Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fGgqsQ73p5_WwVDJMFQeTjvTZ-E.roa
File: fGgqsQ73p5_WwVDJMFQeTjvTZ-E.roa (raw, json)
Hash identifier: LBfesYky5VIYwN3A2PDim7mVuYt7HmdCZTCAigfTLpE=
Subject key identifier: 7C:68:2A:B1:0E:F7:A7:9F:D6:C1:50:C9:30:54:1E:4E:3B:D3:67:E1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192002DB9327B52502F3A72A59574CABFAB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fGgqsQ73p5_WwVDJMFQeTjvTZ-E.roa
Signing time: Tue 17 Sep 2024 13:30:49 +0000
ROA not before: Tue 17 Sep 2024 13:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59546
IP address blocks: 85.217.148.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:00:2d:b9:32:7b:52:50:2f:3a:72:a5:95:74:ca:bf:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 17 13:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c682ab10ef7a79fd6c150c930541e4e3bd367e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3f:b8:ea:86:de:bc:62:32:9b:5b:81:38:b6:
ef:42:9b:4e:9c:17:a8:c0:cb:ba:aa:96:82:c9:e3:
6e:d8:3f:c6:47:2f:2a:7e:50:6d:da:1a:ac:4a:3f:
e1:8c:16:7e:ef:b2:9e:a9:b5:b7:b3:a1:f0:35:3e:
f3:8b:e3:56:15:44:c0:80:9d:23:77:96:82:e2:c4:
e5:3d:fd:fe:c2:c1:82:92:8c:5f:e0:9f:c7:67:17:
77:06:3a:7b:a5:af:32:ab:e0:9b:eb:b9:05:6d:e8:
62:42:32:3a:1e:c3:f1:80:c7:51:a1:eb:00:53:77:
a8:e8:19:20:24:cf:ad:47:d3:cf:93:a0:3c:64:9a:
e3:23:d9:b3:3d:e5:1c:b6:51:b9:7f:61:16:f3:c6:
1b:d7:aa:64:7b:c8:35:97:17:fa:f4:30:7a:5a:6f:
48:16:b5:b0:77:74:f0:6c:9b:ef:c9:31:69:3c:82:
d4:07:76:da:77:7e:bf:86:fb:c4:04:d9:89:cf:77:
48:13:a5:96:2c:14:ad:d7:0c:ef:71:a1:b0:43:9f:
9b:ca:59:07:19:3d:07:08:ef:bb:4b:14:47:8b:48:
c3:46:a1:fe:e0:57:2c:b7:fb:1d:0b:4f:40:45:bb:
49:34:22:87:72:21:8f:48:bb:68:f7:ed:ce:3f:4c:
71:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:68:2A:B1:0E:F7:A7:9F:D6:C1:50:C9:30:54:1E:4E:3B:D3:67:E1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fGgqsQ73p5_WwVDJMFQeTjvTZ-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.148.0/24
Signature Algorithm: sha256WithRSAEncryption
81:70:e9:ec:9c:8b:cd:18:ee:75:fb:e3:49:6c:1a:20:a3:0a:
5e:27:40:bd:cc:d2:5e:5c:b7:43:a1:46:5d:55:65:3e:68:a3:
c2:84:a1:62:5d:ff:c2:69:6e:98:c5:a3:75:df:4e:b3:65:32:
19:24:42:c6:ee:d1:db:87:90:3a:81:5f:60:22:83:53:ac:c1:
c7:1a:bf:a0:2c:9c:dc:b1:e6:1a:79:c6:12:af:79:31:10:5a:
49:21:40:10:64:af:9c:63:7b:d0:9c:75:52:9e:48:45:ec:fe:
47:cf:f5:72:6f:9f:f3:26:fe:fb:be:9f:a5:02:88:57:b2:71:
37:31:76:ce:74:dd:ce:ac:80:b0:c8:ac:bd:8c:b4:68:ce:ad:
ba:bf:0f:d9:90:4f:02:89:0a:46:0d:00:e5:8a:77:ea:43:db:
31:af:5c:bd:0e:08:58:fb:ac:80:36:99:fb:b8:a5:d1:a5:db:
1c:4c:bb:e5:70:32:02:22:1e:75:96:9b:87:4d:77:f1:59:68:
db:d0:e6:2a:1d:d0:2e:d2:28:3e:1f:d4:07:8e:e7:8d:04:a1:
72:ce:2c:d9:cb:4f:bd:97:31:b0:2a:b3:5c:f8:aa:f2:bf:82:
1e:67:c4:c5:c3:7a:1a:64:46:45:bf:96:07:a0:aa:1c:f8:51:
45:4c:a1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:41 2025 by rpki-client