Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/45aXjuokswiW39fx3CqUH82WnIQ.roa
File: 45aXjuokswiW39fx3CqUH82WnIQ.roa (raw, json)
Hash identifier: 1bk8sJdmK4vkj68QR/N67ZNIjt+ChruhaQIklCxIbMA=
Subject key identifier: E3:96:97:8E:EA:24:B3:08:96:DF:D7:F1:DC:2A:94:1F:CD:96:9C:84
Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial: 018F0535CFA0B52FCB520129E0FF73B342D9
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/45aXjuokswiW39fx3CqUH82WnIQ.roa
Signing time: Mon 22 Apr 2024 09:49:23 +0000
ROA not before: Mon 22 Apr 2024 09:49:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199218
IP address blocks: 192.109.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:47:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:05:35:cf:a0:b5:2f:cb:52:01:29:e0:ff:73:b3:42:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Validity
Not Before: Apr 22 09:49:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e396978eea24b30896dfd7f1dc2a941fcd969c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c3:8c:fa:ce:2c:bc:50:47:a3:e2:b6:95:a3:
13:39:a6:60:20:99:17:38:fd:e4:1b:d8:f8:7b:2d:
fa:26:5c:2b:48:6a:9f:f2:16:7c:4b:45:8e:59:dd:
24:1e:fc:86:98:0d:4a:22:fc:b1:a2:c9:16:c6:fd:
99:ac:2f:86:53:92:53:8c:ec:13:c0:58:9a:f7:e9:
89:43:67:b3:24:91:d0:45:71:58:07:07:4d:71:a0:
94:28:39:84:9e:d7:c2:45:c7:c9:2e:4b:3a:ab:5a:
64:56:a4:31:6c:23:b2:40:72:35:a9:61:a1:61:c2:
b7:6b:2d:05:de:c8:f1:18:96:e5:66:71:ae:58:87:
b6:1f:c0:e2:cc:bf:91:4b:26:e8:3a:bd:7e:88:ec:
9c:7b:7f:a3:e5:25:8a:12:d2:ff:41:dd:8f:40:af:
27:0e:b4:9a:44:af:4a:e1:1c:10:62:9d:4d:92:59:
f4:40:4c:be:98:06:b7:8c:51:a8:8b:80:ae:7b:65:
0e:82:08:ab:bb:36:6e:10:98:ab:3c:e7:6b:64:77:
93:83:5c:4c:af:51:31:9f:27:86:32:ff:a7:53:f1:
b6:21:a4:90:4a:13:b1:90:69:c9:64:73:b6:cd:53:
bb:7b:b3:50:c9:f2:da:f7:e1:ac:0c:fb:be:50:f1:
c9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:96:97:8E:EA:24:B3:08:96:DF:D7:F1:DC:2A:94:1F:CD:96:9C:84
X509v3 Authority Key Identifier:
keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/45aXjuokswiW39fx3CqUH82WnIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.139.0/24
Signature Algorithm: sha256WithRSAEncryption
74:82:72:f6:e3:bd:6b:b1:5b:04:04:ea:7f:ef:b1:a3:a7:66:
14:76:9b:4d:cd:20:21:f0:88:bc:27:0f:55:4d:91:0b:06:12:
77:bd:b1:f2:c6:4b:ad:39:f5:6b:88:45:4f:e9:ef:8d:da:86:
02:99:92:fe:93:92:d4:fd:0a:8f:f6:88:92:0f:32:47:2d:10:
3d:55:ea:fb:12:d4:38:5e:32:5e:3a:a1:a8:b1:14:7e:22:85:
7c:e9:c1:4d:2e:76:3c:20:ec:16:b7:06:76:75:1f:1f:1e:c9:
4e:4a:a7:ef:6d:4c:b0:9f:00:f2:ac:7c:a1:b4:a1:9c:d4:10:
02:ce:a1:ff:00:b2:8a:01:44:20:c8:73:cd:7f:06:74:77:0a:
af:54:15:f1:1d:12:52:6f:06:90:23:33:c7:df:68:0a:a7:77:
1b:58:30:9b:af:74:bd:7a:d7:cb:c1:5c:92:55:7e:fb:eb:df:
e0:3d:45:7d:be:88:53:fb:ea:f5:9f:2a:7e:47:63:5f:2e:d3:
cc:0f:8f:76:45:89:34:30:82:96:53:f8:7a:11:2b:6d:e0:f0:
17:7c:f0:93:67:4b:d3:bb:30:38:96:53:3d:22:c1:45:2a:ec:
51:2c:08:45:b5:36:25:99:88:d7:59:06:57:c1:06:fc:12:fb:
47:42:67:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:01:21 2025 by rpki-client