:74:a4:21:f7:6b:e9:a1:a8:a3:7b:49:91:a9:e6:
67:ec:0a:e9:24:91:b9:84:d4:f0:6a:ac:32:eb:c2:81:d0:55:
85:37:5c:07:ae:14:81:d6:cf:fa:eb:63:6b:4a:45:52:0d:44:
aa:e7:24:d2:4e:22:3f:9b:c1:c0:c5:41:c7:00:a6:74:2e:71:
8d:64:13:ce:3e:03:ce:d6:49:2a:47:46:21:4e:5f:de:31:32:
4b:7b:ac:59:67:dc:7d:ee:77:d1:28:fc:64:dd:81:c9:fb:73:
3d:ca:f4:06:73:5f:a4:6a:cf:f4:c1:cd:05:bd:b8:db:0e:47:
d1:6a:bd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:41:03 2025 by rpki-client