Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/5NScCym6qvB8ddIyB22KeNIQBHU.roa
File: 5NScCym6qvB8ddIyB22KeNIQBHU.roa (raw, json)
Hash identifier: FmHG9n9hfX2jjITGXSa//xh1KOH/Evhj18wAuGvdrTk=
Subject key identifier: E4:D4:9C:0B:29:BA:AA:F0:7C:75:D2:32:07:6D:8A:78:D2:10:04:75
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 018CC94E3440E675F2674C18CF0C09CC66F2
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/5NScCym6qvB8ddIyB22KeNIQBHU.roa
Signing time: Tue 02 Jan 2024 08:33:14 +0000
ROA not before: Tue 02 Jan 2024 08:33:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 146.0.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 11:44:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:34:40:e6:75:f2:67:4c:18:cf:0c:09:cc:66:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: Jan 2 08:33:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4d49c0b29baaaf07c75d232076d8a78d2100475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:66:83:25:ce:8d:bf:59:81:73:4c:54:1d:c0:
c1:e0:08:3e:50:5c:87:9c:83:f3:02:de:9a:db:52:
43:15:bb:ee:f7:80:07:80:ef:8f:a6:aa:e4:98:57:
1d:2b:9e:0f:5c:8c:78:5c:6f:e9:01:b6:67:39:25:
1d:ce:d8:77:5b:95:70:c2:ec:3e:f3:78:03:ec:60:
7c:f3:5f:b4:db:6d:a4:c8:ec:b0:34:87:56:73:47:
0a:82:ab:ff:1e:85:4b:93:b1:1a:7e:94:af:e9:2a:
ad:9c:c7:22:ae:b8:c5:4a:6e:3c:7e:38:2c:96:9e:
04:9a:62:5d:d8:f3:12:f0:c5:e0:df:12:50:09:f2:
81:c5:15:53:86:5b:2f:65:92:99:82:86:97:6e:61:
ac:da:17:4b:6b:f4:e6:4b:a4:da:9a:73:80:e4:ca:
14:9c:f5:20:70:e2:9c:9b:f7:7f:e7:1d:4b:28:64:
19:d7:9b:fd:f1:1e:84:a8:0f:97:08:36:a3:41:05:
99:d3:6a:2e:95:a4:01:aa:c9:18:94:30:1e:0f:ea:
5c:c6:73:1d:ef:cf:6a:75:da:67:2d:10:7b:c4:f8:
e6:6b:5a:6b:e5:88:3f:2e:c8:50:ad:25:d1:ca:6e:
f1:52:6d:94:aa:dd:70:71:da:b5:f2:32:bb:67:a8:
73:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D4:9C:0B:29:BA:AA:F0:7C:75:D2:32:07:6D:8A:78:D2:10:04:75
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/5NScCym6qvB8ddIyB22KeNIQBHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.0.15.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:6e:4e:65:d2:ba:9a:90:ff:a5:3a:ad:e3:4e:3b:a2:55:8e:
63:2d:f1:57:ce:bd:03:c2:67:25:77:bc:95:54:7c:17:d6:c9:
0f:56:b4:6b:a8:1b:bf:14:3d:56:85:2c:48:05:4c:b0:56:19:
08:88:f0:1a:00:12:93:c0:00:42:03:1d:31:0d:18:86:f9:b3:
4e:05:f5:e1:62:e7:1c:2e:07:bf:e9:a8:23:df:eb:6b:06:ec:
3a:19:40:2f:87:ac:87:24:7f:2d:33:db:f6:99:9d:ed:c6:40:
29:76:cf:ee:e1:33:13:4c:26:e5:b1:33:33:b7:c0:58:2c:b2:
43:5f:ec:8b:4b:10:d2:af:5c:2a:b5:e4:5f:fb:c4:43:f2:84:
16:4d:57:44:d0:4d:cb:e2:e9:a3:b9:7d:29:56:23:ad:ed:68:
5a:88:a4:f1:e5:d4:ca:85:06:7d:b8:94:40:3d:f9:db:f4:61:
e9:7e:16:4c:71:0f:b4:65:f5:2a:af:3a:8d:ad:49:5b:80:2f:
2c:1f:d2:8a:d8:bf:78:af:66:78:53:7c:72:7c:09:ab:c7:b6:
7e:b5:65:92:5b:15:dc:9c:fb:48:6e:67:71:7f:28:38:f2:fd:
7e:f6:82:ea:af:c4:cc:f6:89:55:cc:0c:62:73:93:64:9e:de:
fa:ce:8e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:49 2025 by rpki-client