Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/aXECGdpeOYLiX4TAi-6MvQElL1s.roa
File: aXECGdpeOYLiX4TAi-6MvQElL1s.roa (raw, json)
Hash identifier: jNtjFa2QuoA6E+DtTb3X210lZYpvMBT7bS3f5KOeajo=
Subject key identifier: 69:71:02:19:DA:5E:39:82:E2:5F:84:C0:8B:EE:8C:BD:01:25:2F:5B
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 018F96F3174D532057D10A4D06C5B3E2B9FC
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/aXECGdpeOYLiX4TAi-6MvQElL1s.roa
Signing time: Mon 20 May 2024 17:01:04 +0000
ROA not before: Mon 20 May 2024 17:01:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51520
IP address blocks: 94.232.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:96:f3:17:4d:53:20:57:d1:0a:4d:06:c5:b3:e2:b9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: May 20 17:01:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69710219da5e3982e25f84c08bee8cbd01252f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:40:c2:42:65:a4:bf:64:6d:ab:2d:71:c4:f6:
c1:eb:54:51:69:2a:11:ac:a1:b4:50:e4:90:a7:da:
bb:54:b4:60:85:0b:83:cd:d2:d8:66:b1:62:75:f6:
78:c1:71:1f:7d:ab:d0:00:f4:45:4f:f7:b8:69:ee:
a9:ea:79:7b:37:14:a2:46:f2:2a:ee:32:61:cc:f5:
2d:1b:44:98:fe:1e:d6:df:b1:2a:67:b1:78:85:62:
ed:28:5c:da:8e:c5:ec:f2:74:c9:6a:8e:db:4c:91:
3c:98:9a:9a:fd:f6:8c:3b:f0:9f:e7:e0:c3:77:d6:
2e:0f:df:07:c4:79:0b:d8:49:1b:5e:3e:8b:0d:34:
f3:15:07:5c:66:21:c2:7b:90:0b:83:ba:6a:21:e8:
ff:f8:bd:a2:e4:ce:c4:72:16:34:9b:d5:f0:f5:04:
82:16:de:cd:f6:70:1d:91:54:1a:89:68:23:e7:b3:
d7:e0:73:f8:ec:ba:73:83:26:e1:e6:09:65:51:25:
ae:d0:89:02:39:77:5e:e6:53:dc:08:4c:21:70:66:
14:d4:7d:30:d4:18:21:60:1e:b6:9f:37:e3:e2:15:
fa:3e:4e:1b:f5:d3:02:b5:68:70:a3:10:e2:38:62:
6f:f1:7a:8f:61:03:33:4a:12:a2:4a:8e:c9:3c:7d:
a6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:71:02:19:DA:5E:39:82:E2:5F:84:C0:8B:EE:8C:BD:01:25:2F:5B
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/aXECGdpeOYLiX4TAi-6MvQElL1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.251.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:f6:d7:e7:8e:22:8f:7a:2f:57:0f:9f:1d:9b:5c:bc:ba:58:
eb:e7:b0:f0:58:d9:01:cb:d0:4d:e8:73:d6:59:10:8c:0f:8c:
50:f7:19:ea:9c:fd:c6:93:2d:57:e9:f0:bd:d4:9d:52:1f:1b:
1e:59:e2:2c:7b:63:28:c2:fb:1e:c3:86:8b:05:1b:38:31:07:
0e:16:eb:cc:6b:3f:c8:9a:c6:04:4c:18:b9:7a:bb:d6:23:b6:
5e:a1:ff:94:2e:db:71:51:33:b0:b9:47:f5:54:ec:09:b3:d4:
71:d0:34:2c:bf:c7:a9:79:27:49:2b:50:e5:8e:de:73:18:43:
66:d6:37:1b:57:cc:13:90:25:d4:23:e3:58:ed:19:b7:80:8f:
2a:67:28:05:7a:f9:58:c0:df:68:34:17:b2:9a:39:6a:f3:5c:
05:c5:00:1d:d9:ac:b8:9a:a7:dd:2e:4c:92:ba:53:8b:55:ed:
54:2a:04:ab:8a:a8:87:be:3d:25:42:ab:12:1e:06:16:2a:7c:
c4:50:3b:f3:bf:43:39:59:7e:93:5e:a6:ec:a9:c6:42:d7:51:
f6:c5:e9:1c:9b:ba:33:90:70:6e:b4:a4:63:73:3f:e9:13:2e:
b4:78:a3:44:8d:8d:b5:1a:43:68:4b:1f:eb:16:d5:ae:00:4a:
f5:d5:44:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:46:23 2025 by rpki-client