Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/FFhuCrAqlIr4ykRzWQbKeUIEERI.roa
File: FFhuCrAqlIr4ykRzWQbKeUIEERI.roa (raw, json)
Hash identifier: ghja0rcRVCvxUWIXFejmKHVbRsrqnlGR10okuYy9uLg=
Subject key identifier: 14:58:6E:0A:B0:2A:94:8A:F8:CA:44:73:59:06:CA:79:42:04:11:12
Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial: 018CC5DC7F19A89028FE78D81CE168A3B274
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/FFhuCrAqlIr4ykRzWQbKeUIEERI.roa
Signing time: Mon 01 Jan 2024 16:30:11 +0000
ROA not before: Mon 01 Jan 2024 16:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201270
IP address blocks: 217.107.192.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:7f:19:a8:90:28:fe:78:d8:1c:e1:68:a3:b2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Validity
Not Before: Jan 1 16:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14586e0ab02a948af8ca44735906ca7942041112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1d:a6:52:03:06:3a:8f:5f:2c:00:97:24:11:
08:af:90:39:40:0d:12:ec:e4:22:0d:8b:8f:7b:dd:
34:07:35:3f:db:00:fb:12:ec:60:56:01:98:35:ad:
1c:9e:3d:e4:48:26:12:22:79:a6:b6:bc:0a:50:ef:
7b:fa:3b:d6:df:fa:f5:d0:53:18:24:35:80:30:a8:
65:bb:ac:bd:9c:5c:c3:f5:c0:4a:08:e2:2e:33:a8:
b1:c1:db:d0:d7:9c:8e:ec:c8:9c:df:b3:b1:8e:e3:
c1:30:c2:ea:bb:a7:44:8e:38:df:9f:1f:28:b5:b6:
a5:bf:c0:b0:80:fe:08:1e:b1:96:36:e5:81:58:3a:
ef:cd:fc:f6:36:cf:35:86:91:33:0f:22:b3:a3:bc:
41:91:59:ae:6e:fa:d7:d1:2f:1a:6e:25:6b:a8:d7:
22:a0:91:e9:90:3b:d0:8c:3a:14:03:f4:28:8c:92:
34:a7:47:f2:75:5a:5a:1d:51:11:ac:67:a0:a8:92:
09:ff:1e:92:fd:c9:8f:8c:bd:b1:43:4a:fa:a1:b8:
e0:27:3a:82:75:7a:34:c5:67:a2:69:bd:49:34:8e:
68:1d:36:46:8e:d2:8a:09:31:09:5c:a1:17:f2:c7:
50:30:16:cb:31:b8:dc:ab:cd:b2:e8:65:d7:30:f5:
de:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:58:6E:0A:B0:2A:94:8A:F8:CA:44:73:59:06:CA:79:42:04:11:12
X509v3 Authority Key Identifier:
keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/FFhuCrAqlIr4ykRzWQbKeUIEERI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.107.192.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:6c:4f:4e:e7:37:14:f3:e1:2f:e0:ea:de:16:b3:0a:3e:d6:
f6:4c:22:54:f2:31:af:78:b9:f3:ba:db:02:a6:0c:a5:7e:f8:
d9:63:1e:da:58:80:6e:11:33:7e:3f:b5:88:5d:0b:55:c4:59:
94:78:d7:ab:82:82:9a:41:8d:f2:3e:2c:78:bc:48:cf:a1:3f:
76:20:05:5f:ad:59:aa:05:49:cf:ae:9b:29:36:a2:90:c8:d0:
e8:08:c6:c7:e2:33:60:fe:17:bc:bf:69:02:7c:8d:99:e0:75:
0a:37:e8:78:6c:f0:f8:51:e8:74:ed:14:1d:98:f4:40:b0:eb:
14:dd:3a:7b:88:88:a5:12:7d:fc:ff:01:76:19:16:7a:7e:b2:
b7:6a:83:9d:9e:d0:ab:9f:fb:36:18:7c:2d:d2:ce:00:51:a4:
4f:a4:bb:8a:5f:91:1d:4d:84:5a:9e:4f:c8:33:48:0f:13:33:
f3:8d:e1:4a:71:8a:2d:ed:b0:b2:16:66:f5:8d:f1:8c:fc:5e:
2e:34:bc:45:00:de:11:7d:e0:8f:bb:42:f5:11:fe:9d:40:cc:
07:69:fe:fc:24:35:4c:ac:fe:25:ab:f4:39:a4:11:7f:8a:66:
84:82:2a:4c:c7:43:67:d1:2e:e2:3d:de:5a:d5:73:db:2f:ec:
31:44:e5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:24 2025 by rpki-client