Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/I4ffn5gwHYmABsU8kcQpsMGNKgQ.roa
File: I4ffn5gwHYmABsU8kcQpsMGNKgQ.roa (raw, json)
Hash identifier: ax19fTzV4zl/xPcGpF+Wno4Up5mNWN04/MelQtdXlVU=
Subject key identifier: 23:87:DF:9F:98:30:1D:89:80:06:C5:3C:91:C4:29:B0:C1:8D:2A:04
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 018CC348F4E63DD708A28D23F8C55C886474
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/I4ffn5gwHYmABsU8kcQpsMGNKgQ.roa
Signing time: Mon 01 Jan 2024 04:29:47 +0000
ROA not before: Mon 01 Jan 2024 04:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8617
IP address blocks: 195.251.152.0/21 maxlen: 21
195.251.160.0/21 maxlen: 21
195.251.168.0/21 maxlen: 21
195.251.176.0/21 maxlen: 21
195.251.184.0/21 maxlen: 21
195.251.128.0/18 maxlen: 18
2001:648:2050::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:f4:e6:3d:d7:08:a2:8d:23:f8:c5:5c:88:64:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 04:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2387df9f98301d898006c53c91c429b0c18d2a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7a:c3:7f:23:ad:0e:b9:82:38:03:2d:0b:2d:
66:35:49:64:a4:c0:4e:b1:04:2d:13:76:36:2a:86:
48:e2:68:76:56:83:51:3a:8a:4f:ac:9c:82:da:40:
77:38:b4:b4:cf:20:bc:d1:58:e3:88:ba:a1:60:f6:
a4:25:3d:ed:37:4b:7d:08:c6:29:22:71:bf:50:15:
f6:b9:65:b6:db:96:cf:d3:4f:c4:b0:3e:8a:72:c0:
92:38:58:07:b1:ea:56:66:3a:37:7e:1d:d9:b5:d2:
32:fd:44:e6:b9:a2:6e:f6:ab:3e:0b:12:d5:b3:13:
f7:5f:7f:9c:ca:0e:89:43:5c:c1:e9:48:40:ac:05:
da:bf:0b:a5:1a:8f:17:f5:61:ea:3a:a8:75:59:f3:
1c:fd:95:96:3f:bb:f2:05:7b:92:1c:df:34:fb:b0:
dd:57:d7:5d:d3:cc:75:34:db:8a:0a:d7:4f:fc:a8:
90:fa:bf:1c:bd:60:3e:0a:17:0b:d4:3f:44:1a:bb:
56:b5:b5:f4:6a:28:4f:91:80:39:73:6e:a9:da:95:
ef:b4:2f:bd:07:a1:8f:d0:31:e5:69:7d:c7:a0:80:
ff:69:8b:81:b2:07:eb:f6:ca:74:af:b6:5a:33:a1:
73:e0:c8:14:a1:90:1c:8d:46:bb:e0:6f:e7:c6:fe:
b8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:87:DF:9F:98:30:1D:89:80:06:C5:3C:91:C4:29:B0:C1:8D:2A:04
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/I4ffn5gwHYmABsU8kcQpsMGNKgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.251.128.0/18
IPv6:
2001:648:2050::/48
Signature Algorithm: sha256WithRSAEncryption
0c:d1:45:b0:44:b0:4b:07:46:d9:37:38:da:b3:66:46:9a:e3:
6d:2b:ed:87:87:75:4a:b0:35:46:b6:af:05:7e:04:90:39:d2:
55:7e:b8:5b:e3:c2:58:a4:11:20:a4:5e:0a:e4:40:ee:f0:a3:
f3:c8:4d:af:0f:92:6a:27:bb:8c:28:67:79:70:1b:7d:41:d7:
26:8c:fb:b8:8b:3b:25:ee:10:3c:0f:5e:34:dc:3f:74:9d:76:
8b:66:ed:57:6e:92:6e:a6:63:85:54:bf:24:22:76:96:5f:12:
4a:ca:c3:9d:3d:2d:68:3d:12:4f:8c:1d:a8:da:03:1b:04:f7:
10:d3:19:c7:68:1b:1b:5b:49:a4:e6:af:13:0c:6f:91:5b:b3:
c4:b3:f8:5f:70:9a:60:75:03:10:cc:c2:3b:5b:d9:1d:1e:88:
9e:c3:29:1f:c1:5c:b3:ed:f5:5a:98:18:fd:be:08:a0:43:2c:
6d:ac:01:53:7a:63:e8:13:a9:42:44:87:cf:0a:dc:56:14:2b:
65:5e:93:98:87:3e:eb:12:78:91:8d:b8:85:fa:f4:67:f6:0a:
7a:6e:50:0b:df:d1:31:c4:b7:3e:96:4c:16:56:fb:cc:50:12:
c7:b1:68:52:7b:56:c8:e6:f5:04:e2:f3:24:ce:65:e5:4d:74:
91:06:3e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:17 2025 by rpki-client