Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/sE-ADxw6lBbVPh0sQ61hHSOj8Vg.roa
File: sE-ADxw6lBbVPh0sQ61hHSOj8Vg.roa (raw, json)
Hash identifier: 1Ab9HfcYRz/wpFQKXynzu1VKefgydng9L9GhFzB8SwY=
Subject key identifier: B0:4F:80:0F:1C:3A:94:16:D5:3E:1D:2C:43:AD:61:1D:23:A3:F1:58
Certificate issuer: /CN=1534838bb317b8186699f0a4485db6d9da1908d2
Certificate serial: 01942143D3F95E3E400B9F1B7B12E0ED1903
Authority key identifier: 15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/sE-ADxw6lBbVPh0sQ61hHSOj8Vg.roa
Signing time: Wed 01 Jan 2025 09:48:00 +0000
ROA not before: Wed 01 Jan 2025 09:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2602
IP address blocks: 158.64.0.0/16 maxlen: 24
185.149.136.0/22 maxlen: 22
193.168.64.0/18 maxlen: 24
2001:a18::/29 maxlen: 48
2001:a18:ff00::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 25 Mar 2025 13:59:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d3:f9:5e:3e:40:0b:9f:1b:7b:12:e0:ed:19:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1534838bb317b8186699f0a4485db6d9da1908d2
Validity
Not Before: Jan 1 09:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b04f800f1c3a9416d53e1d2c43ad611d23a3f158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:d8:17:20:b8:62:24:e6:e3:f2:68:53:0a:
37:e6:dc:50:25:e9:90:b1:39:fe:3b:bd:1c:93:9c:
16:8f:71:89:38:2c:0e:84:21:3d:9b:32:7c:35:e4:
18:af:ae:9d:58:e6:f8:86:ff:fc:47:08:5e:57:d5:
6c:fa:fd:5a:db:c1:75:41:02:64:05:af:d8:78:8f:
bb:a9:a1:02:b0:0c:d0:3f:1a:e7:ff:9a:54:87:15:
6b:a1:be:bb:75:e5:2a:42:b3:96:5a:cc:9b:19:24:
7c:df:ee:63:43:82:47:8b:b7:ae:f2:85:41:45:57:
43:12:d8:7f:97:24:e6:88:72:03:20:28:27:a6:a0:
57:cd:13:94:c0:cd:b7:81:68:78:6d:c1:58:be:c6:
fc:2d:8c:80:11:91:43:28:33:0f:6e:6e:24:ce:a9:
50:8c:32:41:a9:cb:5f:e4:61:80:e2:43:30:e1:da:
e8:30:83:6b:12:cd:04:b2:49:bc:12:7b:4b:e4:f3:
11:2a:bf:f1:14:2e:dd:41:e1:e2:ce:da:3d:3c:9f:
29:ec:6a:f1:0e:94:e7:28:09:2a:37:f8:12:d9:68:
96:7c:e5:a1:e6:f1:50:81:6e:52:15:8c:01:c3:7f:
db:08:ef:49:46:3a:f7:6b:1b:dd:59:19:a6:13:b2:
e9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4F:80:0F:1C:3A:94:16:D5:3E:1D:2C:43:AD:61:1D:23:A3:F1:58
X509v3 Authority Key Identifier:
keyid:15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/sE-ADxw6lBbVPh0sQ61hHSOj8Vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.64.0.0/16
185.149.136.0/22
193.168.64.0/18
IPv6:
2001:a18::/29
Signature Algorithm: sha256WithRSAEncryption
98:3f:59:d5:e8:11:f4:1d:b8:2b:30:4d:64:d5:06:76:67:4b:
7e:84:d6:bd:52:ee:93:b2:12:63:27:b3:92:92:33:c8:f6:d9:
7d:51:4e:96:e7:4f:0d:29:ac:b6:d9:45:4c:23:d5:d1:6f:4d:
c4:71:82:02:23:7b:0b:24:a5:85:73:57:35:83:10:3d:7f:ba:
f5:a8:11:39:e8:67:99:b5:80:9f:01:c0:f2:d8:31:a7:2d:06:
ac:c7:a7:83:fd:4c:ab:95:5e:0e:73:ea:2e:92:5d:df:2f:25:
52:0d:c9:a7:f1:d6:eb:de:c9:65:aa:43:b5:22:84:7d:eb:a1:
9e:9b:a5:13:71:4c:49:75:1a:0f:aa:4a:36:39:fd:60:f4:77:
70:f4:a9:64:f2:e9:81:f4:0e:8a:f1:5a:37:0d:40:ae:49:d8:
55:26:5e:c2:dd:1a:ff:29:30:83:f1:d2:d4:be:30:77:52:a0:
34:26:08:78:fb:67:fe:98:97:65:91:ab:b1:e6:0f:91:ea:69:
ef:91:28:f0:60:32:33:7f:10:1e:75:db:ea:34:76:46:d0:4d:
ae:44:f8:d0:fa:38:07:83:10:d2:3b:25:dc:d2:8f:fa:6e:ee:
a3:cb:1a:b3:4d:88:ec:b9:f6:00:85:45:d2:76:65:a2:62:e8:
3f:3a:c3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:47 2025 by rpki-client