Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/7ReSVoSFuJTUO73VmGaO9-neOPA.roa
File: 7ReSVoSFuJTUO73VmGaO9-neOPA.roa (raw, json)
Hash identifier: Ck7u+tV3a5E7NvinuE41Df6E9nnohxDuXWLS9P82D20=
Subject key identifier: ED:17:92:56:84:85:B8:94:D4:3B:BD:D5:98:66:8E:F7:E9:DE:38:F0
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 0190DF47700637B6BCBD51019D144347EA21
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/7ReSVoSFuJTUO73VmGaO9-neOPA.roa
Signing time: Tue 23 Jul 2024 11:08:39 +0000
ROA not before: Tue 23 Jul 2024 11:08:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399471
IP address blocks: 194.156.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:df:47:70:06:37:b6:bc:bd:51:01:9d:14:43:47:ea:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jul 23 11:08:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed1792568485b894d43bbdd598668ef7e9de38f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:eb:f2:72:4d:81:0b:0e:01:88:8f:63:cc:2d:
56:6b:46:8f:39:8d:8f:ae:eb:46:b2:62:ec:01:e1:
e8:97:21:64:f9:7f:57:87:96:01:db:8e:0f:6a:01:
c0:73:ba:b8:f2:2b:9d:f5:2c:10:fa:39:37:08:af:
66:5f:38:f3:41:31:d3:70:75:dd:63:40:fe:76:e5:
ec:ad:de:93:ef:d1:ef:2d:6f:55:cd:d0:14:6d:d0:
a8:38:a0:1d:c2:d3:a0:fa:41:a6:7f:30:78:48:48:
fc:47:93:5f:82:f1:73:49:c5:99:7f:b0:b5:fa:02:
e5:7e:3b:6e:84:4f:c4:a1:c1:44:42:eb:58:e5:4b:
6f:6c:49:78:75:ab:3e:81:fe:6f:f4:c2:8f:db:f0:
c3:93:9b:cc:9c:6f:39:06:6c:13:ca:ec:cb:b7:98:
f1:55:d2:69:73:fb:85:23:c5:a8:3d:b1:c1:4b:66:
5b:8e:34:c2:fc:5a:30:94:d0:64:45:c2:4b:21:98:
88:e2:31:be:bc:aa:81:38:53:58:fd:61:b8:2a:e4:
f4:70:bb:f6:ce:73:ff:bf:ef:cb:96:fa:ae:9e:25:
09:ac:ec:6c:63:b3:f0:cf:fb:3c:5c:4e:ba:cf:3f:
a1:d9:39:48:fb:62:7e:20:9d:95:29:4e:29:68:be:
57:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:17:92:56:84:85:B8:94:D4:3B:BD:D5:98:66:8E:F7:E9:DE:38:F0
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/7ReSVoSFuJTUO73VmGaO9-neOPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.79.0/24
Signature Algorithm: sha256WithRSAEncryption
20:92:e2:70:7c:8d:37:aa:7a:91:7c:bf:a4:59:6d:32:7a:4a:
29:a7:9b:2a:9f:e3:b5:73:4d:b1:39:9f:0b:ea:db:a1:bd:f9:
cb:fc:34:f6:83:33:8f:47:4d:f9:c2:43:e1:02:fe:8a:ca:ca:
92:7f:30:5a:10:85:70:11:f9:63:dc:8f:07:a1:9f:f3:6a:63:
a5:bc:8c:b1:8b:dd:41:67:8b:5c:63:41:04:0f:ed:19:a1:9d:
6e:07:c7:35:88:e3:cb:09:6b:86:34:cc:d1:62:2b:05:a4:5f:
06:56:eb:2f:ff:fc:f5:9e:56:23:21:c8:a3:06:c5:43:9c:6a:
78:6f:1a:78:3d:42:b2:ef:da:83:fa:09:1a:4e:bd:74:46:1d:
08:68:eb:a8:85:c2:1b:62:32:c1:85:13:5b:5b:d9:26:f3:5d:
47:dd:fd:41:30:b8:3e:ad:6f:ae:11:f2:d6:b4:00:a8:22:1a:
bb:15:6e:3c:73:32:87:26:7b:86:2b:ca:8b:bc:24:86:9b:97:
65:eb:b2:d9:cf:cf:90:d8:8d:f4:5f:47:47:60:2c:86:d7:6c:
d3:42:9f:c3:58:a8:22:1f:59:ff:20:82:ee:e5:8d:91:f0:95:
5b:ca:63:c4:bd:40:a1:c3:ca:8d:2e:e4:9d:6d:39:f6:4a:ef:
e0:79:dc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:06 2025 by rpki-client