Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/vxNUmBOrdHBOOY7JKQlo-JYUGuI.roa
File: vxNUmBOrdHBOOY7JKQlo-JYUGuI.roa (raw, json)
Hash identifier: EggKjPXBXRRZtM/ozvkRNHgxQ+QP1bffwxo7rw+ljSM=
Subject key identifier: BF:13:54:98:13:AB:74:70:4E:39:8E:C9:29:09:68:F8:96:14:1A:E2
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01911371B5F7DCFE017F5AD2FA4DB07B29E0
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/vxNUmBOrdHBOOY7JKQlo-JYUGuI.roa
Signing time: Fri 02 Aug 2024 14:15:04 +0000
ROA not before: Fri 02 Aug 2024 14:15:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25211
IP address blocks: 85.239.144.0/24 maxlen: 24
85.239.148.0/24 maxlen: 24
85.239.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 05:53:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:13:71:b5:f7:dc:fe:01:7f:5a:d2:fa:4d:b0:7b:29:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Aug 2 14:15:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf13549813ab74704e398ec9290968f896141ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f8:7b:13:1b:68:b1:94:2e:15:0d:d3:df:d7:
03:5b:5d:fd:4a:46:42:59:56:a5:a7:66:9b:f5:84:
f4:36:a2:cf:a1:fc:70:42:3d:a2:aa:08:ab:b4:cb:
1c:24:9b:64:3e:02:31:8c:df:a3:45:2e:24:f4:00:
5f:94:4a:b1:44:65:db:7c:5f:0c:da:e3:ba:e0:34:
42:7d:84:cf:e7:10:03:6e:c1:d9:6e:78:7d:71:eb:
21:48:95:70:ce:6b:c5:6c:81:11:30:f7:6d:52:f6:
fc:0a:3a:1f:30:4a:88:2d:a5:0c:f2:a0:34:a4:80:
50:b2:3b:9b:97:f4:a2:33:82:f7:9c:09:71:03:31:
33:e6:ad:54:8d:28:ee:73:c0:71:49:2c:73:d4:ff:
f9:36:43:76:52:cd:60:93:c3:0e:df:7c:c2:f7:70:
cd:7d:5f:21:08:32:5e:38:ab:26:5b:97:34:37:3d:
36:00:00:8b:e1:3d:85:e8:03:ae:9d:26:39:69:3d:
74:53:65:0f:56:06:9d:0a:f8:4c:60:de:91:70:24:
7a:a4:40:d5:88:0e:17:5e:75:da:75:2c:af:7d:53:
6e:af:d7:a7:ca:29:82:27:c8:b1:c4:6e:8d:f6:5d:
d7:03:f6:6d:7d:8e:0a:93:e3:71:38:df:4c:74:27:
1e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:13:54:98:13:AB:74:70:4E:39:8E:C9:29:09:68:F8:96:14:1A:E2
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/vxNUmBOrdHBOOY7JKQlo-JYUGuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.144.0/24
85.239.148.0/24
85.239.150.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:b5:5b:a3:5f:f5:a4:fa:65:07:a2:94:4e:d1:4d:b5:bc:bd:
a5:0d:d0:87:07:4e:6d:f0:47:ea:8f:b5:fd:84:e8:31:93:ff:
d8:d9:83:43:be:53:37:eb:7f:7b:8a:9b:f2:88:9a:e0:ac:11:
8f:28:67:03:4c:65:eb:d9:69:14:63:c0:4d:73:f2:47:4b:2f:
39:53:a7:70:29:78:9e:a7:13:2b:65:23:04:6e:27:d3:0f:a8:
43:02:17:d1:1e:da:52:f1:8b:99:cf:81:54:02:7e:b6:fa:a3:
93:80:85:6e:94:2c:de:ee:6d:51:0e:cf:44:95:ea:ec:41:d9:
f8:1c:2a:fc:14:56:99:c1:01:04:4b:67:eb:ed:cb:1e:f8:39:
86:08:5e:ab:cf:a7:f4:44:b9:e7:13:f1:d7:8b:a7:ea:db:e0:
f8:d9:b3:a9:a8:c4:83:af:c9:9e:e5:9f:37:82:c9:10:f4:bd:
a5:c5:5c:fb:60:04:09:be:03:e7:df:4b:0e:74:15:4b:68:c9:
65:58:fc:f1:67:a5:90:ca:d3:00:95:cd:28:24:18:b9:6d:f7:
ab:a4:4b:57:8d:8d:8b:63:68:1e:68:a4:fa:5d:be:c0:ad:ee:
ee:d4:e2:e3:77:f6:13:4a:7d:f9:fd:f5:ab:c7:d9:a7:aa:0d:
d7:b3:35:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:02 2025 by rpki-client