Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-rFySSmLpEG1XMDtFTE-NXRaeVc.roa
File: 1-rFySSmLpEG1XMDtFTE-NXRaeVc.roa (raw, json)
Hash identifier: tYOyqZ3beoX7iPPlKaal6QMIJnscwtWtJ48fBrXVUYI=
Subject key identifier: FA:B1:72:49:29:8B:A4:41:B5:5C:C0:ED:15:31:3E:35:74:5A:79:57
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019326078BA81E12460ABB7E10F2E035E31D
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-rFySSmLpEG1XMDtFTE-NXRaeVc.roa
Signing time: Wed 13 Nov 2024 14:57:28 +0000
ROA not before: Wed 13 Nov 2024 14:57:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42708
IP address blocks: 192.121.153.0/24 maxlen: 24
192.165.76.0/24 maxlen: 24
193.180.200.0/24 maxlen: 24
194.14.177.0/24 maxlen: 24
194.68.166.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:26:07:8b:a8:1e:12:46:0a:bb:7e:10:f2:e0:35:e3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Nov 13 14:57:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fab17249298ba441b55cc0ed15313e35745a7957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dd:f0:c9:3e:b5:f8:87:42:9b:27:ac:6c:c3:
ed:24:92:c2:09:78:2b:9c:94:e1:b3:78:61:a1:ff:
b6:8d:ce:c0:fb:d5:3b:72:cf:ca:42:99:39:1f:0d:
d0:fe:fd:d0:07:95:e9:3f:2f:b3:d4:26:05:43:56:
7d:a5:7b:01:2b:f8:36:c2:4a:e3:5a:67:ca:cb:c6:
91:53:8b:38:af:af:5b:a4:87:1c:8a:3d:1a:80:28:
5d:0e:74:f7:3a:95:fa:e0:31:2f:c1:80:cd:86:10:
dd:1b:96:5e:42:ea:e1:4c:8e:d6:f3:bc:eb:0b:f3:
c0:14:b1:b1:da:af:f9:ec:e9:64:06:f4:62:46:0e:
7e:9f:9c:fd:a4:70:8e:38:12:82:80:b5:c9:75:ab:
03:68:bc:27:0a:cb:31:a0:7f:12:84:46:82:1a:31:
e8:f8:ce:e5:29:cb:48:eb:7d:c3:2a:31:93:2b:30:
8d:01:72:73:d6:72:42:9b:8c:e4:e5:76:e1:f9:62:
96:74:26:63:14:e8:0c:18:16:86:50:fc:98:44:19:
38:aa:e8:c9:ed:a7:a0:3b:8d:52:8e:2f:59:3e:37:
6a:75:21:f3:90:ee:63:d3:3a:fb:4e:b4:83:37:11:
77:8c:71:15:54:d7:38:03:8c:0a:bf:12:f8:51:a8:
a4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B1:72:49:29:8B:A4:41:B5:5C:C0:ED:15:31:3E:35:74:5A:79:57
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-rFySSmLpEG1XMDtFTE-NXRaeVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.153.0/24
192.165.76.0/24
193.180.200.0/24
194.14.177.0/24
194.68.166.0/23
Signature Algorithm: sha256WithRSAEncryption
74:b0:59:7b:12:36:d6:48:65:8f:a6:06:74:ae:6f:2c:7a:b4:
d4:ae:ae:b3:86:f0:7a:ba:05:47:58:ed:c7:d2:4c:17:af:bd:
99:2d:49:3d:73:7b:5a:4e:56:76:eb:99:5d:04:07:5a:e9:38:
3a:e8:be:a3:53:a9:11:87:80:49:22:f2:3d:09:db:2c:7a:5f:
9b:2f:1f:95:6b:4d:c0:ed:1f:fa:83:ab:34:c1:20:b3:41:b7:
cd:46:55:ef:24:93:30:4c:33:9d:63:d1:95:38:e3:4b:26:10:
d2:ff:34:f7:bb:93:2d:88:2e:a0:16:ad:b1:6c:04:77:21:c1:
2b:3e:6d:6e:eb:fc:07:42:ac:86:53:0e:27:da:b5:4d:b4:eb:
97:3b:d7:d0:21:9c:1f:15:fa:00:06:61:3d:7d:c0:3a:b2:5d:
76:f2:42:d1:90:d2:b5:68:30:62:7b:cb:4a:b4:c1:e0:61:68:
88:f3:3b:7e:7a:60:ef:e7:e1:a9:c4:48:1b:2c:57:1b:53:6b:
07:ba:99:3b:fc:d9:34:ab:2b:90:c9:26:fc:4d:54:0d:14:f2:
51:04:23:c7:7a:1f:c5:2e:a9:9d:2d:55:de:2e:c1:5d:f2:75:
5b:ba:9b:8a:02:1e:cb:72:1e:c2:87:db:90:60:a1:5b:06:15:
79:e8:e2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:29 2025 by rpki-client