Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/0xbd8sgfZcVKF9uWomyenEU41X0.roa
File: 0xbd8sgfZcVKF9uWomyenEU41X0.roa (raw, json)
Hash identifier: XMjeFyNcoZnVoPCz/mv+4gOhJ8UVJkwIitK6LHkFv54=
Subject key identifier: D3:16:DD:F2:C8:1F:65:C5:4A:17:DB:96:A2:6C:9E:9C:45:38:D5:7D
Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial: 018CC9BB02EEA4A55CA423876F5CB90C7C83
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/0xbd8sgfZcVKF9uWomyenEU41X0.roa
Signing time: Tue 02 Jan 2024 10:32:05 +0000
ROA not before: Tue 02 Jan 2024 10:32:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51358
IP address blocks: 192.109.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:47:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:02:ee:a4:a5:5c:a4:23:87:6f:5c:b9:0c:7c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Validity
Not Before: Jan 2 10:32:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d316ddf2c81f65c54a17db96a26c9e9c4538d57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e3:49:9c:7a:9a:91:b8:ca:53:eb:d0:db:f7:
d0:0a:a1:bf:70:11:cd:f4:db:84:8c:e4:ec:dc:a7:
05:49:1e:12:a1:c5:66:d8:b5:e8:7e:58:f3:f8:d9:
0b:c1:c1:1e:25:dd:10:5e:9e:a5:3a:6a:95:3e:e1:
59:70:fb:ec:11:c3:15:74:c4:5b:9e:ac:01:e8:be:
71:bf:3a:0c:29:82:be:7d:b4:8e:30:8d:ad:d4:fb:
7c:7d:59:81:82:c3:cd:5a:6f:4c:b2:d2:0e:e0:e1:
b3:19:e1:5d:01:21:6e:c3:d9:d6:75:b3:50:1d:33:
9c:36:5b:c6:c5:57:8b:49:24:4d:55:7a:16:24:1c:
6a:74:20:08:b0:3a:8b:8b:bb:44:e9:e4:46:20:b1:
80:41:e1:28:b0:c4:cf:85:8a:fe:c8:0d:4d:3c:df:
0c:9a:bf:47:a0:30:0d:e3:f3:c3:aa:1d:aa:ea:e9:
98:95:35:68:8a:b7:67:b3:2b:c9:c4:59:97:fc:ef:
05:dc:66:41:76:77:b7:02:8f:47:72:57:10:f6:2c:
a7:ab:5f:98:38:72:62:19:5b:9c:29:59:8a:5f:d7:
c2:e9:da:04:d8:e8:6f:92:2a:c8:8a:73:4a:46:5b:
9a:24:bd:e9:32:15:a9:6c:3f:48:1e:0f:a0:f1:ef:
87:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:16:DD:F2:C8:1F:65:C5:4A:17:DB:96:A2:6C:9E:9C:45:38:D5:7D
X509v3 Authority Key Identifier:
keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/0xbd8sgfZcVKF9uWomyenEU41X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.138.0/24
Signature Algorithm: sha256WithRSAEncryption
05:8c:79:20:c1:08:1b:be:ea:93:f5:a0:18:d3:f1:4e:cf:bf:
f2:5f:47:32:cb:85:1c:82:e8:96:04:8b:63:3d:e9:5e:7d:85:
06:81:41:bf:ef:31:26:5e:e6:17:24:c6:b4:0d:4b:9c:01:2f:
0b:75:b7:42:06:60:85:07:fa:af:c9:cb:d5:6a:03:e8:3b:95:
d0:df:97:fc:53:03:d3:7e:4d:43:f8:95:21:85:a7:39:f7:87:
ca:7d:ee:ce:2e:36:cb:f3:8e:c4:79:07:52:b6:04:02:a6:4c:
80:db:43:2a:96:4c:cc:e7:28:f6:0c:e4:9a:bf:eb:18:08:91:
ea:4f:4f:05:0b:95:1b:a6:bb:8d:1f:88:8c:31:34:5d:91:b5:
af:2b:e3:60:92:d6:62:3a:d8:5b:ac:de:83:0c:26:5a:cc:be:
39:db:33:a0:2c:53:09:f0:32:4a:dc:8b:d7:54:c2:59:78:69:
2f:99:c3:aa:a4:7c:ef:d2:01:6a:1c:83:ff:27:3a:00:ba:48:
ce:dd:0a:8b:87:9b:61:41:b6:a9:84:79:64:4d:80:ab:83:79:
21:ad:26:c1:9f:ef:2f:68:12:f9:20:bf:29:9a:55:2a:55:70:
da:fc:fe:b8:a7:e0:a8:d7:bf:29:ce:2a:a5:bb:b6:9a:fe:39:
4e:a8:1d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:09:35 2025 by rpki-client