Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/fvdpIYkv_8F77t2KYt-CADRdtTk.roa
File: fvdpIYkv_8F77t2KYt-CADRdtTk.roa (raw, json)
Hash identifier: sRBMkvGGeCXmK9naWlXe5QMF+KAtyKx1+GI8a6R2uaQ=
Subject key identifier: 7E:F7:69:21:89:2F:FF:C1:7B:EE:DD:8A:62:DF:82:00:34:5D:B5:39
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0191DA4C72595EF672E2B8E9141B85C6544D
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/fvdpIYkv_8F77t2KYt-CADRdtTk.roa
Signing time: Tue 10 Sep 2024 04:58:48 +0000
ROA not before: Tue 10 Sep 2024 04:58:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12679
IP address blocks: 94.137.72.0/24 maxlen: 24
94.137.78.0/24 maxlen: 24
94.137.79.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Sep 2024 09:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:da:4c:72:59:5e:f6:72:e2:b8:e9:14:1b:85:c6:54:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Sep 10 04:58:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ef76921892fffc17beedd8a62df8200345db539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:05:2a:35:ae:e8:ae:39:bf:2c:2a:46:21:91:
8a:6f:bf:fb:08:50:0b:99:49:65:cc:cf:39:55:ac:
46:b9:1a:94:10:23:01:fd:87:26:25:d4:8b:33:93:
48:b3:11:a8:bb:c4:d3:1c:da:6e:b8:1c:db:8b:71:
2f:55:9d:2d:5b:42:73:0f:c0:9a:04:e5:75:78:74:
90:88:4d:1b:8c:4f:85:43:b7:5f:64:db:ba:e4:2b:
d4:86:3c:c6:07:99:de:4e:03:39:94:2d:8d:ff:83:
33:87:dd:2e:a0:91:38:a1:b3:a5:cd:ee:51:2a:89:
cd:5b:37:2e:bc:fb:d2:b9:b2:70:6f:c0:e6:36:b6:
80:88:da:a5:a1:45:0c:83:f6:7a:cd:cd:69:d8:27:
b0:7d:a9:ec:0e:fc:6f:64:68:0a:12:ec:60:80:64:
7b:91:a7:cc:09:ee:be:96:cf:5a:d7:f4:a3:87:d1:
7d:13:53:17:b7:b7:da:e9:06:0a:8e:3c:4f:bc:bd:
e2:ec:62:53:67:4f:98:b0:3a:29:ca:99:12:e1:17:
0e:37:c7:0a:5f:5f:cf:93:9e:b7:b2:a3:20:24:39:
35:c5:7f:da:9e:a0:b7:7e:d2:2a:2e:e0:21:f8:ec:
3a:c5:de:7b:d8:b5:be:b6:5e:f4:1b:09:07:69:fb:
cb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F7:69:21:89:2F:FF:C1:7B:EE:DD:8A:62:DF:82:00:34:5D:B5:39
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/fvdpIYkv_8F77t2KYt-CADRdtTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.72.0/24
94.137.78.0/23
94.137.89.0-94.137.91.255
Signature Algorithm: sha256WithRSAEncryption
6a:3d:74:4a:18:0b:fd:1e:ba:fd:21:13:e3:77:ea:c4:7d:f2:
c6:2a:e6:de:65:43:b3:50:98:43:f5:d8:af:ca:6e:6d:f2:e9:
dd:65:2e:c9:72:54:c2:0e:a8:12:c7:d0:76:dd:0d:71:29:e5:
71:e5:f6:d6:8d:55:5f:93:cc:2c:41:bb:61:25:72:c5:36:f3:
cb:54:0c:80:73:4e:59:99:31:96:46:87:53:92:7f:c4:c8:d6:
c0:f0:e0:5d:08:c7:fe:86:b3:b7:b4:bd:04:30:71:0b:8f:bc:
51:35:37:1c:73:7a:cd:19:b8:4b:93:e4:04:d3:2d:ad:ff:00:
58:dd:a4:72:30:2c:67:c7:b0:aa:98:b0:4d:ee:54:5f:ef:a5:
a1:8b:f0:7c:b5:a7:2e:aa:35:5f:90:7f:0f:c4:33:56:2d:c6:
4f:5c:05:2a:a3:05:64:16:c0:10:74:86:bd:55:03:7b:32:0e:
75:43:34:ce:60:a8:66:86:03:6c:0b:bf:ca:3e:52:54:37:7e:
16:c0:72:a6:c6:6a:66:f8:e1:d6:bf:3b:dd:0e:84:1c:a4:76:
49:fd:e2:22:81:32:0d:5e:99:d3:06:db:3d:52:06:00:ce:6e:
5f:0e:91:f2:ed:a8:28:5b:82:c4:bb:3b:d1:fa:b9:b7:43:15:
dc:2f:f1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:17 2025 by rpki-client