Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/Ovpzqa6JAHjNBnSHVnvXnlyVsPU.roa
File: Ovpzqa6JAHjNBnSHVnvXnlyVsPU.roa (raw, json)
Hash identifier: vWwDxrRvqlDMyz1ObS9Uj22/MZ261qwtTk4CXSaTUSI=
Subject key identifier: 3A:FA:73:A9:AE:89:00:78:CD:06:74:87:56:7B:D7:9E:5C:95:B0:F5
Certificate issuer: /CN=eaeea20bbbdb9a5d1cdc7114e2af518e76b1426e
Certificate serial: 018CC56F027F697F6001D4464E485F441577
Authority key identifier: EA:EE:A2:0B:BB:DB:9A:5D:1C:DC:71:14:E2:AF:51:8E:76:B1:42:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6u6iC7vbml0c3HEU4q9RjnaxQm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/Ovpzqa6JAHjNBnSHVnvXnlyVsPU.roa
Signing time: Mon 01 Jan 2024 14:30:35 +0000
ROA not before: Mon 01 Jan 2024 14:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 2.57.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6f:02:7f:69:7f:60:01:d4:46:4e:48:5f:44:15:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaeea20bbbdb9a5d1cdc7114e2af518e76b1426e
Validity
Not Before: Jan 1 14:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3afa73a9ae890078cd067487567bd79e5c95b0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:44:4a:8b:09:a1:fb:c5:9e:90:23:d1:91:
cb:ee:0d:42:6e:01:90:05:9a:26:1a:b7:d2:2f:d8:
7e:4b:0c:e7:b2:50:ac:0d:cc:46:39:28:bc:a9:d5:
ea:a7:04:b4:9c:93:fe:7f:16:bc:c1:f4:81:10:dd:
db:62:0e:d9:30:1f:9b:27:10:7e:20:d0:c0:5c:41:
f0:62:6a:40:f0:7c:33:ab:9a:87:e3:5d:74:b2:fc:
27:68:f2:9b:31:cb:56:87:a2:71:2d:b7:6c:3c:f0:
fe:64:18:2d:8e:0a:44:7b:5e:71:84:6c:51:63:9a:
69:69:5a:e8:56:5a:87:2e:41:6d:80:2e:76:89:32:
5b:08:3d:1e:82:e5:5d:6a:65:4d:85:e3:ef:f7:41:
f2:71:18:e9:59:2e:e0:c5:f0:a6:b9:6c:9f:da:16:
c7:e2:9c:88:cd:60:6f:29:eb:ff:41:50:a2:9a:e3:
1d:51:f3:74:53:ba:97:93:a6:93:d4:e5:92:ce:37:
93:76:37:71:2d:7d:c4:b0:5a:4a:f4:f8:b4:55:7a:
ab:97:21:dc:51:5d:fb:a1:03:ca:63:50:aa:74:f6:
f5:13:ed:7d:7a:51:df:16:9e:df:1a:3d:15:a2:d3:
52:8a:be:19:ea:37:4b:3c:3b:b8:59:07:df:a7:29:
e4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FA:73:A9:AE:89:00:78:CD:06:74:87:56:7B:D7:9E:5C:95:B0:F5
X509v3 Authority Key Identifier:
keyid:EA:EE:A2:0B:BB:DB:9A:5D:1C:DC:71:14:E2:AF:51:8E:76:B1:42:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6u6iC7vbml0c3HEU4q9RjnaxQm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/Ovpzqa6JAHjNBnSHVnvXnlyVsPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.12.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:18:40:03:29:ad:1c:77:46:9e:5e:06:0e:ed:ff:5b:99:9f:
bd:64:5f:84:5c:b5:7a:62:7c:66:be:9e:03:fd:82:c2:34:88:
44:12:65:2c:a2:5d:17:d6:25:9d:0c:6b:e1:d3:5e:91:15:c9:
c9:5d:74:38:e3:d7:8b:0c:af:00:3d:8d:43:a0:32:67:45:e5:
f8:85:e4:9a:40:83:e4:56:de:62:fe:d9:38:06:71:b1:3b:41:
b6:95:15:e5:31:c3:04:fb:0d:06:b4:4b:45:9b:81:c1:a7:d0:
da:6b:87:9b:12:ff:dc:72:25:08:bc:af:96:13:91:45:fe:15:
59:2b:bb:22:ed:c9:9d:e5:d5:27:99:90:09:8c:09:9e:06:d5:
10:34:c3:8a:ac:4f:78:04:1d:2c:8d:a5:18:95:6a:f9:19:8c:
39:2b:d3:86:86:9a:51:a0:3d:af:46:dd:94:5e:55:a0:d2:36:
78:19:ed:db:88:42:51:d0:35:a6:e3:bd:ff:e2:36:0f:80:b8:
d0:c8:24:65:2f:bb:10:a7:5d:cd:68:5b:de:b4:b8:47:39:1a:
9b:e2:db:52:2a:a5:4c:7a:48:71:28:b2:11:e7:27:9e:58:cf:
88:ae:66:d9:cc:91:94:f2:46:47:17:dd:59:b2:d3:60:75:59:
87:14:46:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:26:11 2025 by rpki-client