Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/fS4iqNT-zKzHJknq_ig_K6de6ZI.roa
File: fS4iqNT-zKzHJknq_ig_K6de6ZI.roa (raw, json)
Hash identifier: xaUxV8oQ/iwONQ3ByJ8skCADcU7DMNhhkLgsVmTToN8=
Subject key identifier: 7D:2E:22:A8:D4:FE:CC:AC:C7:26:49:EA:FE:28:3F:2B:A7:5E:E9:92
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018CC9A31970CDB5B4159DB3BADB60CFCBD3
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/fS4iqNT-zKzHJknq_ig_K6de6ZI.roa
Signing time: Tue 02 Jan 2024 10:05:58 +0000
ROA not before: Tue 02 Jan 2024 10:05:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44208
IP address blocks: 94.74.190.0/24 maxlen: 24
109.203.161.0/24 maxlen: 24
94.74.128.0/18 maxlen: 24
94.74.136.0/24 maxlen: 24
31.170.48.0/20 maxlen: 24
94.74.165.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.166.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 18 Jan 2024 07:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:a3:19:70:cd:b5:b4:15:9d:b3:ba:db:60:cf:cb:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 2 10:05:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d2e22a8d4feccacc72649eafe283f2ba75ee992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:06:82:53:d6:ff:4f:fe:f5:d3:69:90:e3:
14:5e:9a:08:42:cd:4c:2d:07:4f:05:3b:f8:fb:df:
1b:03:94:10:02:e4:1a:5d:1f:ce:47:71:1e:77:7a:
c0:06:43:f0:83:4c:ed:cf:b8:a7:c7:42:76:be:e8:
e8:0e:ed:03:9e:a0:3e:d3:08:5c:dd:3e:58:e4:84:
ec:66:aa:57:47:fd:44:41:f8:d3:e0:90:d5:64:b8:
25:c4:5d:27:7b:53:e3:28:39:32:58:ac:a4:49:7d:
79:b2:9d:f2:1d:c6:97:74:d0:ab:15:c8:f7:3e:9f:
d7:72:a8:2e:fc:d8:12:88:7e:02:aa:fb:2e:43:f7:
fc:b3:cb:8d:5f:e8:59:62:d3:b6:45:29:87:ed:17:
11:0f:5e:ec:7f:54:b8:1e:0e:de:b1:f1:15:50:10:
0b:d6:34:47:46:74:15:b3:d3:23:65:d8:33:17:7c:
e1:a0:0f:b1:cf:dd:58:84:02:50:23:5d:8e:a4:1e:
e8:11:0b:71:fe:cd:79:90:31:c8:86:19:79:a7:dd:
d4:86:4f:61:0c:ae:79:98:89:20:34:a8:e1:81:15:
99:cb:60:2a:bc:76:e1:c5:b6:89:3c:cb:b4:e0:2a:
82:43:33:6a:b7:90:88:63:58:5e:e3:e4:c9:fe:ce:
ff:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2E:22:A8:D4:FE:CC:AC:C7:26:49:EA:FE:28:3F:2B:A7:5E:E9:92
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/fS4iqNT-zKzHJknq_ig_K6de6ZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
94.74.128.0/18
109.203.161.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:5d:e3:d8:7e:5c:ff:23:46:cd:00:e1:c0:b8:1a:01:da:ca:
f6:6a:54:13:33:38:e1:bc:eb:5d:e1:9c:7d:0b:b7:7e:06:f5:
56:58:bf:73:d3:a7:ec:50:bd:96:93:b7:21:3a:29:17:19:ca:
2a:fa:41:2d:85:c6:03:98:cb:d0:18:4b:45:57:4b:d8:03:70:
df:0a:e2:1d:1c:a8:d1:e1:45:e0:e8:ea:b9:23:d0:ee:59:b8:
6c:55:30:0f:96:30:52:bc:b1:4b:11:4e:2c:69:22:58:54:42:
55:91:b2:a0:fb:8a:24:22:92:f0:53:19:77:ce:91:0e:1d:32:
28:e6:8b:11:26:eb:98:18:e3:93:28:ae:45:67:f3:dc:fa:72:
44:73:34:84:0f:f3:a0:71:ce:10:65:f4:77:e3:ec:e1:40:3f:
81:6d:59:c5:57:2a:08:63:c7:ea:49:bf:84:96:23:9c:a5:61:
1b:ac:4c:57:8c:28:4a:64:0e:20:b8:24:04:b5:dc:47:8a:34:
6d:cb:d2:cb:a4:c2:cd:07:c4:fb:c1:f1:2e:83:47:9f:57:59:
78:95:39:c4:fd:ff:d8:c9:95:9e:c0:9c:60:23:2b:46:56:de:
a9:af:1a:95:4c:5d:69:15:36:03:d5:35:aa:bc:4e:25:24:58:
f0:dc:46:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:22 2025 by rpki-client