Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/7Pjq4qQYPgHNJbBSP72o5FLNwxk.roa
File: 7Pjq4qQYPgHNJbBSP72o5FLNwxk.roa (raw, json)
Hash identifier: yHUP4pnpCbOHIuHvi6RwZ62NwqHNYHlGZH3Fgu5Ld80=
Subject key identifier: EC:F8:EA:E2:A4:18:3E:01:CD:25:B0:52:3F:BD:A8:E4:52:CD:C3:19
Certificate issuer: /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial: 01917F7A3CD61B9CB26DB4B387197FFE7AB3
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/7Pjq4qQYPgHNJbBSP72o5FLNwxk.roa
Signing time: Fri 23 Aug 2024 13:43:23 +0000
ROA not before: Fri 23 Aug 2024 13:43:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3360
IP address blocks: 195.160.148.0/24 maxlen: 24
195.160.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Nov 2024 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7f:7a:3c:d6:1b:9c:b2:6d:b4:b3:87:19:7f:fe:7a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
Validity
Not Before: Aug 23 13:43:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ecf8eae2a4183e01cd25b0523fbda8e452cdc319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2a:91:de:59:82:39:02:39:82:2b:91:bb:8a:
5c:05:03:cf:f5:ff:71:95:3a:d0:3a:f4:92:19:1b:
b2:4a:20:9d:89:aa:0e:37:97:97:5f:08:d9:8a:af:
c3:ff:b8:36:62:ec:41:b2:8c:32:c1:e1:9c:00:ae:
1c:ec:80:32:ac:0d:0f:03:40:7a:d1:f7:fd:e0:c8:
b5:fe:9e:6f:68:be:25:d5:6d:85:32:70:01:a4:f0:
43:b8:07:1b:c5:26:eb:3f:f2:7e:11:08:5c:4c:3f:
43:18:72:2a:69:99:62:49:ec:d6:a9:e5:50:de:2e:
71:8f:62:b1:f9:0a:06:f6:79:64:98:83:40:d7:f7:
49:28:2e:d2:fc:86:ba:be:0d:16:cd:7e:99:e2:1a:
8c:08:a2:c9:f7:95:8e:cf:ec:74:20:e9:7e:92:c4:
8b:f1:31:28:74:4f:8b:97:aa:97:37:e2:de:29:62:
11:d7:ed:f1:e4:1c:bd:b4:95:55:be:c6:28:91:7b:
11:3a:8d:62:15:6e:a6:6d:bd:a9:45:65:b0:2d:65:
de:08:5f:4e:7f:5b:5d:a1:a6:fb:90:79:e9:8b:bf:
3f:7d:13:2f:88:21:b0:f7:36:3b:52:c9:37:64:c2:
f3:07:bc:d1:1b:0f:54:b9:32:e2:6e:a6:c4:6e:8f:
5a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F8:EA:E2:A4:18:3E:01:CD:25:B0:52:3F:BD:A8:E4:52:CD:C3:19
X509v3 Authority Key Identifier:
keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/7Pjq4qQYPgHNJbBSP72o5FLNwxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.160.148.0/23
Signature Algorithm: sha256WithRSAEncryption
50:12:5b:62:f5:c9:f7:73:10:d5:f6:09:c6:95:66:0d:dd:34:
03:e0:a7:32:c6:18:b5:dc:0a:84:40:77:64:b3:82:15:63:2b:
e5:ca:4f:e1:2f:8d:36:b1:b8:f6:e3:b1:1a:20:09:53:d6:68:
e1:fc:47:51:d4:3e:e8:fa:44:80:97:5a:79:68:47:53:70:6b:
56:3e:40:79:a3:37:bb:2c:ea:fa:66:75:b2:5e:b9:9c:ce:cb:
c4:f3:36:4f:4e:64:fd:b5:c1:0d:a2:67:4b:07:41:f5:82:87:
56:84:b0:96:d9:2d:0e:ca:47:d0:f8:4f:f8:bb:70:34:fa:ee:
c2:0e:3b:94:f6:a1:33:db:8d:d3:5e:cf:5d:75:6a:6d:b5:4d:
55:1d:43:0a:ea:12:7d:a9:3c:42:1c:ac:59:3b:fa:8c:e2:b7:
fd:49:8b:00:d8:c1:18:e7:7a:51:27:3c:f2:6c:10:32:95:e0:
75:e9:9f:a9:be:2e:d5:c9:f7:75:70:d5:95:bd:e1:f2:0b:2c:
59:4b:68:3a:52:57:13:7f:f3:0f:06:16:36:57:62:bf:63:f1:
a2:58:08:54:08:47:08:06:bd:36:da:07:b3:2d:e0:e6:7a:4a:
e5:f9:28:7c:4d:bd:eb:7d:74:b3:b5:bc:bd:b4:05:05:98:1d:
91:0e:86:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:46 2025 by rpki-client