Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/v4NNf7k2Nw-5OsuOymQDw49YGnU.roa
File: v4NNf7k2Nw-5OsuOymQDw49YGnU.roa (raw, json)
Hash identifier: JOmSkuDvDfYfHazBlZUuGTld9186J2b5kSK2P/0f268=
Subject key identifier: BF:83:4D:7F:B9:36:37:0F:B9:3A:CB:8E:CA:64:03:C3:8F:58:1A:75
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC803011ADE960BF5C4283236CEFE7B45
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/v4NNf7k2Nw-5OsuOymQDw49YGnU.roa
Signing time: Tue 02 Jan 2024 02:31:29 +0000
ROA not before: Tue 02 Jan 2024 02:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203245
IP address blocks: 194.71.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:03:01:1a:de:96:0b:f5:c4:28:32:36:ce:fe:7b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf834d7fb936370fb93acb8eca6403c38f581a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:73:4d:08:a8:f5:a6:0c:a0:e0:35:ba:97:d1:
e9:6e:b3:59:f8:1f:be:1a:ba:43:82:9f:11:b5:34:
6b:d7:6a:02:08:03:ef:8f:e0:2f:5e:ad:0c:09:a3:
de:af:08:7e:41:61:04:1c:eb:18:14:4f:5e:21:6a:
31:62:4b:2c:4a:eb:bc:60:f9:e8:11:6c:6f:d9:0d:
34:51:27:7b:3f:43:15:ee:d8:84:ea:9a:89:15:1f:
bf:e3:6a:f3:5b:0b:b5:46:33:28:2b:05:76:69:8e:
76:8b:75:48:7c:a9:ab:df:b6:00:94:e7:5f:b7:c0:
64:93:90:fd:5c:09:19:71:1b:e5:cd:fd:f8:dc:06:
4d:7c:16:a4:92:fa:6e:db:95:72:87:8a:55:62:b0:
57:7c:dd:c6:ab:d7:2f:f4:db:18:03:ca:ff:16:03:
95:0d:50:c1:06:3b:0e:ea:86:37:04:4c:ad:a5:49:
54:f7:9a:ac:71:27:47:85:3f:58:fa:92:d5:14:53:
08:a8:d8:ef:77:d6:5b:c6:07:17:07:0f:38:04:c7:
bb:8b:c7:03:15:8c:c8:04:de:bc:41:c2:45:8c:f1:
c2:c1:4e:01:4f:6e:0b:85:a7:44:a5:8b:c5:91:83:
60:36:15:c1:92:63:6d:bc:7c:17:c1:cd:e2:60:8c:
57:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:83:4D:7F:B9:36:37:0F:B9:3A:CB:8E:CA:64:03:C3:8F:58:1A:75
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/v4NNf7k2Nw-5OsuOymQDw49YGnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.71.146.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:25:98:8a:0b:cf:b7:e3:be:dc:f3:d2:39:a5:34:c1:8e:00:
de:f9:75:57:cc:d6:63:66:b8:3b:2b:c5:2c:16:b4:1c:60:60:
84:1f:ef:d8:0c:ca:c5:bb:4a:88:00:00:fa:ef:ed:64:17:69:
cd:67:fb:2d:fe:a4:91:60:ca:4e:89:6d:1f:db:70:69:95:8f:
ae:ea:5f:14:f0:1f:3a:d3:1a:ca:47:ea:6d:9d:8e:1f:e0:68:
d8:59:cd:51:bc:42:70:cc:f8:1c:31:e7:f0:56:37:08:b9:98:
1f:59:68:a8:1f:8d:ed:12:44:85:18:73:7e:35:49:e3:c5:2b:
8d:e8:2d:c8:ac:e1:c2:03:2e:b8:1d:05:0d:f7:a0:1b:a0:db:
f4:23:3e:e5:89:51:32:43:22:bd:25:fa:e3:3f:fb:0a:7d:9d:
3c:49:96:d9:4c:53:d1:42:01:83:8d:36:88:2e:fc:00:5d:6a:
3e:84:83:cb:ad:4f:72:15:79:42:3d:83:d5:72:0a:e9:f9:47:
d6:06:83:ab:5c:38:8b:cf:ba:6a:c9:5e:45:1e:4c:27:ca:ed:
8c:ba:3f:11:5d:7f:98:1b:21:12:b0:3f:eb:f9:fb:3b:16:81:
4f:d1:a5:a8:d4:3a:6e:6e:d4:ee:1f:51:77:4d:33:9b:27:2a:
d8:1b:f5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:14:24 2025 by rpki-client