Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/LivPwo2YHbGYjrX5Rs6I_xbDL7U.roa
File: LivPwo2YHbGYjrX5Rs6I_xbDL7U.roa (raw, json)
Hash identifier: 0IFuF1UBpQiQ8MlTrBIokNpHgqhcnT7tVlv3ma8YqHg=
Subject key identifier: 2E:2B:CF:C2:8D:98:1D:B1:98:8E:B5:F9:46:CE:88:FF:16:C3:2F:B5
Certificate issuer: /CN=15bd7f78b7a044ae134c88b624e831a761143b79
Certificate serial: 01909B1356CB6992AD03D06049A73289DC26
Authority key identifier: 15:BD:7F:78:B7:A0:44:AE:13:4C:88:B6:24:E8:31:A7:61:14:3B:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/LivPwo2YHbGYjrX5Rs6I_xbDL7U.roa
Signing time: Wed 10 Jul 2024 05:17:34 +0000
ROA not before: Wed 10 Jul 2024 05:17:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31898
IP address blocks: 202.92.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jul 2024 08:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9b:13:56:cb:69:92:ad:03:d0:60:49:a7:32:89:dc:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15bd7f78b7a044ae134c88b624e831a761143b79
Validity
Not Before: Jul 10 05:17:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e2bcfc28d981db1988eb5f946ce88ff16c32fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ce:b3:c7:76:5a:17:fa:ca:49:49:45:79:55:
b9:02:55:1a:cb:7c:ce:d9:cf:71:ad:96:1b:52:87:
28:bc:b4:a8:7f:2d:4c:bb:42:3d:9c:77:9a:c6:47:
23:99:1d:bc:2e:38:7f:07:3e:cd:3c:8a:74:45:78:
d2:e8:e4:fb:d9:c7:b1:66:28:fb:04:2e:9f:6e:71:
5f:5e:4c:8a:fc:c3:41:2b:da:55:c6:b4:6b:1e:f2:
8e:d1:e7:17:75:64:4b:19:e6:be:42:2e:e7:a4:37:
f9:05:9d:61:5f:13:01:3f:40:7c:54:3e:fa:8c:bc:
44:da:83:b3:ff:a2:36:03:86:12:07:9f:e4:af:72:
4c:5c:75:36:d6:76:80:29:38:62:fe:79:6c:6b:3c:
26:71:7a:39:7e:91:89:9d:10:c9:6a:5a:19:e4:a8:
01:64:28:64:24:7e:3a:2d:93:9f:28:58:bd:f9:f3:
2f:09:22:85:11:52:cd:cd:c0:a7:07:8f:ec:c4:5d:
71:00:9f:34:d6:9e:83:ff:a8:3e:d1:d7:1d:e4:db:
26:ab:98:a7:4b:93:64:5b:75:38:0c:a9:21:85:b0:
c7:3d:c1:2c:80:49:f0:a2:21:5c:09:ed:09:da:07:
45:28:18:3b:99:c5:9e:b2:06:5c:93:72:8a:b7:ec:
d9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2B:CF:C2:8D:98:1D:B1:98:8E:B5:F9:46:CE:88:FF:16:C3:2F:B5
X509v3 Authority Key Identifier:
keyid:15:BD:7F:78:B7:A0:44:AE:13:4C:88:B6:24:E8:31:A7:61:14:3B:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/LivPwo2YHbGYjrX5Rs6I_xbDL7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/Fb1_eLegRK4TTIi2JOgxp2EUO3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.92.212.0/24
Signature Algorithm: sha256WithRSAEncryption
46:26:c0:e6:7f:2b:b6:80:f7:37:c0:90:bd:a4:2d:14:42:c0:
d7:bf:09:ff:3c:f5:26:39:d2:e5:8a:0d:ae:5e:93:4c:13:9c:
09:e5:03:25:86:d0:1b:77:0f:f6:f7:d3:ec:a9:14:e4:20:32:
0d:ee:1e:7c:06:5c:ef:cd:c3:55:27:2c:3d:82:fc:7b:d6:8f:
d1:b0:5b:24:3f:19:cb:83:b6:b6:28:e0:c5:4f:67:55:a0:53:
26:d9:53:9f:9c:2a:cd:3d:66:b2:8e:71:75:d1:13:9f:ca:ce:
d3:18:98:89:4a:e6:50:87:93:06:6f:8b:90:46:6a:d0:8a:c2:
9f:8d:dc:66:b2:12:ae:1e:89:9b:75:7f:7b:ea:3e:a9:03:9d:
c3:79:34:40:91:77:86:20:ef:d2:53:a7:b7:e3:c5:cc:d9:18:
18:61:9e:2d:62:26:0e:f2:d4:c7:51:9c:bd:eb:d1:66:90:0b:
2e:e0:86:f9:df:c0:e8:1c:57:74:01:d9:29:9b:c2:9f:ce:27:
10:2c:d6:4f:95:25:7a:bc:0b:42:b3:ee:28:98:59:fa:6f:04:
bb:31:1f:1d:9b:5a:bd:7a:8f:70:e6:08:9d:99:c1:ee:c8:b6:
63:7a:d7:39:42:59:5b:2b:25:5e:d5:ab:60:9d:9f:ec:21:30:
f1:e6:db:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:13:32 2025 by rpki-client