Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/AfT8JsW1YmZl2yka1D0Vd-Gx_Qs.roa
File: AfT8JsW1YmZl2yka1D0Vd-Gx_Qs.roa (raw, json)
Hash identifier: cAjDFSOJ2Mwn7+/k7AKMlyXjKp9W07yxmeHMi0YSrY4=
Subject key identifier: 01:F4:FC:26:C5:B5:62:66:65:DB:29:1A:D4:3D:15:77:E1:B1:FD:0B
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 018E2C4EDF120CD8265A2867272C569299D6
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/AfT8JsW1YmZl2yka1D0Vd-Gx_Qs.roa
Signing time: Mon 11 Mar 2024 06:59:10 +0000
ROA not before: Mon 11 Mar 2024 06:59:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 152.89.28.0/22 maxlen: 24
193.135.157.0/24 maxlen: 24
193.135.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 08:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2c:4e:df:12:0c:d8:26:5a:28:67:27:2c:56:92:99:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Mar 11 06:59:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01f4fc26c5b5626665db291ad43d1577e1b1fd0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:51:fb:57:ab:c9:55:69:6f:9e:d9:57:88:65:
04:4a:ec:cb:d2:79:73:3f:cc:a2:b0:e7:f9:f3:65:
1c:e1:ea:2c:d2:3e:23:a3:70:a0:e3:34:8e:1b:ea:
ee:a2:34:a5:10:10:7d:b7:a6:85:5e:48:e2:70:a3:
61:45:48:1e:a9:eb:e1:7a:71:a5:ef:43:4b:c0:4d:
4b:0d:ed:5a:df:f3:ae:93:82:ef:2d:6d:22:01:b5:
ca:48:02:14:ec:c8:08:ba:85:12:8b:10:d7:ab:69:
53:64:3a:11:3d:f1:f9:ec:f4:55:ce:00:ef:57:cd:
da:ac:6e:b2:6c:00:36:0d:a3:c8:10:9e:91:bf:92:
5b:86:7e:90:a3:23:7c:39:8e:3c:0c:a7:86:aa:9d:
38:a3:c6:a8:11:ef:d3:df:14:45:8c:95:ce:b6:6c:
bb:30:a4:1f:cd:06:e9:ab:0f:6f:ea:9f:7e:11:43:
21:69:c7:f2:3b:07:09:36:3b:e0:06:84:67:26:60:
d4:1a:44:22:76:c5:7d:20:76:da:2a:22:d7:c6:7c:
7c:3e:0c:28:91:e1:91:a3:9b:1c:a6:e9:7e:18:c5:
46:5d:5c:37:db:6e:7a:93:89:29:a7:79:bd:33:67:
b2:41:7c:24:6a:6b:8a:d4:8b:ec:21:16:3c:b7:b0:
87:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F4:FC:26:C5:B5:62:66:65:DB:29:1A:D4:3D:15:77:E1:B1:FD:0B
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/AfT8JsW1YmZl2yka1D0Vd-Gx_Qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.28.0/22
193.135.157.0/24
193.135.174.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:b3:32:37:8f:d4:b7:26:8e:4a:8e:0e:bd:e6:ef:32:96:e4:
24:a8:d1:34:b1:1f:3d:9b:0b:56:96:19:57:ec:7a:23:88:03:
d5:da:5c:e1:05:44:4f:df:de:31:b2:fe:b9:39:38:52:ab:d8:
fb:8e:ed:b6:60:b9:4b:55:6c:e4:97:c5:ef:44:19:f4:9b:93:
19:b9:5c:18:d4:6c:af:a6:89:b8:0b:c9:2f:3e:2a:0f:25:c2:
6d:10:33:77:d0:16:5f:3e:f1:91:ac:f6:06:04:67:59:a9:63:
9c:d8:42:a9:1d:f8:92:f5:33:59:00:dd:64:ab:cb:c5:89:73:
af:f8:1f:15:4d:1d:0b:eb:5c:32:7f:3f:e0:36:05:84:b5:39:
c1:11:19:53:dc:c1:58:3a:18:44:13:24:36:97:16:e3:7a:f1:
38:8b:9b:96:19:4a:3c:14:55:53:78:79:36:d2:56:05:ca:cb:
99:f0:d7:58:ce:64:cf:07:0b:da:5f:ba:6c:84:71:4f:42:ec:
67:d5:fb:dd:fa:23:3e:eb:59:44:6d:ca:ec:27:26:e1:f4:cc:
ba:c9:90:97:7c:be:99:29:6b:c3:d8:b9:45:c4:b9:98:03:35:
2c:63:56:d9:8a:50:4b:3e:34:93:b2:21:d2:65:51:7b:cd:48:
cd:83:17:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:06 2025 by rpki-client