Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/Msdfhuub0qpdvnEAOeXFME8u_hE.roa
File: Msdfhuub0qpdvnEAOeXFME8u_hE.roa (raw, json)
Hash identifier: lqDn3m7WeLMtqbUgn2NpeYOsxzg55SniPiWXuHsvux4=
Subject key identifier: 32:C7:5F:86:EB:9B:D2:AA:5D:BE:71:00:39:E5:C5:30:4F:2E:FE:11
Certificate issuer: /CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Certificate serial: 01914649460667D772FD23C7F083596C8B1D
Authority key identifier: 93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/Msdfhuub0qpdvnEAOeXFME8u_hE.roa
Signing time: Mon 12 Aug 2024 11:11:32 +0000
ROA not before: Mon 12 Aug 2024 11:11:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215065
IP address blocks: 194.34.170.0/24 maxlen: 24
2a0c:bac0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:46:49:46:06:67:d7:72:fd:23:c7:f0:83:59:6c:8b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Validity
Not Before: Aug 12 11:11:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32c75f86eb9bd2aa5dbe710039e5c5304f2efe11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c0:bd:c0:9b:b1:b8:8e:84:ed:75:a6:1e:b3:
3e:47:16:62:d7:0a:0b:70:b5:4e:14:25:8e:2b:39:
b7:06:fd:8b:97:ed:79:5a:48:70:74:ed:53:38:9f:
02:62:13:db:d6:21:37:93:93:fe:e9:63:09:fc:f9:
1b:07:5e:c0:69:af:85:58:b6:ec:32:09:85:dc:ca:
a4:4b:a7:7f:f9:80:94:a5:cb:a0:13:3b:dd:fb:e2:
31:65:28:96:da:c3:03:7a:b9:a3:1c:de:d0:0a:28:
bc:f9:16:fa:59:29:1c:d9:75:6c:a5:b2:7c:c5:6f:
ba:17:d5:37:b0:fa:7d:c5:82:77:ae:e1:7a:6d:fb:
9c:07:ba:a6:91:77:30:d2:2f:1a:c3:ab:37:46:22:
e2:34:09:90:45:dc:4d:7b:a4:95:82:01:6c:63:e3:
db:30:bb:9e:31:4b:b8:d6:33:12:c4:7e:78:e6:91:
45:71:09:33:7c:cb:9f:03:dd:b9:23:3d:5a:ae:76:
a1:10:24:8b:27:77:d2:98:69:61:5b:87:bf:75:7f:
8b:10:9d:95:79:37:57:b2:85:c6:2e:85:71:57:e5:
d7:9f:a2:24:21:9e:a4:c2:a6:83:98:0d:64:f5:a2:
57:89:b4:c8:c8:2d:7e:da:d9:92:53:fe:cb:9b:15:
8d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C7:5F:86:EB:9B:D2:AA:5D:BE:71:00:39:E5:C5:30:4F:2E:FE:11
X509v3 Authority Key Identifier:
keyid:93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/Msdfhuub0qpdvnEAOeXFME8u_hE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.170.0/24
IPv6:
2a0c:bac0::/48
Signature Algorithm: sha256WithRSAEncryption
43:56:06:ce:50:a3:c3:25:fe:06:f5:3c:e5:2e:40:e3:a0:d1:
2d:1f:b8:a5:af:27:95:a1:05:a1:44:45:6d:f1:be:9b:70:2c:
0e:54:96:02:76:db:3c:7f:aa:f6:c5:70:96:f4:07:c3:68:b1:
37:97:a5:47:bf:56:7f:a9:dd:ad:08:2d:f7:d0:e0:dc:d4:66:
01:63:16:5c:6b:73:89:e7:bd:69:b0:c7:0a:95:a7:bd:27:04:
09:10:d8:c5:ac:1f:18:d6:03:d0:a5:00:da:0c:8c:4c:62:b4:
68:2b:ea:8e:de:97:a0:df:af:ab:1c:2c:ad:03:58:d8:3b:66:
3d:35:53:b9:da:de:d1:4e:5d:b8:21:ca:5b:bf:4e:b4:d5:8f:
75:0b:ae:e2:c5:7e:5c:94:d7:0f:48:0e:63:6e:3d:b8:0d:fd:
01:79:74:f1:14:9c:c9:08:51:2a:00:c7:6a:28:ae:c7:14:02:
27:1c:52:ba:cb:fb:77:d5:58:c8:aa:97:ed:2c:b5:11:c9:d0:
01:45:b6:73:fc:60:1f:62:21:3d:e3:bd:bf:aa:ba:d5:ae:d9:
c3:6b:20:5e:77:58:5f:e0:99:7c:38:8f:a8:b1:08:ef:ce:7c:
dd:e1:72:66:b3:bb:3e:65:dc:e7:a0:84:a2:ee:ea:23:25:27:
a3:2b:41:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:25 2025 by rpki-client