Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/2UgCmnphQUR5h_GjcHzTtBwqEXs.roa
File: 2UgCmnphQUR5h_GjcHzTtBwqEXs.roa (raw, json)
Hash identifier: FT192jt6bvUvqWXtGRCVvilNJxcG8taQTfnDCCsscnM=
Subject key identifier: D9:48:02:9A:7A:61:41:44:79:87:F1:A3:70:7C:D3:B4:1C:2A:11:7B
Certificate issuer: /CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Certificate serial: 018CC424D97275BBDA53AFB60747B71D6634
Authority key identifier: F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/2UgCmnphQUR5h_GjcHzTtBwqEXs.roa
Signing time: Mon 01 Jan 2024 08:29:58 +0000
ROA not before: Mon 01 Jan 2024 08:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21231
IP address blocks: 80.92.32.0/23 maxlen: 23
80.92.34.0/23 maxlen: 23
80.92.36.0/23 maxlen: 23
80.92.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:d9:72:75:bb:da:53:af:b6:07:47:b7:1d:66:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Validity
Not Before: Jan 1 08:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d948029a7a6141447987f1a3707cd3b41c2a117b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b5:0d:78:a5:d5:91:a6:21:41:90:86:ca:e1:
fd:97:71:27:5d:dd:b4:9a:b0:e0:8d:68:36:da:0d:
68:3d:ef:31:65:66:bf:3a:c3:d7:7e:4a:bb:1b:ca:
d8:a4:99:b1:a9:54:50:91:57:02:7a:86:df:c4:8c:
7c:a8:47:33:bc:b6:83:7a:82:9a:49:c8:66:75:ef:
cc:1a:e1:74:a5:f2:d0:d2:3f:64:80:b2:e4:d2:82:
85:6e:6a:96:b9:f4:28:82:e1:a8:96:01:4b:cb:51:
d2:5d:e3:ff:ea:d8:f9:cb:c2:b3:ab:30:49:6a:49:
a6:5a:fb:40:15:35:c1:04:6c:27:b5:d1:cf:9c:2d:
fb:f1:60:18:1f:de:03:e4:29:14:00:ca:a8:f5:6c:
20:e0:ae:95:39:53:d6:28:00:bd:72:63:a9:e4:e0:
7e:c4:3f:25:b3:4f:a7:5c:25:06:c3:d0:73:be:1b:
64:bb:c4:8a:fc:bc:23:c8:3a:86:94:ed:ac:19:b9:
89:25:cf:17:70:79:9f:5b:6b:bd:8e:19:c5:00:06:
36:3a:34:b8:7c:22:78:e3:57:96:e9:86:ac:8b:86:
21:27:d5:fa:2f:62:ed:2f:4c:64:f4:87:d5:c8:a5:
20:86:39:c2:db:86:47:97:20:41:76:dd:6e:a0:e1:
6b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:48:02:9A:7A:61:41:44:79:87:F1:A3:70:7C:D3:B4:1C:2A:11:7B
X509v3 Authority Key Identifier:
keyid:F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/2UgCmnphQUR5h_GjcHzTtBwqEXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.92.32.0-80.92.37.255
80.92.39.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:e2:6c:c9:ca:6e:d5:85:8c:db:13:ab:a2:cd:f9:c4:97:a3:
90:19:2e:11:10:ff:54:bc:20:f0:49:3a:1b:d4:4c:0f:88:ad:
7d:56:a6:ad:44:f6:a7:12:eb:65:d2:a8:cf:65:12:e8:3a:97:
51:0b:02:36:da:68:41:c7:50:64:59:db:fb:60:61:6f:a7:52:
21:43:e7:9f:7c:20:58:64:b7:fd:85:35:e5:fa:8b:b4:4d:25:
d7:54:66:b4:47:d6:01:7f:38:f3:29:c3:0b:c2:f9:27:86:e8:
da:ef:45:74:66:79:8b:00:4d:cb:af:2f:9a:49:29:e4:24:e8:
02:96:51:6c:d4:3b:65:a2:66:a5:98:17:d6:8e:66:8c:d4:ff:
25:7b:3d:2b:39:e6:a3:ec:01:93:f1:6a:9f:3a:29:36:c1:4e:
b9:06:6a:1d:95:ed:fe:7d:e7:e1:1d:ed:b7:50:f0:22:95:89:
28:7b:29:3d:4a:82:9a:63:bf:c9:5a:87:e6:ec:6f:65:fa:15:
24:6a:32:b0:eb:7b:2d:a9:32:8d:d8:5d:a7:f0:67:31:09:20:
86:8b:76:a7:3c:87:01:65:1d:5d:c4:02:de:c4:76:b2:1c:47:
ca:af:7c:92:b2:42:77:4c:b7:8f:96:69:af:14:0c:a3:1f:21:
bd:5d:76:de
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:31:01 2025 by rpki-client