Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/DDSz5K4f0O89Ity4XU9_nbTuyKQ.roa
File: DDSz5K4f0O89Ity4XU9_nbTuyKQ.roa (raw, json)
Hash identifier: v+VjX2Kx1c5ZmOodA42D50PrBSMX0v4dG+s50WOaxqo=
Subject key identifier: 0C:34:B3:E4:AE:1F:D0:EF:3D:22:DC:B8:5D:4F:7F:9D:B4:EE:C8:A4
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0190D025D72D1B5E2E95FF9F24404E83A466
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/DDSz5K4f0O89Ity4XU9_nbTuyKQ.roa
Signing time: Sat 20 Jul 2024 12:37:38 +0000
ROA not before: Sat 20 Jul 2024 12:37:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60446
IP address blocks: 194.146.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Sep 2024 15:15:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d0:25:d7:2d:1b:5e:2e:95:ff:9f:24:40:4e:83:a4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jul 20 12:37:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c34b3e4ae1fd0ef3d22dcb85d4f7f9db4eec8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:30:6d:a7:b3:74:d3:15:a3:3c:ea:0e:23:6d:
ed:a9:09:d0:c7:36:30:1c:0e:29:92:95:9b:f8:88:
c2:44:5e:ca:ba:a6:32:c6:3f:bc:c9:0e:17:e7:ee:
94:ef:c6:10:02:55:dc:b5:07:1d:1c:f5:13:3a:1d:
21:6d:01:ea:79:c4:7a:0d:1c:14:52:c7:93:03:a9:
ed:c4:e2:1f:f5:03:da:27:ad:29:7f:94:d8:f9:f8:
2d:a5:68:5f:7a:0e:f9:2e:ec:5b:d8:b1:59:33:1c:
46:17:7b:b7:2a:fd:89:10:ec:fb:cd:fb:03:38:cd:
f6:5e:d9:fa:13:6c:d0:5b:fa:bf:ad:24:74:69:79:
57:c8:42:3d:8e:64:13:03:df:cd:c7:55:67:3a:5d:
79:b4:81:aa:48:28:73:00:a8:b8:61:2e:e4:4b:20:
88:c5:04:01:5b:5d:0a:ef:42:8c:2f:7e:9e:05:ac:
71:6e:6c:b6:27:ca:3d:43:af:8c:83:90:f8:81:9f:
53:16:1f:2f:17:a7:92:47:42:99:09:0b:24:cb:c5:
03:29:02:3d:4d:7f:dd:05:8d:53:31:11:79:a2:64:
da:ee:8a:bd:e5:8f:5b:15:64:43:7a:a1:f5:55:7f:
ce:6c:b2:74:87:d3:4b:c7:f6:4f:fd:b3:b5:5c:30:
1d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:34:B3:E4:AE:1F:D0:EF:3D:22:DC:B8:5D:4F:7F:9D:B4:EE:C8:A4
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/DDSz5K4f0O89Ity4XU9_nbTuyKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.50.0/24
Signature Algorithm: sha256WithRSAEncryption
05:96:2f:b4:62:26:12:92:75:12:f3:bc:10:54:83:98:e9:9a:
58:15:74:58:8b:7b:12:63:f2:c4:c7:f0:58:1e:93:3f:b1:6f:
43:c5:d1:ee:ec:d9:f9:54:06:fd:fd:29:d8:33:38:0e:3d:ff:
d1:9b:bd:73:d9:08:e2:2b:52:28:ad:e6:55:79:a0:12:30:98:
40:25:38:61:b9:2c:f5:ec:50:b1:91:fa:ca:a4:0c:86:b0:83:
d1:22:e9:4d:07:1a:d4:24:52:1e:f0:d4:64:9d:92:c8:54:42:
69:0e:d8:92:ed:b1:c0:18:18:04:8f:aa:5b:e0:20:78:72:49:
16:38:e8:b5:c0:4c:5a:8f:b3:84:fb:7e:23:28:5a:6a:73:95:
b7:b9:70:2d:d8:2d:c0:17:d1:06:22:63:18:d4:9d:e4:ef:22:
5f:95:1b:a4:9f:15:06:71:8d:6b:2a:1c:6c:ec:4e:aa:6a:16:
0a:e2:d8:95:13:70:40:6d:df:b1:ff:4e:c8:09:b6:9f:86:04:
0e:f6:36:52:32:6a:be:a3:43:6a:95:1a:28:a0:ba:ec:74:07:
10:1b:50:ca:e4:29:d9:0a:12:8d:a3:ff:aa:c7:f5:b1:cf:5a:
f0:eb:d5:cd:b4:03:3b:b3:a1:52:05:75:48:6f:36:63:33:66:
16:91:50:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:24 2025 by rpki-client