Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ABqjsFmSVg8-Qgdf4_JcOdwGPrY.roa
File: ABqjsFmSVg8-Qgdf4_JcOdwGPrY.roa (raw, json)
Hash identifier: b6rBKTc6mf807YBVBYCJYUeyCGnotIBv/d0/1yjCSFs=
Subject key identifier: 00:1A:A3:B0:59:92:56:0F:3E:42:07:5F:E3:F2:5C:39:DC:06:3E:B6
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0195AF15178E6043509FAEC374FBB2766DB4
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ABqjsFmSVg8-Qgdf4_JcOdwGPrY.roa
Signing time: Wed 19 Mar 2025 15:45:49 +0000
ROA not before: Wed 19 Mar 2025 15:45:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14616
IP address blocks: 192.144.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Apr 2025 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:af:15:17:8e:60:43:50:9f:ae:c3:74:fb:b2:76:6d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 19 15:45:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=001aa3b05992560f3e42075fe3f25c39dc063eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:3c:06:67:ac:ac:d1:1a:5b:90:41:18:3c:
99:13:b4:fa:6a:44:d0:bd:1f:ff:d4:e9:4c:02:f1:
b2:55:81:40:bb:ea:3d:c4:65:ca:be:ed:3e:31:e0:
f2:04:86:c3:2e:f1:a4:6c:ee:09:6d:e0:40:2a:b4:
c7:20:c2:10:a3:d6:3b:86:94:69:09:b9:ad:0a:be:
cf:01:93:e0:e2:e7:3f:37:ba:0d:b5:fa:29:2d:bd:
f0:9e:bc:07:34:de:8e:f1:8b:b3:c9:be:bb:d9:56:
14:95:07:83:15:b3:86:c1:68:ab:89:d1:66:1e:ea:
ea:9c:25:4a:9e:8c:2c:78:75:4d:88:74:4c:fa:32:
4a:2f:50:2a:6c:ff:47:af:c4:2a:9d:cb:57:f0:5f:
38:ef:ed:98:b9:70:ec:d5:c3:0b:f9:1d:bd:58:79:
39:8c:66:19:9c:ad:d1:20:93:76:93:64:b8:7f:89:
08:3e:70:5b:a6:94:24:14:8c:ed:ac:87:97:14:b3:
29:40:db:e2:02:49:52:b6:2f:cb:ab:51:63:23:89:
a8:8d:99:4a:78:88:5a:a1:96:85:fa:11:2a:68:87:
5c:88:64:41:c0:ed:bc:09:fa:e7:a7:3c:1f:1e:27:
37:95:19:7d:6f:fe:f7:d5:9e:27:c3:17:59:0a:e9:
60:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1A:A3:B0:59:92:56:0F:3E:42:07:5F:E3:F2:5C:39:DC:06:3E:B6
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ABqjsFmSVg8-Qgdf4_JcOdwGPrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.19.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:68:e7:f4:cc:c2:ff:c3:62:7a:b8:a4:3f:29:18:91:9f:1a:
86:f6:5b:52:66:98:cd:49:5d:05:0d:c2:6b:d5:1b:16:78:9e:
bd:24:b4:35:08:dc:94:72:4f:d3:fa:34:6c:c7:2b:56:58:8c:
47:33:9f:43:14:c0:54:72:4e:7a:67:36:e4:98:2a:82:9c:28:
ee:a8:f8:8e:5e:7c:03:70:45:b3:db:a4:3f:1b:7f:bb:80:3c:
e4:86:8d:03:0b:30:17:b1:b3:c3:c0:ff:e2:d4:9c:40:4d:e8:
f8:f7:11:b8:67:ae:bf:6d:c6:34:b4:48:55:a1:50:c6:b6:e1:
4d:2c:61:d1:4b:f1:bc:85:5c:f7:10:4d:e4:09:a6:ce:28:5b:
e7:05:c8:04:c0:f1:da:56:5c:26:65:e0:6c:d0:31:84:63:e2:
7b:29:d4:16:f1:78:a6:84:a1:eb:73:a8:03:f6:dc:4f:e2:a7:
a3:6a:0e:2f:5e:3c:6a:ef:04:a3:7f:9d:56:4e:3b:33:af:45:
88:00:3e:d3:4f:7d:6c:be:5d:27:a1:b5:f2:fa:26:cd:db:e4:
5e:ec:da:fc:19:65:80:77:c2:64:df:83:84:a6:89:9e:7a:17:
7a:70:d8:9b:ce:27:ee:a1:b7:fc:2e:71:53:7c:84:3b:54:21:
96:81:1d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:44 2025 by rpki-client