Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/eVQIZq8vZ7Y9RHxrTBxt0WQOqto.roa
File: eVQIZq8vZ7Y9RHxrTBxt0WQOqto.roa (raw, json)
Hash identifier: 4lnhqNmagH4jMuYu/vUNRVOlRIIHGmJ4S6wn00IrvZQ=
Subject key identifier: 79:54:08:66:AF:2F:67:B6:3D:44:7C:6B:4C:1C:6D:D1:64:0E:AA:DA
Certificate issuer: /CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Certificate serial: 018D3527B775F2D1515D67ECF1749021AD4F
Authority key identifier: 42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/eVQIZq8vZ7Y9RHxrTBxt0WQOqto.roa
Signing time: Tue 23 Jan 2024 07:10:11 +0000
ROA not before: Tue 23 Jan 2024 07:10:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28771
IP address blocks: 92.118.216.0/24 maxlen: 24
92.118.217.0/24 maxlen: 24
92.118.218.0/24 maxlen: 24
92.118.219.0/24 maxlen: 24
2001:67c:2b04::/48 maxlen: 48
2a09:d7c0::/30 maxlen: 30
2a09:d7c4::/30 maxlen: 30
Validation: Failed, certificate revoked on Wed 31 Jan 2024 07:44:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:35:27:b7:75:f2:d1:51:5d:67:ec:f1:74:90:21:ad:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Validity
Not Before: Jan 23 07:10:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79540866af2f67b63d447c6b4c1c6dd1640eaada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c4:16:c4:05:63:b4:10:9f:ab:0e:bb:7d:09:
21:3d:a5:64:10:d5:0f:1e:07:02:05:de:cb:54:da:
f9:5f:f0:41:d3:6f:f5:23:89:20:77:56:05:7c:e5:
31:f8:20:07:3e:48:9e:62:47:3b:54:9f:36:a4:f0:
e4:31:57:31:e1:17:17:4f:3c:1e:24:9b:c4:9e:3e:
b1:51:c8:25:11:80:70:d2:b0:40:5f:af:a2:a4:4f:
a6:1a:68:ca:49:2a:8a:93:be:c8:56:ee:dc:a8:ad:
3e:48:9a:3f:21:12:b2:12:e4:49:93:3a:d6:a0:e2:
e3:38:ff:03:53:3c:88:f6:b6:92:19:eb:37:e6:4f:
21:6d:46:1f:7f:59:33:4c:a0:22:a8:5c:ba:c4:5b:
8c:93:7b:5e:e4:78:1a:b5:7e:91:25:1c:01:0a:de:
84:d3:84:d7:93:df:d2:fc:ff:25:7a:a6:40:65:53:
72:ef:75:c7:37:df:e9:aa:cd:4f:c8:cb:5e:ea:e7:
03:ed:62:35:9c:22:54:cb:a6:e9:4d:8e:17:d9:b7:
fb:ca:bc:2c:19:cd:26:73:ac:84:29:0e:a8:56:27:
4b:db:46:7b:32:71:3d:0c:2a:0d:1d:ec:d3:50:40:
be:41:f7:1e:5c:9c:f0:48:b1:36:22:6f:72:e5:31:
e5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:54:08:66:AF:2F:67:B6:3D:44:7C:6B:4C:1C:6D:D1:64:0E:AA:DA
X509v3 Authority Key Identifier:
keyid:42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/eVQIZq8vZ7Y9RHxrTBxt0WQOqto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.216.0/22
IPv6:
2001:67c:2b04::/48
2a09:d7c0::/29
Signature Algorithm: sha256WithRSAEncryption
60:24:5e:1f:60:71:d3:3a:0e:35:8e:f0:54:93:dd:9d:70:e5:
6d:ff:e0:88:cb:13:07:93:f9:2f:a8:5e:84:02:a9:58:fb:2e:
c3:a9:32:0b:ba:6d:66:8a:82:ed:14:ad:90:a9:3a:16:4b:62:
7d:f3:4b:a9:5f:db:5b:66:36:7e:56:ca:d9:73:21:ec:6c:d6:
52:75:4b:85:b0:2c:e0:35:5e:2f:24:1d:be:36:73:bd:62:26:
69:84:f6:bb:12:a7:19:ba:08:bf:d3:59:cf:f6:b9:99:fc:d4:
e9:1e:f8:70:99:e5:5c:98:13:f4:60:c9:b7:cd:ef:b0:b3:9e:
ba:1f:90:32:c9:52:2d:39:1a:72:13:af:b1:8b:db:cf:33:62:
be:a5:df:84:de:71:97:f5:1f:5a:e0:1a:20:9b:0a:d7:ae:22:
9e:4b:5c:67:c6:57:bb:31:14:01:ca:52:79:a2:94:30:3c:74:
99:8e:2b:62:92:ad:00:85:db:5a:50:ae:6a:59:77:06:80:3b:
e4:2a:7d:a0:8a:df:8b:4e:c9:d1:68:d7:01:fb:6a:45:49:98:
ff:4b:ac:85:dd:a1:e6:2a:30:5b:2d:a5:00:e8:6b:e5:54:83:
82:93:09:d5:7c:bc:16:58:0a:b5:93:6a:ef:59:00:57:fb:73:
48:cf:1b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:16 2025 by rpki-client