Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/FOh4kbPG2LWrJ1ArrZwl-Sg0iPU.roa
File: FOh4kbPG2LWrJ1ArrZwl-Sg0iPU.roa (raw, json)
Hash identifier: w5SAvvBih8iZyWkaT4NgDo6xdzHZHFRP7MHLEbt+jWk=
Subject key identifier: 14:E8:78:91:B3:C6:D8:B5:AB:27:50:2B:AD:9C:25:F9:28:34:88:F5
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0194282426F40E301CFF68DD67F7C8D24639
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/FOh4kbPG2LWrJ1ArrZwl-Sg0iPU.roa
Signing time: Thu 02 Jan 2025 17:50:45 +0000
ROA not before: Thu 02 Jan 2025 17:50:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 130.185.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 09:28:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:26:f4:0e:30:1c:ff:68:dd:67:f7:c8:d2:46:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 2 17:50:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14e87891b3c6d8b5ab27502bad9c25f9283488f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:30:9b:55:7e:7a:55:60:ab:1d:47:f4:17:8a:
41:f6:71:b9:0c:61:ec:07:66:4d:38:f1:11:c1:cd:
5e:6f:b0:f6:3e:80:b6:bd:80:d7:be:46:6d:8a:39:
c4:b4:4b:75:d2:59:fe:97:93:3e:f1:0d:a4:4e:11:
fb:8f:f0:13:4f:b3:1c:ca:0d:6e:73:e3:02:a6:78:
f3:b3:6b:4c:29:18:50:2c:84:e8:ba:24:f5:15:8e:
02:db:7d:fb:a8:e6:11:7a:2b:98:6b:23:4e:ce:f8:
fd:84:cd:0c:c1:7a:59:4f:46:05:7c:54:b5:ce:29:
91:af:66:e5:dd:d3:6c:fa:27:44:61:bd:a2:18:0b:
64:4f:d2:fa:31:e6:d4:9d:90:e2:b6:c8:01:df:ef:
04:4b:0b:51:1f:33:d8:e3:f1:d6:35:ce:8b:c2:5f:
01:a2:e2:41:ff:42:30:38:1d:03:4f:f5:9e:25:68:
57:d5:ed:a7:aa:07:a8:6c:95:7a:48:f7:6b:5c:ea:
65:3d:84:d8:fb:f9:6e:50:67:36:08:d9:2f:d6:db:
a4:bf:fd:91:5b:14:65:45:04:dc:2e:56:0d:62:d6:
aa:11:e1:81:b8:6a:4c:4e:1b:e0:16:b6:a9:fd:9c:
e8:9e:da:b5:85:d3:13:84:65:43:fc:17:c1:66:79:
b8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E8:78:91:B3:C6:D8:B5:AB:27:50:2B:AD:9C:25:F9:28:34:88:F5
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/FOh4kbPG2LWrJ1ArrZwl-Sg0iPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.251.0/24
Signature Algorithm: sha256WithRSAEncryption
15:bc:9d:02:61:e6:89:72:bd:f4:21:a2:62:4d:e3:2e:41:61:
bf:00:67:ce:5c:af:40:96:4e:a9:28:48:0e:b5:c0:d5:a9:e7:
c0:90:d8:fc:85:a6:1b:91:0f:86:5d:d7:75:11:33:f2:40:ee:
80:7a:ce:3c:43:49:7a:3b:69:6a:b5:cc:c7:ae:5a:5e:51:68:
14:9b:1e:9e:8b:88:3a:a1:15:fa:a7:ce:8b:8e:eb:27:92:85:
09:45:a4:13:e1:3b:65:bd:c3:c5:3c:5f:53:1a:3c:a5:e0:f8:
bf:3f:1c:b7:5f:72:4e:84:f9:d5:90:5f:0f:1c:52:86:8a:74:
a5:20:82:c3:d5:93:53:7e:4e:47:05:40:f8:36:ec:37:76:a6:
12:aa:2f:a7:a6:1a:77:2c:ca:fe:96:7f:8c:cb:fe:b3:81:82:
21:2f:57:e9:bc:4e:d3:46:c3:f7:04:50:ef:86:92:00:e5:c4:
fa:ae:ab:ad:3e:76:77:c1:cb:d7:a6:bb:26:8e:06:22:60:c9:
31:a8:e6:84:d0:80:9d:d4:2c:80:bb:0b:87:7f:26:6c:22:49:
a4:a6:46:00:03:b5:8b:e2:d9:16:d2:5d:1e:c1:3f:3b:4e:bc:
b2:25:b1:9e:e0:4a:26:6a:4c:44:5f:90:4d:89:28:cf:66:df:
d5:f3:bf:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:40:23 2025 by rpki-client