Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/8mo6KNj1cDaUB_cMkaEkbQ1ILaw.roa
File: 8mo6KNj1cDaUB_cMkaEkbQ1ILaw.roa (raw, json)
Hash identifier: EGCKg1iKHZTCH4ib215Jt/sMUfxCDLpgv/vQA/OwJwA=
Subject key identifier: F2:6A:3A:28:D8:F5:70:36:94:07:F7:0C:91:A1:24:6D:0D:48:2D:AC
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 018CCA2BB7001ADE975EBB5AC8FF3BB5BCA6
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/8mo6KNj1cDaUB_cMkaEkbQ1ILaw.roa
Signing time: Tue 02 Jan 2024 12:35:11 +0000
ROA not before: Tue 02 Jan 2024 12:35:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49659
IP address blocks: 195.168.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:b7:00:1a:de:97:5e:bb:5a:c8:ff:3b:b5:bc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 2 12:35:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f26a3a28d8f570369407f70c91a1246d0d482dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:f9:81:1c:d0:18:7e:0b:4d:7e:47:22:df:
47:c5:4a:22:fd:02:35:dd:3e:cc:f6:cd:90:9f:26:
3d:55:53:66:41:af:73:1a:b4:5b:0a:9e:d0:57:d6:
18:0d:d4:de:67:ff:6d:28:fb:50:1c:8a:4b:50:e0:
a9:2d:73:2f:63:b8:a4:33:36:2f:8d:aa:3e:80:c6:
3c:4e:a6:52:9d:a7:f4:47:cd:3d:8e:56:f2:2c:4a:
a7:87:34:65:64:63:86:6e:10:2e:5e:8e:b2:e3:93:
a0:74:c8:02:bf:e5:80:69:ca:ef:73:fa:61:d7:50:
69:a2:5e:90:7b:f7:18:7b:f0:e5:a7:4b:01:e6:eb:
d7:8d:8c:27:f6:20:c2:d7:e0:93:a7:62:0a:ef:16:
99:31:e6:0d:ea:d7:c8:da:7e:f8:36:60:c4:f4:3a:
70:fc:0b:ac:07:8e:ea:a4:59:45:ac:b8:64:b4:49:
83:4a:97:c5:f2:8d:ee:c9:b4:00:1d:2b:97:04:4f:
bb:7b:9e:3d:12:1d:12:10:05:58:dd:3f:87:8c:2e:
1d:32:f4:71:ca:4e:5d:7a:2b:2d:5b:01:0c:ed:33:
0a:47:3d:9a:da:c3:bc:e4:bb:4d:de:f7:fb:da:5d:
ab:b3:a3:7e:1d:1b:39:8c:d4:a7:f0:5a:43:52:1f:
0b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6A:3A:28:D8:F5:70:36:94:07:F7:0C:91:A1:24:6D:0D:48:2D:AC
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/8mo6KNj1cDaUB_cMkaEkbQ1ILaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.168.110.0/24
Signature Algorithm: sha256WithRSAEncryption
93:7c:62:10:10:64:b7:d8:b0:2b:41:ec:3a:d7:45:5c:98:fa:
24:ee:25:0e:7b:23:8d:99:53:1d:c5:e7:08:fe:35:e1:77:6b:
4a:03:92:10:a0:54:46:e7:ed:fb:57:c6:b1:9e:43:02:c4:52:
3b:b4:05:08:ae:45:a2:2c:19:4c:9f:6a:dc:f3:15:91:30:12:
6d:dd:2e:2a:f8:11:ce:1b:47:60:a6:36:0e:72:41:b2:77:ba:
ec:42:a7:db:66:02:4c:8f:95:24:4d:9a:d9:2d:eb:2b:75:76:
9d:3c:66:f7:84:d4:b0:65:40:89:7b:e6:18:2d:25:2e:01:72:
25:89:79:55:1a:fc:65:0e:17:5c:dc:2f:87:b4:5f:63:10:b0:
43:fe:01:4e:78:b0:33:64:b5:8d:4a:e4:49:69:66:18:47:99:
b8:a6:a7:50:46:b1:13:38:e2:a7:db:09:f7:9c:45:58:9f:99:
01:27:e2:19:0e:90:3c:ee:8c:fd:98:b7:cd:9a:6b:f1:62:a7:
ad:27:85:80:c3:69:78:6b:b7:8c:d9:a7:fb:da:da:2d:e8:11:
4c:50:0b:0a:6f:11:aa:5b:d4:2d:7a:91:4e:f2:7f:6c:77:8d:
c0:64:05:be:8f:63:5b:af:5f:f4:53:c9:f9:ce:33:7c:e4:31:
72:f9:02:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:31:57 2025 by rpki-client