Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/9ESMnpG5ZB6HVeMoqFR_4IgVvIk.roa
File: 9ESMnpG5ZB6HVeMoqFR_4IgVvIk.roa (raw, json)
Hash identifier: k3VC51T5myyoEwiZ1MVO1Rhb5o1WG1JbgnmUEFRQjOs=
Subject key identifier: F4:44:8C:9E:91:B9:64:1E:87:55:E3:28:A8:54:7F:E0:88:15:BC:89
Certificate issuer: /CN=1925e6387b33e94069a89a5d1be68904e4090613
Certificate serial: 0192CCB43D228BD1B122C196F201E6DDFBCA
Authority key identifier: 19:25:E6:38:7B:33:E9:40:69:A8:9A:5D:1B:E6:89:04:E4:09:06:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/9ESMnpG5ZB6HVeMoqFR_4IgVvIk.roa
Signing time: Sun 27 Oct 2024 06:40:17 +0000
ROA not before: Sun 27 Oct 2024 06:40:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214523
IP address blocks: 194.62.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:cc:b4:3d:22:8b:d1:b1:22:c1:96:f2:01:e6:dd:fb:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1925e6387b33e94069a89a5d1be68904e4090613
Validity
Not Before: Oct 27 06:40:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4448c9e91b9641e8755e328a8547fe08815bc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bf:c5:ee:dc:7f:22:cb:8c:61:3a:f0:34:c8:
21:8d:27:85:97:46:ea:f7:31:33:5c:64:91:41:32:
61:68:67:39:a7:1b:37:89:db:9f:4b:11:cf:20:96:
a4:8a:43:7a:cf:fc:53:b7:56:d6:7c:7b:20:73:ea:
c1:da:7b:d0:ed:fd:a8:de:f8:b9:17:a1:6d:81:58:
a4:ce:d3:82:fa:ba:ed:a9:24:cf:11:ac:c2:f8:f2:
a4:ed:02:91:99:e1:9e:cc:08:fa:a2:99:27:96:5f:
ef:02:a8:dd:b1:96:23:b6:6d:31:98:4f:f7:73:21:
27:50:d9:70:5e:e2:bf:81:42:7d:a4:ba:42:35:62:
15:8b:f8:b5:6a:32:e4:0f:f1:00:0f:75:bc:a9:66:
a7:75:93:12:8e:b2:27:a5:f7:2e:bf:55:3c:0c:44:
ba:9f:3c:f2:e1:6f:e7:09:ed:06:af:8a:81:e7:4a:
04:13:fe:8a:a2:63:41:61:03:75:de:e0:ea:94:ef:
53:96:0d:eb:21:f4:4c:f9:9b:20:0c:e1:cd:a1:c7:
9b:19:c0:82:49:22:8a:03:94:81:11:cd:8f:24:90:
ad:b4:bd:b7:71:02:27:8e:4e:2b:f4:fc:44:3e:db:
c2:de:0e:45:cd:a3:ef:97:9e:05:7f:f9:de:87:72:
aa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:44:8C:9E:91:B9:64:1E:87:55:E3:28:A8:54:7F:E0:88:15:BC:89
X509v3 Authority Key Identifier:
keyid:19:25:E6:38:7B:33:E9:40:69:A8:9A:5D:1B:E6:89:04:E4:09:06:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/9ESMnpG5ZB6HVeMoqFR_4IgVvIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.46.0/24
Signature Algorithm: sha256WithRSAEncryption
85:a9:d3:b6:cf:fc:82:97:e1:dc:74:e9:64:ac:06:2e:46:09:
64:4a:ce:b8:17:2c:ce:a2:da:ee:86:24:f7:65:b1:5b:ff:f4:
73:15:f1:7a:aa:45:f6:ca:ca:83:89:d9:a4:c8:b4:28:19:a8:
01:d0:45:bd:03:eb:69:ed:be:32:71:cf:64:89:8a:47:1e:af:
07:f9:29:fd:9d:89:cc:1d:15:6f:4b:fb:83:81:4f:7d:d4:91:
69:6f:a7:0d:ce:c8:46:5a:a3:0a:a2:ea:ba:81:f9:85:9b:59:
bd:cb:a4:73:e5:f8:45:a0:5f:80:0d:de:99:af:81:07:51:1d:
54:e1:53:20:45:fd:44:41:f4:ba:56:bc:cb:58:fa:62:a9:f7:
67:a0:41:f6:c5:6a:00:59:18:ff:f6:3d:90:43:95:96:96:08:
70:a0:b3:10:61:5f:48:a9:f0:10:f1:a7:83:ef:6b:41:2b:07:
1f:2f:b4:84:32:fe:d2:2f:6d:c1:6a:a4:45:09:db:81:59:75:
f5:8a:35:4d:f4:fa:45:34:42:21:6b:ec:85:48:fa:9e:98:35:
f4:84:a6:e0:c4:2d:3a:04:e0:e3:9d:0a:88:02:85:d3:ab:db:
bd:e7:70:d5:49:21:46:ee:e0:85:65:88:80:85:6e:61:76:ff:
c2:02:eb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:37 2025 by rpki-client