Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/EPAXb0wYAoDHi1iEWriT34LhxXY.roa
File: EPAXb0wYAoDHi1iEWriT34LhxXY.roa (raw, json)
Hash identifier: Ljd5bptog7Ifwoq44ZQq0fnoWtfD5jF1Vc/q6cchhpw=
Subject key identifier: 10:F0:17:6F:4C:18:02:80:C7:8B:58:84:5A:B8:93:DF:82:E1:C5:76
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F8D9AC1F2B987B43EB396D0A50F2F
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/EPAXb0wYAoDHi1iEWriT34LhxXY.roa
Signing time: Thu 02 Jan 2025 05:49:12 +0000
ROA not before: Thu 02 Jan 2025 05:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47450
IP address blocks: 192.144.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Apr 2025 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8d:9a:c1:f2:b9:87:b4:3e:b3:96:d0:a5:0f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10f0176f4c180280c78b58845ab893df82e1c576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:67:a5:4e:65:11:ee:97:59:cc:5f:f9:ee:f6:
01:b2:3d:3f:e0:77:9a:5b:ae:a7:8b:41:28:2d:03:
94:e2:31:74:30:3e:3e:13:d6:57:38:67:8a:aa:68:
6b:f4:3b:ea:e4:e6:dc:85:28:58:f0:06:e2:f7:47:
1b:7c:be:e1:eb:9c:26:5e:b5:b9:2d:5b:21:40:1b:
1d:19:ab:c1:67:42:40:ee:c4:f5:a5:1b:8c:9b:f4:
7d:47:64:69:c4:ca:2c:ad:58:0c:eb:04:28:bf:32:
ea:fc:06:1f:51:25:25:6f:58:c8:41:7e:06:d3:78:
79:d1:49:f5:3b:4d:d0:1f:d2:ed:5e:d1:16:83:7b:
ff:51:1a:5c:f5:a8:04:e4:d3:18:b2:bc:93:ba:7c:
a3:56:9c:71:b6:72:c2:0f:da:67:77:6c:af:eb:ab:
8e:98:df:3f:6e:64:e1:15:60:ee:90:06:a8:54:8d:
4a:cd:4a:e5:5b:c8:13:88:9a:cd:5c:10:42:65:6f:
a9:1b:90:41:47:3d:5c:10:70:68:47:92:fc:14:d4:
63:16:cb:9e:b6:ca:fa:e0:0a:c6:60:c6:79:98:a7:
4b:2f:3e:ec:ae:45:4f:87:d5:04:f7:73:8a:e2:41:
01:f1:f4:0c:ba:62:ba:57:1c:26:ef:e7:06:c1:1e:
72:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F0:17:6F:4C:18:02:80:C7:8B:58:84:5A:B8:93:DF:82:E1:C5:76
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/EPAXb0wYAoDHi1iEWriT34LhxXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.19.0/24
Signature Algorithm: sha256WithRSAEncryption
30:e1:d2:3b:b3:87:b8:d7:3a:e8:8a:88:fd:4f:f2:90:16:a6:
6c:d7:08:21:9f:2f:49:af:75:4e:75:b4:9c:90:4d:2a:d3:59:
5c:fc:53:28:37:c0:d9:5e:04:2a:0b:70:69:dd:16:45:a3:5a:
6f:7d:fb:49:6a:b5:cd:ac:d5:c7:bf:28:a8:d3:eb:03:dc:bc:
14:9d:d4:11:58:2f:e1:11:ec:8c:21:83:5a:11:02:61:ac:7c:
72:a4:f3:ed:13:17:b5:64:3b:3d:69:fd:28:58:4a:70:31:ab:
a8:b7:75:84:2b:52:f1:ac:d6:e4:df:ea:d6:c7:57:68:24:c2:
4e:cc:54:e4:ff:62:83:66:8e:a9:f4:95:d2:5d:4a:a1:d5:b0:
e1:6f:2e:d5:14:ed:d6:ba:2b:35:89:3f:fd:4f:8a:cd:9b:47:
e2:0f:0a:9e:ae:0a:6e:9b:7a:4b:6a:bc:b0:7c:52:05:f3:01:
47:5f:84:db:ff:80:60:c6:f4:59:79:5c:35:ad:81:33:33:05:
6a:83:fa:7d:84:7e:a5:a7:cc:b1:bc:c1:2b:e4:64:8f:d4:54:
34:50:6c:ef:b0:f5:9e:de:2f:24:db:e3:06:cf:17:8f:11:c5:
b4:0f:d5:ea:59:42:34:a8:d5:81:f2:6a:20:3f:35:e0:25:5f:
a1:90:56:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:11 2025 by rpki-client