Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/aBI2--_h3Mq5MLB06BN0OiByH2E.roa
File: aBI2--_h3Mq5MLB06BN0OiByH2E.roa (raw, json)
Hash identifier: g9rmpfmJUp77QSsbe0c3fZQ8bsS3rtJ8Ai6CgiYm2RA=
Subject key identifier: 68:12:36:FB:EF:E1:DC:CA:B9:30:B0:74:E8:13:74:3A:20:72:1F:61
Certificate issuer: /CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Certificate serial: 0192B34C54FDCD583F258E2BB03787C8850E
Authority key identifier: C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/aBI2--_h3Mq5MLB06BN0OiByH2E.roa
Signing time: Tue 22 Oct 2024 08:16:16 +0000
ROA not before: Tue 22 Oct 2024 08:16:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20929
IP address blocks: 194.50.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b3:4c:54:fd:cd:58:3f:25:8e:2b:b0:37:87:c8:85:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Validity
Not Before: Oct 22 08:16:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=681236fbefe1dccab930b074e813743a20721f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ce:80:14:f7:79:67:7b:db:4c:d6:95:01:16:
fb:ee:a4:9a:61:36:eb:2e:7e:87:2f:b4:3f:30:bc:
c9:ca:fd:8c:47:62:e3:e2:4f:d0:b3:6a:ff:dc:2f:
4b:58:d9:f2:bf:4f:27:e7:42:b5:3d:57:ae:29:65:
50:7a:ed:72:25:d3:07:55:33:20:46:68:14:15:a6:
df:bd:53:2c:18:6c:6a:4d:a4:81:be:ca:db:8c:ab:
7c:5f:c0:4a:ee:22:67:da:09:75:9d:9b:bb:22:8a:
47:c6:52:54:c5:ed:32:16:12:78:60:07:b8:d4:ab:
3e:51:b9:f9:68:06:bb:97:74:11:75:95:31:30:e4:
a8:be:71:37:a7:f0:e7:be:44:7f:2d:05:b4:cf:cf:
a4:2a:8e:c0:c8:f4:4a:7e:bd:cc:1f:92:08:31:e4:
d2:2a:b0:68:51:79:ce:89:51:0c:d0:44:13:7a:a1:
73:7b:0c:3f:ea:2f:9f:7c:12:46:1e:60:45:87:90:
2c:b2:44:14:ed:85:a5:de:0e:83:62:5f:ab:b8:21:
e3:d6:88:11:92:6d:c9:3a:2a:0a:4f:9a:f3:62:c2:
da:51:bd:cd:8c:0b:ec:e4:88:19:38:4d:93:9f:6a:
90:d1:d0:20:78:5f:e0:55:79:ed:e4:92:44:ef:6b:
a1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:12:36:FB:EF:E1:DC:CA:B9:30:B0:74:E8:13:74:3A:20:72:1F:61
X509v3 Authority Key Identifier:
keyid:C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/aBI2--_h3Mq5MLB06BN0OiByH2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.174.0/24
Signature Algorithm: sha256WithRSAEncryption
18:10:43:44:00:b5:14:85:99:d0:f3:8b:b5:d0:a7:61:0c:24:
af:55:32:7c:2b:cc:c4:90:77:12:2f:6a:f1:07:40:6b:53:7a:
e8:f4:8d:12:86:38:ae:ef:4e:97:31:12:39:f0:5f:2b:ae:d9:
96:04:12:4c:cc:bd:4a:0a:0a:14:90:62:25:25:35:1c:b9:bb:
0d:48:7e:a2:34:da:cc:0b:c1:54:a7:e8:09:01:7a:1e:ca:69:
a9:28:85:14:81:38:47:ce:f8:4b:0f:88:f3:27:69:c7:5d:91:
d4:1e:8a:a3:1f:f7:15:32:c8:26:5f:6e:76:f7:0b:e0:70:e4:
31:d8:88:1f:7b:1b:3c:69:89:16:ed:80:85:fa:ae:f2:66:03:
c0:07:2b:b2:9b:77:51:e6:c8:6e:83:f5:f4:73:15:84:c9:f7:
36:65:44:d2:f3:a7:42:de:d1:bd:4a:4c:c8:46:0f:e3:23:00:
48:d8:75:49:0e:e3:30:61:dd:bf:7a:a0:e7:59:d0:2b:2f:b8:
38:2c:0c:4d:41:3f:7f:48:77:26:78:9c:a2:e4:2f:5c:1e:ed:
91:f5:ae:e2:a2:c6:07:b4:e7:b5:1e:38:27:eb:da:0e:2f:d4:
a7:00:65:a3:38:c2:07:3c:5e:5b:22:15:d1:ba:a4:cf:eb:b3:
bd:28:7d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:34 2025 by rpki-client