Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/kyiMWTrPRDE6ouvkfBtXt8d9pvk.roa
File: kyiMWTrPRDE6ouvkfBtXt8d9pvk.roa (raw, json)
Hash identifier: /lJJKEtPgtCl84n8ujj6Re8luk9aycv3NGd8YPBuZOQ=
Subject key identifier: 93:28:8C:59:3A:CF:44:31:3A:A2:EB:E4:7C:1B:57:B7:C7:7D:A6:F9
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 018CC726619F5E117BF97BC90D6B9C32FAEB
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/kyiMWTrPRDE6ouvkfBtXt8d9pvk.roa
Signing time: Mon 01 Jan 2024 22:30:30 +0000
ROA not before: Mon 01 Jan 2024 22:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203416
IP address blocks: 194.50.250.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:61:9f:5e:11:7b:f9:7b:c9:0d:6b:9c:32:fa:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Jan 1 22:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93288c593acf44313aa2ebe47c1b57b7c77da6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ad:71:55:08:b5:15:af:d2:e6:ef:fc:f3:46:
9a:67:7f:6d:cc:3b:79:16:24:ed:79:eb:98:36:e1:
ba:5c:12:b4:4f:29:0f:ee:12:74:39:fe:39:27:c0:
ff:63:c9:64:bd:41:48:f3:23:6d:50:73:8a:e2:89:
77:01:9f:ae:dc:8f:95:48:65:35:32:6c:01:6c:5e:
e3:c5:b8:02:e5:4f:a4:77:a2:72:0e:7d:24:4a:a2:
0d:cc:d1:2e:48:6b:1c:67:6c:c5:9a:b7:d4:98:13:
90:cd:8e:08:e9:da:9a:f8:d6:36:30:3f:f1:bc:a1:
d3:16:f9:32:18:08:91:a4:62:ea:f3:cf:ba:2c:dc:
0e:83:40:0f:e3:f2:1c:95:a0:58:92:6c:55:0d:e1:
42:a8:ab:7a:ae:39:d8:63:a8:44:1b:4a:3e:b8:68:
e7:bc:9d:ed:1b:fc:dd:93:90:c3:5c:9c:f3:9c:8f:
e8:99:bd:73:76:8f:91:c0:b5:bd:b5:b8:9a:1f:8b:
31:6d:2e:aa:dc:cd:83:f8:eb:54:78:74:46:02:05:
21:67:e2:17:d4:46:62:9c:13:0e:46:a3:cb:55:34:
ef:0d:4c:a2:c6:d7:a6:53:4e:20:2d:9a:2e:05:f3:
0d:2e:fc:c3:16:c7:5a:d4:a3:ef:c0:e2:4f:11:d1:
ba:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:28:8C:59:3A:CF:44:31:3A:A2:EB:E4:7C:1B:57:B7:C7:7D:A6:F9
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/kyiMWTrPRDE6ouvkfBtXt8d9pvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.250.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:ce:65:57:08:0b:7f:c6:15:51:63:0f:a5:d9:de:1f:f7:39:
25:8d:4d:86:18:2b:43:a5:38:33:de:06:36:69:2d:2b:c7:5c:
47:c7:0e:4b:dc:21:10:16:d5:c3:26:2e:16:02:94:5d:45:ea:
24:f0:2c:4d:ed:06:e2:47:33:e0:96:8f:ad:63:05:71:77:2c:
89:07:89:2d:85:2b:7b:ec:37:4e:80:1b:7c:8f:1e:7f:8c:05:
b7:9a:73:27:06:a2:f1:e2:a8:03:ba:02:5e:90:e6:2a:8a:c3:
b5:dd:b2:e1:8d:cf:04:3a:f6:05:4a:1b:7b:09:f1:d3:b3:7b:
27:3d:74:27:e9:b7:af:44:e1:2b:40:ff:db:c4:c7:5a:0f:ac:
90:8b:9f:e9:9d:ab:5a:bf:4c:03:78:4d:f3:25:a5:71:a0:92:
b7:38:23:82:25:c0:ae:fe:85:c7:e3:de:b6:3d:bd:de:61:85:
56:f8:f0:a8:a9:86:a1:75:7f:07:1e:a2:92:6d:12:85:f4:8a:
bd:79:1d:c1:c1:b7:d1:02:16:b5:4d:66:f5:39:ad:65:ae:60:
58:a4:93:5d:76:10:f1:8e:84:38:ac:75:2b:3c:4e:51:fe:7a:
fd:92:58:01:ce:90:f8:9d:35:3a:0b:67:2e:86:8a:d2:62:ed:
69:e9:b7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:59:50 2025 by rpki-client