Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/esumAh8pQeX1MrjfGMQTv_wGueQ.roa
File: esumAh8pQeX1MrjfGMQTv_wGueQ.roa (raw, json)
Hash identifier: BjBTc6XeKaVkRikrK4gqGRRRSzA5P37k0BqLzavBZ/Q=
Subject key identifier: 7A:CB:A6:02:1F:29:41:E5:F5:32:B8:DF:18:C4:13:BF:FC:06:B9:E4
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018ED129E39BDB28C654B0BC2BBA04BE5EDF
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/esumAh8pQeX1MrjfGMQTv_wGueQ.roa
Signing time: Fri 12 Apr 2024 07:16:07 +0000
ROA not before: Fri 12 Apr 2024 07:16:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51452
IP address blocks: 192.71.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Apr 2024 07:19:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d1:29:e3:9b:db:28:c6:54:b0:bc:2b:ba:04:be:5e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Apr 12 07:16:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7acba6021f2941e5f532b8df18c413bffc06b9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:36:b6:d3:97:69:9b:a3:db:1c:43:e3:83:00:
26:1c:ce:6c:0c:fb:28:0b:58:64:ec:99:18:46:db:
37:0b:31:ae:14:74:cb:83:a8:05:b7:24:9e:36:93:
16:ed:fe:75:f0:1d:63:02:bf:4b:46:0c:e3:dc:05:
23:f9:63:89:55:69:d7:be:51:fe:41:cc:21:d1:2d:
57:3c:a5:d7:d5:fd:90:92:23:ac:26:0e:96:09:a0:
68:80:e8:7f:a1:15:8e:22:2c:61:b4:99:84:04:6a:
bd:b4:8d:e8:4a:32:b2:b9:9b:4d:d1:04:6d:cc:36:
bc:ea:09:26:bf:2b:64:25:26:df:5f:83:51:34:46:
f6:4d:35:f9:1e:c2:d2:e2:ef:fc:70:0c:d0:41:0f:
d8:25:1e:30:92:6f:53:28:d3:7a:29:01:cf:d7:84:
88:c7:ad:b3:7e:3c:73:5d:a1:a0:33:d4:2e:1f:a6:
f0:54:1c:bf:b4:58:4f:9e:b3:70:43:c1:c5:18:47:
f1:70:36:3a:19:00:78:37:14:5b:a3:b8:38:8b:2e:
18:11:ae:5d:a2:c7:89:f3:37:67:05:2e:20:4d:8d:
bf:85:ff:df:e0:ae:ec:32:9e:8c:87:f6:f4:d8:2d:
16:d5:2f:84:ae:b1:d6:7c:90:75:e3:7f:16:ac:cd:
b0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CB:A6:02:1F:29:41:E5:F5:32:B8:DF:18:C4:13:BF:FC:06:B9:E4
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/esumAh8pQeX1MrjfGMQTv_wGueQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.255.0/24
Signature Algorithm: sha256WithRSAEncryption
13:b7:95:fc:fe:af:34:ec:5b:d2:3d:b3:8d:9c:f5:91:2d:bb:
92:3d:45:22:82:db:eb:ca:cf:8b:5f:b8:a9:e8:5f:71:74:ca:
92:47:2d:9c:7b:61:72:47:9b:e4:93:1d:cb:8a:3a:12:fd:89:
1d:da:5c:03:c6:75:fd:63:a3:13:b2:56:42:83:a2:4e:ae:27:
c9:7d:8d:7d:43:b8:f8:12:a5:7e:91:2d:75:8f:74:9a:9a:79:
e9:e4:4d:b7:e5:b9:24:7f:39:dc:55:83:7e:63:ca:34:54:fb:
26:59:f5:0f:29:d7:2b:73:42:6a:d8:1f:f7:db:97:a7:11:95:
e5:e3:ed:93:33:a4:a6:a3:25:68:aa:45:b0:53:a8:29:b1:09:
54:79:16:62:be:ae:9c:93:8b:f9:10:74:35:ca:27:80:d5:71:
36:5b:61:81:1e:d8:de:ff:e9:fe:04:4c:73:a5:23:00:34:1f:
13:25:2d:c3:13:f7:f8:03:85:c0:76:2c:cc:2f:c4:f6:e5:df:
ad:c5:45:58:8b:20:fb:95:94:59:c0:d5:72:1c:05:5e:9b:71:
6a:b4:f1:9e:11:d1:83:ff:e9:79:9b:99:f1:c4:a6:bb:a5:32:
4a:42:cf:35:b0:1f:04:f1:3e:c7:c7:2e:29:2c:9c:83:68:85:
c6:08:93:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 11:17:27 2025 by rpki-client