Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/4kcJUtzCZjT4ZXJtZJomZRb6G3w.roa
File: 4kcJUtzCZjT4ZXJtZJomZRb6G3w.roa (raw, json)
Hash identifier: bVG9lVpnaoWZ9KVtJU5svs/DTqZroVwAqTC2XjtKxvQ=
Subject key identifier: E2:47:09:52:DC:C2:66:34:F8:65:72:6D:64:9A:26:65:16:FA:1B:7C
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0193CE5255E915FA2C81809219FCF5DF47EA
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/4kcJUtzCZjT4ZXJtZJomZRb6G3w.roa
Signing time: Mon 16 Dec 2024 07:15:22 +0000
ROA not before: Mon 16 Dec 2024 07:15:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 194.143.206.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ce:52:55:e9:15:fa:2c:81:80:92:19:fc:f5:df:47:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Dec 16 07:15:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2470952dcc26634f865726d649a266516fa1b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e0:2b:28:ec:f0:22:6b:25:b5:c7:c5:74:8c:
7c:14:51:f9:3c:09:92:16:e7:73:a4:42:c0:73:3f:
e8:9e:1e:0f:a2:06:26:44:82:dc:5a:79:8f:16:01:
62:1b:77:59:71:9b:a2:3c:1d:c0:9a:d6:a3:98:7c:
d8:3e:d5:28:78:71:1a:5f:a6:23:23:f1:5d:4d:01:
b2:2f:41:77:e0:db:e0:d9:b0:ca:82:3e:ff:b2:40:
51:49:4f:ef:65:43:4a:a0:61:7d:c8:06:18:b4:89:
07:da:3b:2c:53:10:5d:21:7e:53:cf:ce:d9:3f:3e:
03:19:fb:6f:e8:d9:bb:fe:e4:4a:08:33:19:5d:03:
44:e8:32:e5:04:da:78:7f:03:c2:f5:50:b3:dd:62:
9c:4b:65:97:d1:c0:3c:84:43:2d:27:a2:30:b3:85:
73:64:60:dd:be:be:8a:34:55:74:cc:69:bb:6e:10:
dc:08:8c:2b:e7:97:a1:ca:ce:76:05:85:73:86:8a:
96:00:1b:8a:0a:79:5c:d9:ae:ff:10:d3:82:c1:cd:
be:ea:13:39:d5:5f:32:64:4c:f6:a1:39:ef:e8:95:
f3:32:3e:03:7b:be:14:55:0a:d5:36:f7:c6:f2:8e:
ac:b1:57:5b:99:e7:36:f5:49:d5:0d:02:a9:5e:5b:
eb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:47:09:52:DC:C2:66:34:F8:65:72:6D:64:9A:26:65:16:FA:1B:7C
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/4kcJUtzCZjT4ZXJtZJomZRb6G3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.206.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:29:f0:19:33:89:75:b9:19:51:ef:77:2a:0c:44:bd:07:cb:
5e:5a:f3:b4:1a:7d:2d:6a:ac:11:ee:bb:a9:b8:cf:0c:5b:91:
ad:42:96:c8:6a:8e:06:ea:53:07:3a:36:91:36:50:78:b8:7f:
7b:da:26:ec:74:e7:95:dc:ef:9f:ee:e5:f4:f0:95:cf:11:1d:
19:6f:e7:80:2b:fc:b2:6f:a0:02:38:07:25:02:ef:3c:b5:29:
7b:cb:ad:0a:c8:2b:71:e5:fe:1a:4a:b0:82:25:b4:e2:bc:e4:
b2:73:a1:3f:f3:82:aa:a1:54:24:ea:f2:4b:8f:3a:22:8b:a6:
c6:ef:d4:76:5b:d4:68:e4:8d:6e:eb:53:58:5c:19:6e:46:f6:
e3:f2:62:2b:f1:e0:90:9c:b4:2d:ef:07:71:68:b5:50:4c:bf:
79:cd:c3:3b:89:88:d8:09:c8:e9:08:0f:31:8a:83:af:8e:ed:
51:f0:85:af:57:54:15:26:86:53:e3:f5:58:8a:41:db:49:b7:
28:bf:78:4a:8e:ba:77:d2:4d:4f:51:c1:68:9a:23:ab:17:8e:
db:e3:0a:67:67:82:2f:3e:b7:fa:1d:20:e4:e3:d0:aa:a8:5a:
e3:f4:9f:b7:bb:66:6d:99:85:13:6e:e0:b2:e1:9d:97:6d:c0:
47:37:78:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:34:19 2025 by rpki-client