Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/t-ixqNQAznIwjLRUP63qWTKxirk.roa
File: t-ixqNQAznIwjLRUP63qWTKxirk.roa (raw, json)
Hash identifier: k7vGNlHJlKdYImVYtM72nrjbbljjgRDo7FNzwZ/8PSI=
Subject key identifier: B7:E8:B1:A8:D4:00:CE:72:30:8C:B4:54:3F:AD:EA:59:32:B1:8A:B9
Certificate issuer: /CN=a5c249eb6fa6b5dbaf6ab9deb3a7778ee0eb3487
Certificate serial: 018D84843D6D953C7B051292D35C68B8BBC6
Authority key identifier: A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/t-ixqNQAznIwjLRUP63qWTKxirk.roa
Signing time: Wed 07 Feb 2024 17:01:15 +0000
ROA not before: Wed 07 Feb 2024 17:01:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41555
IP address blocks: 170.237.6.0/23 maxlen: 23
170.237.8.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 27 Mar 2024 16:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:84:3d:6d:95:3c:7b:05:12:92:d3:5c:68:b8:bb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c249eb6fa6b5dbaf6ab9deb3a7778ee0eb3487
Validity
Not Before: Feb 7 17:01:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7e8b1a8d400ce72308cb4543fadea5932b18ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:06:21:16:5d:2f:01:6c:5d:f1:e9:c1:c1:
d8:9d:b7:8d:50:04:87:e7:29:94:bc:0d:13:83:6f:
75:5c:7a:70:cf:cc:68:fc:fc:35:ed:e7:fd:da:5f:
82:05:bf:cc:fc:29:f5:8b:ef:42:88:b3:29:2b:55:
ef:e9:e5:45:ca:02:d5:df:7f:57:ce:c2:1f:60:91:
39:2b:35:f9:55:80:99:8c:78:28:95:23:51:34:35:
f2:2d:86:1b:38:89:5e:65:ce:d3:e3:99:0d:cb:2e:
f2:9d:f5:3c:ce:8f:5d:c3:ab:a3:98:c1:fa:06:55:
e3:ff:e7:47:9b:ea:33:b2:1e:b8:6a:21:74:dc:b7:
91:81:7e:d4:19:49:5b:1c:0c:8f:4e:b0:58:7f:0d:
a2:66:8b:d3:ac:f3:5a:51:0f:cc:7f:2b:28:e2:0e:
1b:e4:b4:c6:f3:73:fe:50:15:56:73:12:0f:d9:e6:
6b:c8:41:dd:97:af:7a:b1:96:4d:24:7c:02:6f:48:
c4:de:e7:a7:d7:df:47:35:11:50:54:f3:6f:6d:89:
13:96:13:7f:e3:a4:2f:95:34:be:5f:ae:1c:8e:69:
3c:49:b5:12:69:60:02:54:3c:26:ee:be:2f:6c:75:
59:96:dd:89:9f:9d:fd:f8:93:e0:1a:a6:47:76:e5:
c1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E8:B1:A8:D4:00:CE:72:30:8C:B4:54:3F:AD:EA:59:32:B1:8A:B9
X509v3 Authority Key Identifier:
keyid:A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/t-ixqNQAznIwjLRUP63qWTKxirk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.237.6.0-170.237.9.255
Signature Algorithm: sha256WithRSAEncryption
78:60:9d:83:28:fa:b6:9f:e2:6a:be:f3:b2:16:71:1f:59:ef:
da:b4:62:d6:bd:e2:fc:3d:96:bc:43:9d:c2:f4:cb:97:a3:32:
df:39:36:25:bb:f5:d3:84:96:55:dc:78:10:a3:4c:b6:1f:99:
81:86:07:27:7b:3c:bf:57:e4:46:e8:a6:bf:3b:36:d2:23:18:
f3:39:05:22:6f:ed:62:f9:da:96:f8:a9:66:86:10:8d:34:be:
40:02:c8:6c:5e:24:98:2f:e3:22:fe:bf:13:a1:f4:19:be:4c:
80:51:41:a6:30:79:20:46:f9:34:a5:20:a8:21:26:b4:cb:a7:
73:94:6b:5a:42:e5:8f:f5:60:86:ab:57:fe:57:0b:fe:cc:63:
29:b4:c0:4d:18:54:47:aa:09:4f:40:07:6b:9b:c0:a4:4d:75:
50:69:52:9a:f5:7a:a5:6c:26:78:f7:66:01:85:34:8b:7d:78:
73:7c:bd:b6:d2:3b:48:8c:2f:09:ed:5f:ce:bd:3b:ef:bc:db:
ce:06:7a:67:33:b2:0f:f9:fb:98:84:8e:dc:10:d7:48:c0:3c:
93:4d:e1:8d:aa:e6:9d:bd:9e:19:a8:28:37:d9:95:ed:bf:0f:
9b:55:8b:ec:ed:64:8f:28:08:0e:a7:cd:aa:de:f7:ee:95:d6:
a8:e6:3f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:21:36 2025 by rpki-client