Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/k2lGGM95t88CBCiwBx_5obfFSNw.roa
File: k2lGGM95t88CBCiwBx_5obfFSNw.roa (raw, json)
Hash identifier: /NHXqQaylzFvoyr1lawILElLy0Ko2twUA4/VxoRzNR4=
Subject key identifier: 93:69:46:18:CF:79:B7:CF:02:04:28:B0:07:1F:F9:A1:B7:C5:48:DC
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 0192EA4B13623A2C84C409FD886180A1B21A
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/k2lGGM95t88CBCiwBx_5obfFSNw.roa
Signing time: Sat 02 Nov 2024 00:34:01 +0000
ROA not before: Sat 02 Nov 2024 00:34:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56603
IP address blocks: 195.128.133.0/24 maxlen: 24
2a09:6280:1::/48 maxlen: 48
2a09:6280:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ea:4b:13:62:3a:2c:84:c4:09:fd:88:61:80:a1:b2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Nov 2 00:34:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93694618cf79b7cf020428b0071ff9a1b7c548dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d3:3c:7c:17:d8:cd:65:ca:98:84:b5:63:64:
c5:1c:38:da:4b:b3:64:ba:03:ad:8c:5d:39:16:a3:
3b:c7:81:78:0d:ba:98:aa:16:ce:19:48:0d:29:6c:
4e:d7:0b:61:ea:27:a0:36:a1:56:a8:3d:91:bb:b9:
d1:0f:52:33:5a:f5:c3:57:b5:08:f6:1e:ec:0f:13:
82:c1:2a:91:12:d9:27:fd:20:df:e9:05:37:e2:e7:
01:8c:e6:11:20:3c:4e:56:e0:d3:47:88:83:ec:02:
40:c3:45:29:9c:7d:9b:91:dc:ea:e5:95:f6:59:bf:
de:90:0e:de:83:c2:6b:66:2e:8d:c7:79:ca:52:18:
22:88:a5:2c:07:f8:3a:32:0d:34:61:0b:2f:ba:30:
c3:51:2e:a8:c3:b5:83:f2:1d:e7:69:76:fb:22:69:
50:f5:52:53:89:95:26:1e:9d:00:b8:b9:01:e6:7d:
7f:0e:70:ba:28:43:a0:83:96:af:0b:db:ed:ca:83:
a4:43:aa:11:50:4b:b8:d6:9f:ee:14:19:5b:98:e9:
c5:ac:bf:ef:a1:a5:e6:27:33:1d:ed:f8:c0:91:04:
94:02:4d:0e:94:f6:17:c5:16:a9:a0:cb:f5:95:12:
2f:36:57:de:6c:48:30:18:06:de:67:90:7e:73:9a:
fb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:69:46:18:CF:79:B7:CF:02:04:28:B0:07:1F:F9:A1:B7:C5:48:DC
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/k2lGGM95t88CBCiwBx_5obfFSNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.133.0/24
IPv6:
2a09:6280:1::/48
2a09:6280:4::/48
Signature Algorithm: sha256WithRSAEncryption
5e:34:d3:7c:1c:3d:84:5c:13:1c:7b:73:8f:50:f6:76:2f:6f:
e8:2d:ef:fd:17:54:dc:1d:12:5c:c4:13:f7:14:a4:4b:04:10:
c8:eb:24:83:98:db:b4:93:70:de:bb:c7:70:6f:41:bc:4e:1d:
8c:38:97:9b:33:5d:98:2b:89:db:a1:53:71:9c:30:45:89:24:
14:7d:5e:fb:ef:51:9f:fc:b9:05:33:28:eb:36:f7:f4:b6:e0:
8d:34:89:41:dc:82:3c:d5:2a:32:b5:54:75:b2:5e:33:c1:da:
31:16:8a:d2:c8:3b:69:7c:b1:2a:7b:2c:2d:c1:a0:33:21:53:
19:8d:5b:53:a7:8b:ed:26:ba:0a:5d:02:4e:b7:a2:f6:68:70:
66:43:30:04:d3:20:2c:ba:73:28:bd:02:4f:3b:0f:9b:7f:2c:
9b:eb:75:43:ab:db:40:14:3b:6c:d9:4b:0d:0c:2d:26:93:fd:
92:4c:25:15:19:bd:31:53:4f:d5:6c:e8:1c:9e:89:e8:26:5a:
c6:21:65:6a:0e:99:a1:7e:c0:85:2b:14:2d:34:92:48:de:83:
81:b7:c5:b9:60:50:1a:12:c6:53:7f:ee:d0:b6:aa:75:8e:53:
8b:ef:09:5b:21:54:e7:7f:ac:76:52:37:ee:95:fe:b4:ba:86:
7c:d4:2d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:24 2025 by rpki-client