Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1a8rJxf2do5J3-XR3vIIWGRf6i0.roa
File: 1a8rJxf2do5J3-XR3vIIWGRf6i0.roa (raw, json)
Hash identifier: Nm8iMtHueIHAdm0PkM2qrYAhfAYNUiCtgIDLR+il+2U=
Subject key identifier: D5:AF:2B:27:17:F6:76:8E:49:DF:E5:D1:DE:F2:08:58:64:5F:EA:2D
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802F1B27F55DAFF6BEC8F4526A4686C
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1a8rJxf2do5J3-XR3vIIWGRf6i0.roa
Signing time: Tue 02 Jan 2024 02:31:25 +0000
ROA not before: Tue 02 Jan 2024 02:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49862
IP address blocks: 194.103.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jan 2024 15:20:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:f1:b2:7f:55:da:ff:6b:ec:8f:45:26:a4:68:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5af2b2717f6768e49dfe5d1def20858645fea2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:97:50:85:8b:e7:15:6a:62:cc:c1:5f:8d:57:
04:73:c4:22:fc:69:b5:9b:e4:67:16:4d:92:ce:f3:
31:73:61:93:12:5f:37:04:74:1c:36:e0:42:e0:b9:
46:ba:cd:14:69:98:f1:c3:75:94:af:27:2c:1c:97:
db:14:f4:b3:a8:7e:82:6b:65:b0:1d:a5:66:7b:55:
72:c8:b5:67:58:ec:a4:59:99:89:87:33:66:d3:8d:
af:60:00:38:09:60:78:d4:65:1e:c8:e1:14:3d:30:
df:5b:e8:6f:9e:d9:a1:ac:a3:ee:7f:f9:65:7e:9d:
3f:9a:13:ea:9f:06:cd:0b:c8:15:dc:aa:51:00:8a:
34:6a:8c:30:47:12:15:ed:c1:d8:5d:ff:4d:9e:44:
fb:75:d9:33:47:da:84:a5:98:d7:bf:ca:f6:76:1b:
ba:f7:3f:9a:1e:e3:a5:94:e2:b9:a3:c8:2a:ea:e8:
33:16:f6:cc:9c:4e:82:f3:9e:4b:73:2f:6e:9e:2d:
37:37:93:09:16:87:4c:f7:2b:5a:90:82:f0:39:68:
40:25:3f:6c:bc:24:d5:ec:48:b5:07:83:a9:37:f7:
18:e0:30:43:e4:13:5d:74:c0:d0:77:cf:d2:9a:7c:
7d:3a:76:27:ab:c6:8a:ea:45:bd:2e:fc:e2:79:de:
fd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AF:2B:27:17:F6:76:8E:49:DF:E5:D1:DE:F2:08:58:64:5F:EA:2D
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1a8rJxf2do5J3-XR3vIIWGRf6i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.103.21.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:a1:65:88:6b:3c:04:65:23:0d:8e:ad:0a:24:96:f7:c2:a7:
f9:e7:bc:cf:bc:2a:4f:67:af:f7:e9:93:90:34:20:ee:c9:12:
4f:d5:37:ad:d3:55:7b:bc:e7:66:ee:e6:40:ac:2b:50:d1:01:
f2:61:98:03:bc:91:21:21:6f:06:10:1b:88:11:6f:58:dc:09:
66:b5:b3:81:d3:88:2e:97:57:77:2c:ec:4f:27:b8:db:61:f1:
ff:62:9e:f8:71:2c:b0:13:19:92:58:ab:0a:1c:df:fe:c0:2e:
41:a5:65:d1:0c:7e:bb:1f:a2:f5:43:ed:cb:6d:a7:1e:3b:db:
60:1e:90:38:b3:26:f0:2d:30:b0:b7:d7:a7:29:87:01:1e:2f:
a1:a4:0e:50:10:1e:78:01:8f:b0:d7:cc:3a:f5:fe:ff:5f:9c:
01:57:97:c9:85:00:cc:07:7d:a1:aa:f5:46:5a:10:83:74:cc:
93:e2:05:2d:67:42:67:95:8c:72:0e:13:d3:9a:59:8c:07:a9:
e0:70:46:7a:d7:37:bd:4a:99:a5:b5:06:2a:c8:4a:7c:8d:fa:
9d:f5:10:43:f4:d3:85:00:99:82:7f:b2:4b:77:39:1d:fb:b4:
71:7f:93:92:12:53:0a:f8:26:9e:42:f4:23:be:b0:a7:00:81:
20:2d:f2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:39 2025 by rpki-client