Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/m8uoC_Ia34dSftfonBkg_SBC2PA.roa
File: m8uoC_Ia34dSftfonBkg_SBC2PA.roa (raw, json)
Hash identifier: gF/vx/eF5KHSbkxyyQj+1qTenv8a3G1l4RPo0Cu55ds=
Subject key identifier: 9B:CB:A8:0B:F2:1A:DF:87:52:7E:D7:E8:9C:19:20:FD:20:42:D8:F0
Certificate issuer: /CN=fcd77e6877829833043333538b47f12682cebdc3
Certificate serial: 018F9B94B2ED4CCDF0F8326C218A311DC4E8
Authority key identifier: FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/m8uoC_Ia34dSftfonBkg_SBC2PA.roa
Signing time: Tue 21 May 2024 14:36:04 +0000
ROA not before: Tue 21 May 2024 14:36:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210136
IP address blocks: 62.192.144.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9b:94:b2:ed:4c:cd:f0:f8:32:6c:21:8a:31:1d:c4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd77e6877829833043333538b47f12682cebdc3
Validity
Not Before: May 21 14:36:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bcba80bf21adf87527ed7e89c1920fd2042d8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:28:c8:0d:0c:7a:6c:6e:a2:cd:5e:c8:21:b9:
dd:77:1b:3c:d8:86:63:57:a7:90:71:42:a9:3e:8d:
20:15:b7:fc:3a:ca:95:51:e7:a9:fc:e0:c8:63:db:
3b:41:f1:74:81:ce:b2:7d:0b:39:ef:f0:c7:82:53:
7a:af:c2:d7:1e:50:e3:ce:01:9b:a8:74:77:0d:9c:
b8:78:b7:2a:8b:94:de:9c:8f:2c:13:34:45:79:5e:
d9:0e:ae:61:be:cb:ef:24:21:17:94:40:ca:ca:17:
5d:26:74:b2:b1:67:34:94:56:89:c1:ed:36:f3:57:
c9:1f:36:06:30:7b:9e:ae:ee:7c:92:4f:bb:c7:7e:
7e:cb:1a:b2:80:d5:4d:7d:1d:72:c8:90:88:de:2c:
80:c9:8b:b8:72:81:ea:9a:7b:00:d6:57:4a:b4:32:
c7:a8:9b:19:5f:c9:7f:bb:2b:54:52:bf:ea:e4:63:
a6:bf:1d:b6:9c:34:ba:59:34:31:d0:b9:e5:10:2a:
d4:dd:8f:e0:a1:80:a1:51:09:52:93:1b:a7:fe:55:
9a:8e:a4:17:a7:5d:67:67:8f:f2:fd:14:35:9f:87:
2c:b9:e5:35:18:31:cc:f7:35:41:5e:8b:d7:0e:78:
e9:a9:75:79:63:b4:fb:97:e7:c7:a5:19:45:8c:26:
27:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CB:A8:0B:F2:1A:DF:87:52:7E:D7:E8:9C:19:20:FD:20:42:D8:F0
X509v3 Authority Key Identifier:
keyid:FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/m8uoC_Ia34dSftfonBkg_SBC2PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.144.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:50:1d:ff:02:23:19:66:a0:40:f5:99:6b:4e:fb:8a:cb:b5:
dc:f9:f2:7b:8b:64:3e:c5:b9:be:10:0a:47:a4:8c:1a:29:6c:
83:6d:0c:61:59:67:59:62:bc:ce:aa:d1:19:1b:79:95:a1:13:
14:e7:2a:29:f5:14:be:df:94:13:5f:16:8f:62:d6:3f:6c:ec:
11:f2:5d:d7:a6:51:79:bf:2a:91:d5:2d:ea:be:0a:88:d2:0a:
45:43:0f:cc:77:b5:e4:cd:b7:81:f6:a7:12:1e:bf:bd:da:88:
d3:f7:ec:66:a5:95:91:38:32:58:f0:f1:2c:98:76:28:33:e7:
06:05:58:df:df:9c:19:8d:90:12:85:15:29:93:db:f8:bf:b5:
91:75:cd:83:8f:d0:09:49:08:38:19:39:67:f4:0e:80:35:9c:
f9:01:9d:24:29:a5:90:9e:7a:cb:00:1b:4c:79:ec:e9:d4:d7:
fd:80:0e:35:85:43:c5:ec:f4:3a:b5:51:82:f3:22:8f:c7:93:
7d:20:a6:94:14:78:ab:b8:5b:8d:15:1a:1c:82:ca:d1:e5:90:
a0:f0:ae:35:ab:f1:25:f4:b7:6d:5c:3e:5d:be:1d:67:54:cb:
6d:59:7d:13:0f:42:35:3a:07:58:10:3a:37:df:65:3a:5d:6c:
b1:61:8b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:10:20 2025 by rpki-client