Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/1X19Eye1MEtU1dx8LW224CAugbo.roa
File: 1X19Eye1MEtU1dx8LW224CAugbo.roa (raw, json)
Hash identifier: vtUEw6cr90jJCXX6NtE1xiLbQqwSuogCjMl/Gomv5zA=
Subject key identifier: D5:7D:7D:13:27:B5:30:4B:54:D5:DC:7C:2D:6D:B6:E0:20:2E:81:BA
Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial: 0193F7CF68A081128548783928ABE608B06E
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/1X19Eye1MEtU1dx8LW224CAugbo.roa
Signing time: Tue 24 Dec 2024 08:36:25 +0000
ROA not before: Tue 24 Dec 2024 08:36:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3257
IP address blocks: 146.19.50.0/24 maxlen: 24
185.214.166.0/24 maxlen: 24
185.253.3.0/24 maxlen: 24
194.26.218.0/24 maxlen: 24
213.134.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f7:cf:68:a0:81:12:85:48:78:39:28:ab:e6:08:b0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Validity
Not Before: Dec 24 08:36:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d57d7d1327b5304b54d5dc7c2d6db6e0202e81ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c4:3b:8f:6e:da:60:3a:2b:f7:0f:dd:57:0c:
d8:ec:b5:a4:12:ce:0a:2e:da:ea:3e:6e:f3:98:16:
8e:e8:64:c6:41:24:1f:e6:96:95:ae:d8:1e:26:2c:
4c:42:98:4e:39:dd:54:9b:9b:2e:50:97:55:4e:67:
7a:73:55:94:8c:13:01:ff:d9:6a:8c:aa:a7:f1:cc:
b0:21:e0:28:86:ce:da:74:66:49:f1:43:64:98:9c:
f3:7a:6a:01:2b:f8:b4:bd:c0:b0:72:12:ad:05:f7:
1f:0e:b4:5b:32:32:a7:a3:24:98:6d:7b:b0:bb:78:
ad:c1:bf:5f:01:7f:a3:3a:ee:73:14:30:e0:70:0d:
3e:d0:35:58:a0:0b:c0:47:00:9e:30:ea:18:09:32:
f9:e3:43:57:8a:b2:b0:58:23:8b:eb:db:2c:32:4f:
2d:01:1f:b6:9b:30:76:26:b3:2f:52:4c:b4:94:98:
92:cb:cd:d6:c8:a6:74:5e:d4:26:37:61:3d:ca:e9:
83:14:a4:e6:b4:09:8a:c8:51:1a:28:68:62:8d:ee:
d4:6c:b4:fc:bb:19:c4:4c:22:a6:eb:ed:98:a8:68:
8f:6b:5c:3f:fc:6b:81:55:84:98:47:4e:f5:81:de:
1d:ae:cc:8c:7c:14:8b:bd:41:68:1a:7c:a5:5d:45:
93:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7D:7D:13:27:B5:30:4B:54:D5:DC:7C:2D:6D:B6:E0:20:2E:81:BA
X509v3 Authority Key Identifier:
keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/1X19Eye1MEtU1dx8LW224CAugbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.50.0/24
185.214.166.0/24
185.253.3.0/24
194.26.218.0/24
213.134.25.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:dd:52:4e:a5:c4:7b:6d:d7:4a:c6:b6:5d:ec:9d:c2:f9:c1:
16:78:b1:1d:2f:ec:32:7e:82:b5:50:f7:c6:67:e7:31:93:ca:
c8:9f:13:57:85:d7:a1:68:09:84:b6:9c:95:46:97:67:36:83:
e1:70:70:b4:44:0d:61:83:8a:5e:e9:12:02:74:03:ae:68:7d:
cc:39:ca:2d:d9:44:69:f3:3e:c2:04:3f:53:a7:98:1b:aa:c8:
b7:71:14:58:6a:ca:16:7a:41:ce:b7:34:55:ba:b9:e1:7b:d5:
20:73:4a:0d:6d:56:8f:02:60:d8:65:da:80:37:fd:9c:55:ce:
4e:22:6f:7d:bb:4f:3c:95:26:38:0f:70:51:97:e0:e7:85:d2:
9c:f1:52:d3:b0:78:c9:26:32:62:5b:6c:13:50:98:08:50:d8:
27:ae:2b:ed:bd:ee:2b:62:fc:4c:85:26:9e:a0:f6:c9:41:4c:
bf:e3:3a:2c:f6:95:2f:f1:db:99:b2:b5:78:a2:4f:b5:df:39:
3e:45:8a:fc:ff:1c:99:b0:22:79:d1:c2:7a:77:8a:2f:da:6f:
33:61:46:8f:5a:bf:be:2d:f6:00:97:91:2c:f0:b1:d6:2f:d9:
8f:c4:8f:00:92:c9:90:36:a2:6e:86:1a:0c:e4:30:fe:fc:25:
74:cb:61:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:42:21 2025 by rpki-client