Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/SlRjQ6bmdttFWb2rVWYuOXQIBeo.roa
File: SlRjQ6bmdttFWb2rVWYuOXQIBeo.roa (raw, json)
Hash identifier: fRYYp05pDFoMGhH1QRV7rAeoHVfNDBFIubLGzvk5Ax8=
Subject key identifier: 4A:54:63:43:A6:E6:76:DB:45:59:BD:AB:55:66:2E:39:74:08:05:EA
Certificate issuer: /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial: 0190311B5A5DB125D2F0641ED287F1040271
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/SlRjQ6bmdttFWb2rVWYuOXQIBeo.roa
Signing time: Wed 19 Jun 2024 15:26:34 +0000
ROA not before: Wed 19 Jun 2024 15:26:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203
IP address blocks: 195.160.0.0/18 maxlen: 18
195.160.96.0/19 maxlen: 19
195.160.148.0/24 maxlen: 24
195.160.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Aug 2024 13:41:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:31:1b:5a:5d:b1:25:d2:f0:64:1e:d2:87:f1:04:02:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
Validity
Not Before: Jun 19 15:26:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a546343a6e676db4559bdab55662e39740805ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:95:53:34:a1:da:a1:1d:a6:db:4a:5c:3a:e2:
4a:e3:67:6d:13:4c:47:35:10:7e:91:7c:2b:2b:03:
15:a2:75:95:c2:bc:15:65:1f:a2:ee:d0:17:42:fd:
cf:cf:e8:20:61:7c:30:18:68:8e:a9:23:23:ba:37:
eb:aa:78:6f:b9:20:04:e2:e0:36:6b:44:07:84:92:
f2:17:4f:b1:f4:ac:25:a2:41:82:c3:0b:0f:51:e6:
87:ce:a6:cc:d1:f4:2e:5d:ba:50:70:bd:69:5f:5e:
e2:2b:66:81:2e:b7:3a:8f:36:fb:25:d3:75:02:3a:
6a:87:cf:63:e8:fd:6d:3f:59:4a:cd:b5:d2:14:a2:
12:7b:93:e1:e7:1a:60:13:b5:63:43:c7:39:c7:36:
ef:8b:08:b5:43:19:04:fe:54:19:98:28:1d:b8:b6:
a3:8e:11:3e:ed:9f:e1:ac:9e:ee:ca:59:bb:f5:bf:
a2:28:6a:56:d4:06:c5:79:59:a7:8e:ef:a0:af:ba:
a0:f5:65:08:02:5d:4e:5b:63:f1:82:08:6e:43:e1:
92:c0:a5:a9:69:bb:4d:ab:5e:d9:92:d9:25:c5:8c:
79:e9:6c:a8:0d:2e:55:06:68:7a:f9:52:b0:28:bd:
bb:cc:db:ad:b6:c1:47:cc:dc:2f:c6:86:df:13:db:
e1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:54:63:43:A6:E6:76:DB:45:59:BD:AB:55:66:2E:39:74:08:05:EA
X509v3 Authority Key Identifier:
keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/SlRjQ6bmdttFWb2rVWYuOXQIBeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.160.0.0/18
195.160.96.0/19
195.160.148.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:f8:5a:5d:40:75:9c:f2:89:36:c7:68:da:ea:45:f6:5d:27:
ba:5b:54:1c:1a:6c:ec:68:bd:7d:9e:b5:ed:5b:2a:5d:e6:ae:
35:c4:5e:05:13:02:57:29:76:d1:2f:48:5b:a5:bb:42:91:e6:
36:b4:c4:7f:98:7a:67:a9:21:44:ee:24:e9:5f:40:2c:41:cc:
ef:e5:0f:12:86:00:16:55:55:17:e9:b7:7b:14:c6:ae:b7:23:
fb:cb:6c:a6:82:cb:41:89:03:fa:de:64:15:01:2d:cf:20:5e:
93:dc:d9:75:b7:de:fd:14:ae:85:84:e2:c8:b1:b3:1e:01:9f:
24:ec:8e:ed:7b:12:db:1a:7a:e4:ac:a9:a0:21:03:74:0c:09:
c6:5e:69:db:bb:65:a2:4b:24:a6:85:04:4b:3c:3e:60:fb:e3:
c3:4e:de:d5:d4:aa:c9:9f:21:d6:5d:1c:a1:98:33:1e:0d:bd:
f6:be:af:2d:d9:15:30:66:7d:3e:c7:ab:54:d4:1f:2a:52:90:
37:22:d8:ad:1d:2d:a9:29:52:59:54:f3:30:71:3f:90:f1:a0:
4d:4d:4c:57:d7:52:83:4b:11:ad:e9:60:8c:07:bb:c1:6d:d5:
67:c0:a2:8a:a0:0c:07:f8:0e:37:2e:d0:cf:8e:ec:3f:18:7d:
cc:0d:9d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:21 2025 by rpki-client