Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/FK4UREhRueNsCGhJQ76mjHumlUs.roa
File: FK4UREhRueNsCGhJQ76mjHumlUs.roa (raw, json)
Hash identifier: LHh2Slt7+Dp0bx4Tjo/4fTrTo7xApu+R0RXAx7NAqbI=
Subject key identifier: 14:AE:14:44:48:51:B9:E3:6C:08:68:49:43:BE:A6:8C:7B:A6:95:4B
Certificate issuer: /CN=99efbb2b1653422837937dd27de354e68f9e01a3
Certificate serial: 019423D7469F4AA4B3D6E0910247FE3CAD08
Authority key identifier: 99:EF:BB:2B:16:53:42:28:37:93:7D:D2:7D:E3:54:E6:8F:9E:01:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/FK4UREhRueNsCGhJQ76mjHumlUs.roa
Signing time: Wed 01 Jan 2025 21:48:18 +0000
ROA not before: Wed 01 Jan 2025 21:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203676
IP address blocks: 185.137.240.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jan 2025 13:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:46:9f:4a:a4:b3:d6:e0:91:02:47:fe:3c:ad:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99efbb2b1653422837937dd27de354e68f9e01a3
Validity
Not Before: Jan 1 21:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14ae14444851b9e36c08684943bea68c7ba6954b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:35:7e:16:50:e2:5a:3f:49:78:6d:09:9b:ba:
cc:87:25:2d:8d:e2:c3:17:f2:ef:88:91:2e:bc:e1:
3b:b7:fc:ab:f2:03:13:ba:05:3b:e6:a2:43:4e:e3:
60:f0:23:cd:ae:00:da:bf:03:8c:b2:e7:be:0a:7a:
ab:26:ae:0c:0d:9e:bc:15:90:59:18:6d:e9:9f:9f:
40:54:49:36:17:46:22:3c:cb:98:6c:30:c1:69:fc:
fc:d3:10:1e:3d:be:0d:c3:cc:3b:46:73:6c:b6:3c:
c5:4f:a7:8a:07:92:73:95:67:f4:08:a1:5e:fc:3b:
c2:c0:63:0d:72:18:6a:33:69:c0:8a:ee:ba:ca:6b:
c5:c3:66:b1:14:7f:01:f1:f3:b9:63:18:f3:6b:77:
9a:1f:37:d1:6b:22:8f:46:9c:5a:b0:9a:b6:0d:20:
0a:cc:4d:92:23:77:55:91:f8:15:5e:0a:b3:84:8f:
74:fd:06:aa:77:d7:a0:3a:cd:98:25:31:2b:ac:2d:
4e:e5:5f:2c:33:a2:03:70:f6:16:13:d0:d5:23:61:
bf:54:3a:a1:a9:f4:fd:81:bf:85:b0:02:fb:09:f7:
3c:4d:a1:31:cc:ce:d7:b4:0e:ae:0b:80:3b:49:2d:
5d:f0:d8:13:68:20:5c:98:e2:f8:3b:7f:4b:79:55:
d9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AE:14:44:48:51:B9:E3:6C:08:68:49:43:BE:A6:8C:7B:A6:95:4B
X509v3 Authority Key Identifier:
keyid:99:EF:BB:2B:16:53:42:28:37:93:7D:D2:7D:E3:54:E6:8F:9E:01:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/FK4UREhRueNsCGhJQ76mjHumlUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.240.0/22
Signature Algorithm: sha256WithRSAEncryption
59:1b:91:c8:07:47:dc:91:5f:81:b9:7f:2b:78:67:dd:d0:e4:
e0:69:56:cc:16:8e:77:94:b1:54:e1:5e:9a:fa:14:46:b1:3b:
09:7e:3f:af:26:b2:b7:39:0e:6a:1e:35:e6:3c:d2:72:21:ec:
66:ce:fc:25:7c:19:60:82:f7:d3:19:b6:47:f3:72:a4:0f:35:
70:84:70:d5:fe:a6:1b:eb:2b:b9:53:07:36:65:fa:fb:60:08:
39:29:84:b3:65:97:bc:b2:ee:c2:58:d7:0e:b8:71:ff:93:69:
0f:e3:cb:2a:f0:5a:f7:75:94:fd:c0:16:1e:29:ac:f9:01:7e:
85:ef:3a:43:60:0b:18:fc:89:85:51:ce:c4:9f:01:30:dc:c4:
18:84:0e:57:95:a9:c4:46:45:ea:56:02:4f:60:93:63:fa:43:
66:ae:60:76:b7:5e:63:19:64:dc:7c:f7:2e:40:b4:b3:b2:b1:
46:cc:63:6b:81:80:7c:0e:83:fb:c5:37:22:e9:ac:3b:5a:24:
e8:e4:fd:35:8a:43:7d:56:76:f2:db:be:20:34:6a:4d:e3:2d:
f0:01:24:3c:ec:fd:3e:a2:df:cb:5e:28:30:12:f1:55:09:bf:
55:6b:94:d8:1c:11:84:a2:1d:20:19:07:fe:c5:83:d3:3f:49:
9d:3c:f2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:14:43 2025 by rpki-client