Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1BVuVZ-lEIiwIwvHqeqJ1B5Dhbs.roa
File: 1BVuVZ-lEIiwIwvHqeqJ1B5Dhbs.roa (raw, json)
Hash identifier: rWXDSy111ZwLPhUbbQedlGaCcEB9MsuIzTRCW6znhKA=
Subject key identifier: D4:15:6E:55:9F:A5:10:88:B0:23:0B:C7:A9:EA:89:D4:1E:43:85:BB
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 0190780430BAC6B5969192D776B448346A94
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1BVuVZ-lEIiwIwvHqeqJ1B5Dhbs.roa
Signing time: Wed 03 Jul 2024 09:54:18 +0000
ROA not before: Wed 03 Jul 2024 09:54:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 159.148.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jul 2024 10:49:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:78:04:30:ba:c6:b5:96:91:92:d7:76:b4:48:34:6a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jul 3 09:54:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4156e559fa51088b0230bc7a9ea89d41e4385bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:78:a4:de:aa:9c:7b:bb:ef:ea:e9:96:84:70:
ed:18:9b:13:2f:b5:78:93:b9:d0:47:5d:d6:20:7c:
5b:a2:9f:b4:51:8e:6c:cd:88:6d:90:f2:c0:92:73:
23:96:53:ba:79:aa:9d:a3:b3:28:a0:26:bc:a6:d1:
61:d0:fb:d4:dd:17:53:4f:f6:0b:3e:9b:aa:ab:68:
75:53:55:e3:72:16:35:32:05:91:c5:dc:13:e6:1f:
80:28:ef:13:60:f0:90:bd:51:6f:4c:72:1b:33:e0:
16:35:d6:4b:cb:3d:46:83:0b:73:97:23:05:c0:34:
35:9e:6c:d9:c2:8c:76:3c:48:1c:54:bb:eb:cb:8b:
73:12:47:84:63:6a:a6:e8:f7:4e:43:80:2d:81:63:
e8:40:75:f8:60:32:b3:84:44:07:04:50:0a:4a:ff:
12:10:d3:00:72:f2:3e:e5:e1:be:18:35:65:11:f0:
a1:9d:d4:f2:ad:09:89:0f:2f:91:bb:42:5c:79:7e:
ce:61:dc:5b:a3:13:90:6e:6d:6f:65:a0:9a:7d:87:
6e:f5:0d:80:12:da:4a:b4:fb:ff:64:0a:a3:de:be:
70:34:09:ba:a2:6f:48:c3:2b:af:86:50:1b:46:c2:
c1:34:b6:38:b4:fb:4e:c7:be:ca:75:50:9f:92:91:
d1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:15:6E:55:9F:A5:10:88:B0:23:0B:C7:A9:EA:89:D4:1E:43:85:BB
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1BVuVZ-lEIiwIwvHqeqJ1B5Dhbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.109.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:37:e9:09:6f:50:97:df:ff:89:0e:52:fa:d7:fa:f6:f6:98:
10:f3:f5:73:39:de:c3:72:82:cc:a5:f2:51:d6:69:30:19:bf:
3f:90:d2:5c:0f:50:b3:29:57:3c:19:cf:78:6a:05:8a:f4:5b:
07:f7:a3:79:96:36:93:da:ea:3c:76:3f:b6:dd:c6:3f:53:16:
29:f7:08:9b:24:91:63:4e:41:21:0b:4a:b5:1f:0a:a0:89:f3:
a2:19:3d:dc:f6:6e:86:b7:62:48:68:fc:0d:b9:13:de:6b:5f:
26:ed:36:ee:be:6b:ef:12:8d:9a:96:f6:55:52:f7:48:ea:cd:
93:0e:fa:43:60:59:47:9b:0c:df:c5:a4:6e:d9:bc:aa:ac:83:
80:38:4a:9c:7f:fd:46:81:df:e1:5e:f8:53:99:27:64:0e:23:
6e:3a:6f:4b:ba:34:7c:43:d5:76:3b:47:22:b1:8f:4d:47:ea:
b8:db:20:a9:66:3b:77:5a:5e:29:1b:86:b5:59:6e:90:c8:db:
98:90:ac:ab:8a:27:ab:3f:f9:20:18:72:f3:1a:53:32:6b:8b:
ed:d0:cc:fe:c4:5c:6b:30:32:47:2b:f3:03:3f:1d:3d:05:6b:
24:8a:e2:12:cc:e1:25:7f:6d:d5:1f:00:72:dd:01:d3:67:d5:
67:3d:52:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:07:40 2025 by rpki-client