Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/B4L0zt-iWxnb2007QCDoh6ytIr8.roa
File: B4L0zt-iWxnb2007QCDoh6ytIr8.roa (raw, json)
Hash identifier: tesz62aZJ96gNv5YOSmq/Kb3q5gMIwCqWbS5imsLC4I=
Subject key identifier: 07:82:F4:CE:DF:A2:5B:19:DB:DB:4D:3B:40:20:E8:87:AC:AD:22:BF
Certificate issuer: /CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Certificate serial: 018F10111FE00906C00E1A97F70CDFD09690
Authority key identifier: AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/B4L0zt-iWxnb2007QCDoh6ytIr8.roa
Signing time: Wed 24 Apr 2024 12:25:08 +0000
ROA not before: Wed 24 Apr 2024 12:25:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61998
IP address blocks: 194.36.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Apr 2024 12:25:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:10:11:1f:e0:09:06:c0:0e:1a:97:f7:0c:df:d0:96:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Validity
Not Before: Apr 24 12:25:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0782f4cedfa25b19dbdb4d3b4020e887acad22bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e8:b7:95:a6:a1:8f:38:97:96:cb:d9:94:73:
2b:f8:ea:4d:ce:a8:a9:d7:e2:5a:78:90:f9:59:78:
cb:4e:3a:19:a4:16:61:1b:1e:76:c5:29:7e:c8:e4:
8a:45:81:c4:96:77:5a:46:d6:98:bf:ee:b6:89:d1:
1b:58:a3:7a:0c:0b:75:2f:cb:f7:16:67:b4:e9:7f:
47:cd:14:28:e5:d0:1c:8c:d3:d6:68:8a:59:5f:6f:
3c:e9:c3:ef:94:f2:e3:93:c8:52:68:da:4d:d1:85:
ad:e7:e5:8a:9d:73:03:70:04:78:2b:e1:b9:b6:6d:
ad:f9:11:b9:13:95:df:c5:06:83:60:ec:75:77:5c:
72:86:94:89:c5:d7:91:e8:91:fc:2b:18:81:8a:7d:
9a:84:a2:5d:10:2f:5d:cb:17:b1:f4:e4:4b:ff:9b:
f6:f3:fa:6b:4a:23:5f:6e:a6:87:49:7b:b6:dd:c2:
45:27:e8:8d:6c:d4:74:7a:d5:c8:bf:8b:45:84:b9:
0e:ed:04:fd:dd:ac:5e:12:6b:40:58:cd:a2:d8:6a:
fb:a9:c6:80:49:40:5f:3b:ce:31:fd:98:11:28:8a:
84:81:5f:48:2d:43:9d:75:b9:87:7c:a6:f4:a2:f1:
c2:07:3f:9e:b5:53:d7:2b:45:0c:44:84:c3:a0:a0:
40:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:82:F4:CE:DF:A2:5B:19:DB:DB:4D:3B:40:20:E8:87:AC:AD:22:BF
X509v3 Authority Key Identifier:
keyid:AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/B4L0zt-iWxnb2007QCDoh6ytIr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.127.0/24
Signature Algorithm: sha256WithRSAEncryption
25:52:7f:aa:3d:aa:e9:1c:88:70:af:27:24:e6:f0:35:90:d4:
9e:08:50:fd:c6:ea:3a:c3:f4:fa:63:a6:4b:01:2e:ff:fa:c6:
47:2e:0c:ca:d7:18:b8:a0:91:5a:9e:09:20:94:11:9d:45:7e:
bf:07:37:40:48:44:82:71:5b:a2:dd:3c:c0:a7:3f:e7:b3:01:
4d:09:f0:7c:da:44:75:3c:7b:16:54:04:bb:8f:bb:ef:6d:79:
ca:79:0c:9b:44:c9:a1:05:33:ed:34:11:57:61:eb:fc:fb:84:
50:62:35:e3:32:39:5c:88:20:c0:3a:41:20:53:05:2d:86:5e:
7d:47:b1:9f:ef:10:1a:e8:a3:8e:5a:7d:5a:a5:17:12:cb:eb:
c5:2b:7f:ed:c1:e2:f7:fc:90:f7:11:2d:dc:a5:32:6e:17:a4:
29:cb:9d:a8:78:92:08:e7:65:ff:b0:c2:22:1e:0e:4b:2d:b3:
8d:6d:59:c2:e0:b9:8f:c5:8f:6b:2c:9b:05:87:64:b7:f5:6e:
33:8d:1b:66:b6:95:58:52:45:c2:0f:e2:04:90:c7:cc:be:c8:
9e:96:ce:a8:9b:02:19:ac:c9:19:42:62:d2:01:56:ef:08:c0:
14:02:8c:8c:95:dd:59:98:a5:c3:ea:1c:02:02:39:a0:fa:47:
f5:2b:1c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:28 2025 by rpki-client