Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/DTf18vSA3geYdxvJZhwoAVKZmjo.roa
File: DTf18vSA3geYdxvJZhwoAVKZmjo.roa (raw, json)
Hash identifier: fZvgZg78SJWUwx6p04rhsVLpCqrd1C1Qit3NGE1c7Aw=
Subject key identifier: 0D:37:F5:F2:F4:80:DE:07:98:77:1B:C9:66:1C:28:01:52:99:9A:3A
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 018CCA2BB2B041436700BEB6024C7B808363
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/DTf18vSA3geYdxvJZhwoAVKZmjo.roa
Signing time: Tue 02 Jan 2024 12:35:10 +0000
ROA not before: Tue 02 Jan 2024 12:35:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31117
IP address blocks: 195.168.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:b2:b0:41:43:67:00:be:b6:02:4c:7b:80:83:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 2 12:35:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d37f5f2f480de0798771bc9661c280152999a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:62:21:86:fc:2a:ce:bf:a7:3b:45:df:1b:86:
9b:8f:2c:b8:eb:7a:19:58:b8:44:b5:70:12:25:7e:
dc:26:58:d0:ef:f1:e6:fb:21:d5:6b:20:01:a9:0d:
3f:2f:b7:0e:ca:73:3b:a2:5c:75:c7:f2:f8:57:f7:
d1:f5:94:aa:a4:8b:c2:4b:c2:c5:e4:5f:85:34:67:
00:62:9a:20:92:2a:71:3e:1f:93:2c:48:2f:63:ad:
04:c5:ac:4a:5e:c5:6d:f6:37:be:fa:20:77:d4:76:
a8:cc:6c:98:05:2e:dc:15:38:f1:7c:62:be:b4:74:
0c:09:e2:74:3f:62:2a:32:21:8f:b2:ad:ee:60:ce:
f6:72:85:6b:95:dd:5a:e6:b6:93:00:db:bb:bf:e5:
9a:08:20:3f:58:ce:df:d1:38:78:9d:67:32:18:63:
c9:e8:bf:74:f5:dd:5a:c3:4c:f0:73:33:de:98:83:
6c:0f:4b:02:d7:10:23:97:10:f0:52:ac:e0:f8:78:
68:fa:f6:d0:9f:c4:ab:da:8a:01:60:9d:f2:6a:74:
61:3d:39:70:f4:92:c0:9c:24:0e:e5:9a:73:91:9a:
98:10:44:98:81:54:be:e8:2b:e5:cd:d8:8d:82:d3:
29:7c:65:91:fe:e8:ac:d8:4a:ff:85:b6:ab:da:fb:
45:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:37:F5:F2:F4:80:DE:07:98:77:1B:C9:66:1C:28:01:52:99:9A:3A
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/DTf18vSA3geYdxvJZhwoAVKZmjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.168.216.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ff:d7:a0:86:ed:ef:49:51:4b:75:05:93:74:f2:66:22:86:
e4:d3:06:87:a8:3b:a9:17:c0:74:c9:63:62:29:00:5c:45:5b:
b8:06:7c:d1:d5:10:1d:83:38:a0:ac:c4:14:71:e8:85:4a:63:
89:b8:73:42:70:0e:51:f2:3d:9f:2f:90:a8:3a:5a:2c:67:39:
06:90:fc:d4:97:f5:49:a3:5d:37:50:e0:cc:72:ad:94:77:85:
c4:a1:94:03:91:ed:70:99:48:dc:6d:35:37:e9:a3:95:b1:12:
6b:3b:b9:a5:3d:d7:c1:9f:16:e7:ec:c1:5d:ea:d1:61:57:ae:
75:b0:af:34:25:a4:b7:69:4c:56:03:4e:74:d8:3c:78:04:8b:
bd:f0:c3:dc:6f:61:44:0f:2c:d8:5d:7c:1b:00:d6:f4:64:bf:
ae:47:f5:62:4e:16:10:b9:46:4e:e0:27:2f:5b:61:39:b4:ad:
ce:4d:07:89:21:96:46:35:ec:66:f2:72:68:ed:14:72:a9:b2:
04:2e:78:10:9b:81:02:58:c6:cd:e8:2a:9e:cd:32:56:d4:6a:
aa:0e:a5:90:b5:a4:5a:67:f9:4a:89:2d:88:d7:ee:87:16:95:
7d:00:44:26:35:87:8d:2b:5a:24:5c:99:05:6d:8a:1a:f3:36:
35:79:39:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:23:53 2025 by rpki-client