Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Fgapnn4RgToLkj_mM0muTS0vbwM.roa
File: Fgapnn4RgToLkj_mM0muTS0vbwM.roa (raw, json)
Hash identifier: Kog8peByK4Qbf4YO7nWij+X0yANQ3wncplr2V6AkSYY=
Subject key identifier: 16:06:A9:9E:7E:11:81:3A:0B:92:3F:E6:33:49:AE:4D:2D:2F:6F:03
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018F135187692613BD4AB92BE2C52558A94D
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Fgapnn4RgToLkj_mM0muTS0vbwM.roa
Signing time: Thu 25 Apr 2024 03:34:21 +0000
ROA not before: Thu 25 Apr 2024 03:34:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56603
IP address blocks: 192.145.96.0/24 maxlen: 24
195.128.133.0/24 maxlen: 24
2a09:6280:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 10 Sep 2024 04:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:13:51:87:69:26:13:bd:4a:b9:2b:e2:c5:25:58:a9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Apr 25 03:34:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1606a99e7e11813a0b923fe63349ae4d2d2f6f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ec:eb:f2:5f:db:80:d3:15:76:19:fe:57:b8:
95:32:4c:e2:b2:77:8d:b9:a4:be:89:a1:30:b3:49:
87:a4:8e:82:3a:90:3a:1c:e9:8f:32:01:fb:a4:bb:
97:e9:c2:89:5c:8a:df:74:96:bc:92:27:0a:d1:34:
10:aa:89:71:01:00:67:4e:e4:91:6c:bd:7a:99:65:
4b:a1:68:b3:b8:91:01:c4:cf:9c:13:48:ea:00:a8:
98:f6:74:11:21:76:00:32:ca:46:40:96:17:06:56:
22:28:28:71:1b:3a:72:57:bc:7c:b5:bd:9c:03:fa:
f6:4a:92:0a:67:a6:69:60:a2:9a:68:97:2e:5d:b5:
52:95:f5:49:60:df:a5:4a:44:ed:6b:c0:47:45:ea:
cd:2e:99:7a:7e:d3:7d:87:ee:64:06:ef:d4:6c:fc:
e3:6f:06:c2:84:e3:9f:27:60:23:86:fe:43:82:88:
6a:56:f9:e7:df:2f:08:6a:33:a7:63:3a:f7:00:cc:
3a:af:14:27:7e:28:9f:cc:96:28:6a:d3:33:28:67:
3a:89:3d:68:67:40:99:3f:1b:ba:d1:48:af:4e:d0:
53:ca:3e:b7:a5:51:0f:04:d3:b4:18:25:4c:1e:7c:
98:45:64:12:c4:ac:08:3e:38:07:73:3f:1d:d2:7e:
35:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:06:A9:9E:7E:11:81:3A:0B:92:3F:E6:33:49:AE:4D:2D:2F:6F:03
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Fgapnn4RgToLkj_mM0muTS0vbwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.96.0/24
195.128.133.0/24
IPv6:
2a09:6280:1::/48
Signature Algorithm: sha256WithRSAEncryption
4e:7f:e7:27:3a:a0:7e:b4:3b:28:d0:31:56:e0:18:14:50:95:
4e:cd:4a:78:3c:db:7d:25:6d:40:88:0b:81:56:9a:26:41:a9:
58:9d:65:56:15:1f:5a:5f:07:a2:87:4d:89:bb:72:7b:0e:18:
6b:45:6b:52:10:26:30:e0:fb:98:16:b2:75:07:00:15:80:45:
02:af:3f:de:d5:a3:02:53:e0:43:b8:73:d1:e6:bf:84:a3:b0:
bd:40:f6:a1:9e:50:2c:13:a5:0c:36:d5:46:cf:a8:1c:31:28:
5f:9f:29:dc:e0:8f:32:ca:b8:0e:24:75:9f:e2:e6:83:1a:c4:
84:2d:30:bd:ae:37:ce:3a:1c:b4:66:ba:45:b6:00:3a:22:cd:
7d:fb:68:d7:13:ca:c6:ab:ce:1c:32:52:ec:8b:03:5c:31:ea:
e7:29:93:5f:3e:7c:1b:29:a6:4e:de:e8:85:96:d2:f8:5e:3e:
a3:8c:52:3e:bf:e8:a6:90:99:8e:00:2b:9b:bc:62:32:25:98:
82:ca:fd:a6:ee:97:73:ff:d6:9f:f9:31:3d:da:e6:62:95:c5:
4f:2f:2f:43:bd:b2:55:3c:1b:43:9d:10:98:09:fb:72:f8:31:
b6:20:53:23:1f:5f:34:25:61:f0:d8:94:66:a9:ff:13:89:cd:
71:d4:42:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:12 2025 by rpki-client