Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/x6DIxUm2TmlGeXsnWlsadNgluLU.roa
File: x6DIxUm2TmlGeXsnWlsadNgluLU.roa (raw, json)
Hash identifier: R34q2M0QBs3Hb1qXeLUGA8bAx8yeDNy5DClNZleofIM=
Subject key identifier: C7:A0:C8:C5:49:B6:4E:69:46:79:7B:27:5A:5B:1A:74:D8:25:B8:B5
Certificate issuer: /CN=74633239baa2103106a6260ddfd7e78b8094355c
Certificate serial: 018CC6B8F5FD993563B03CFF5758CD0DDFFA
Authority key identifier: 74:63:32:39:BA:A2:10:31:06:A6:26:0D:DF:D7:E7:8B:80:94:35:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/x6DIxUm2TmlGeXsnWlsadNgluLU.roa
Signing time: Mon 01 Jan 2024 20:30:59 +0000
ROA not before: Mon 01 Jan 2024 20:30:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31074
IP address blocks: 194.146.125.0/24 maxlen: 24
195.242.159.0/24 maxlen: 24
195.242.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:48:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:f5:fd:99:35:63:b0:3c:ff:57:58:cd:0d:df:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74633239baa2103106a6260ddfd7e78b8094355c
Validity
Not Before: Jan 1 20:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7a0c8c549b64e6946797b275a5b1a74d825b8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:67:74:58:04:7c:bb:06:5b:65:5a:73:80:7e:
bb:c7:85:d4:53:89:f9:dd:b3:7a:c3:12:73:16:9e:
b8:af:59:eb:8c:3d:93:0b:fa:6e:8b:92:b8:b9:c6:
5d:f8:55:64:56:1c:a0:a3:4a:29:9e:52:44:29:1d:
9a:c7:0a:7a:c9:ab:04:e1:3f:1d:91:1a:45:43:3b:
2c:20:0b:c4:6d:91:5d:6b:05:44:c7:83:f1:e7:50:
d8:c3:e3:71:ff:f4:be:72:b9:ed:f9:66:92:4b:88:
f7:77:c2:86:f3:d3:3a:d6:5f:21:7c:00:bb:3d:f4:
17:3d:5f:e0:34:1b:e1:a3:70:10:9e:d1:2e:9f:f4:
70:18:ce:f0:35:cb:a9:34:9f:ec:73:4f:56:c1:9b:
89:45:6c:f6:2c:89:b3:a8:37:bc:fc:7d:4e:85:2c:
42:ec:2c:49:f8:50:04:d9:90:36:c4:07:17:81:6c:
87:15:5b:b0:79:3d:29:af:36:40:7b:41:68:85:58:
f4:d9:1f:1b:0c:e7:c8:2e:40:6b:b8:fd:1e:45:6a:
e2:7f:d9:50:6a:91:44:b3:53:93:06:5f:c4:79:d8:
49:de:2d:8d:dc:68:59:56:76:da:ed:be:83:31:dc:
7c:00:bc:67:80:66:c1:20:5e:97:e1:72:13:46:41:
d5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A0:C8:C5:49:B6:4E:69:46:79:7B:27:5A:5B:1A:74:D8:25:B8:B5
X509v3 Authority Key Identifier:
keyid:74:63:32:39:BA:A2:10:31:06:A6:26:0D:DF:D7:E7:8B:80:94:35:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/x6DIxUm2TmlGeXsnWlsadNgluLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.125.0/24
195.242.158.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:68:b0:fb:5f:3d:d9:b7:c5:08:92:84:cd:be:ac:b5:ae:58:
5d:29:29:cb:ca:62:0d:fd:28:5f:68:6d:01:e4:68:88:5f:24:
54:59:d8:0d:6b:e3:10:28:7e:ef:ea:26:0c:4e:94:e1:81:e2:
bc:82:fe:5f:f9:07:68:bd:9f:36:17:a8:2b:5e:44:2b:b7:29:
63:d7:d5:f9:bc:5d:5b:a4:3a:20:1b:31:d2:a3:f4:f1:65:25:
fd:33:5c:8a:bd:dd:e2:b5:8a:10:05:89:bd:d0:66:c2:ee:97:
f6:cf:d2:71:ce:be:13:0c:35:85:1c:df:41:bf:d5:6d:96:b2:
18:64:36:d0:8a:0c:b3:23:f9:3d:06:3b:c8:93:da:d8:bf:b5:
b0:15:5c:73:08:6a:55:39:0c:b0:77:51:10:40:aa:7a:5f:6f:
94:89:1b:e9:aa:ae:ae:19:8c:ae:9b:de:b1:7c:e1:b1:69:13:
b2:9b:18:6e:66:c4:52:46:8f:fe:3d:b1:da:3c:d8:12:55:75:
25:9e:0d:83:b8:af:c0:fd:78:70:5f:18:7d:8f:b5:15:9c:8e:
7b:3b:29:29:37:f0:a5:cb:d6:c1:47:65:cb:7e:c2:cb:5f:a4:
4b:5f:cc:51:c7:a2:57:7a:31:1f:a8:3e:3d:6c:68:01:d3:5f:
36:17:e5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:41 2025 by rpki-client