Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/93_X36UmYQFLP00IwnWXSzRypFQ.roa
File: 93_X36UmYQFLP00IwnWXSzRypFQ.roa (raw, json)
Hash identifier: WaloHTPg8wKHPpNApi5eYbONm9yOAKW3r6BN+9rWAIQ=
Subject key identifier: F7:7F:D7:DF:A5:26:61:01:4B:3F:4D:08:C2:75:97:4B:34:72:A4:54
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 018CC6B8195F7845AA1DA383D21E3D67AE1D
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/93_X36UmYQFLP00IwnWXSzRypFQ.roa
Signing time: Mon 01 Jan 2024 20:30:02 +0000
ROA not before: Mon 01 Jan 2024 20:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48612
IP address blocks: 85.140.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:19:5f:78:45:aa:1d:a3:83:d2:1e:3d:67:ae:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jan 1 20:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f77fd7dfa52661014b3f4d08c275974b3472a454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:f8:1c:c5:35:74:b6:4d:ae:0e:78:4d:e5:
d7:72:77:ee:ef:21:45:14:d8:52:8f:bf:1e:ef:a0:
c6:ca:80:7d:a3:c2:90:dd:8f:64:e0:b0:0f:ed:45:
98:35:cc:ca:e3:0a:18:58:b9:6f:3c:00:b1:40:43:
97:22:f2:d6:eb:1b:af:2a:11:49:46:43:86:13:b6:
5b:bf:74:ef:4a:16:9e:74:30:7d:09:3b:de:ac:82:
9a:bd:0c:4a:9a:26:31:22:8e:2f:27:3f:88:0e:be:
5d:4b:d3:37:dc:64:dc:ed:cf:63:78:c7:0b:45:e9:
18:2b:ea:8d:06:04:38:68:4c:73:a5:bf:55:5d:b7:
a4:d0:0c:51:32:f0:a5:7d:11:0a:69:1a:9a:2d:1a:
79:17:dd:83:5a:39:f1:57:6e:e0:e0:23:95:15:59:
32:a3:28:6e:ad:fb:47:23:4f:db:2c:e4:fb:10:1a:
b7:7c:58:29:03:09:ab:b9:41:bb:c3:1e:43:8a:2a:
0e:25:e6:27:82:7d:04:a4:6a:e5:cf:05:eb:11:58:
4c:83:fe:b8:f1:0e:5b:b0:43:d1:49:b6:f1:6c:9f:
e7:5b:a3:68:32:c3:91:05:a3:45:8f:a1:a9:ca:c2:
24:e4:5d:e3:34:46:41:30:54:17:53:d1:1a:7c:21:
02:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7F:D7:DF:A5:26:61:01:4B:3F:4D:08:C2:75:97:4B:34:72:A4:54
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/93_X36UmYQFLP00IwnWXSzRypFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.140.126.0/24
Signature Algorithm: sha256WithRSAEncryption
60:08:f3:95:2b:b2:85:25:d6:2b:ed:aa:20:37:06:bf:6c:82:
51:53:c7:0e:72:00:a3:50:69:06:b2:a5:4f:92:65:cd:22:bc:
a9:78:f6:7b:1d:42:91:82:bb:6d:21:d5:ee:b4:ca:4a:a0:fb:
91:88:d9:10:54:39:a7:5b:bf:db:b9:68:3b:0f:d1:c7:16:a8:
b5:a0:6f:74:d0:0a:50:85:5f:d2:d4:58:54:d8:2f:84:02:d8:
f2:7f:f5:7e:ab:30:e1:5f:0b:7c:12:09:52:db:cf:b7:4b:24:
0a:0c:c3:42:91:cc:f6:06:4b:91:2b:a9:da:4d:d0:16:ef:95:
ec:ed:17:86:7b:c7:01:84:dc:ec:4d:20:b9:32:f6:37:42:21:
a6:a4:57:d4:81:00:95:c9:b5:9d:0d:d0:19:39:70:10:b6:b5:
29:41:4e:a9:ed:92:3b:5d:db:fe:d4:13:dd:11:39:05:fb:1a:
48:37:23:75:55:89:91:23:0c:30:84:b9:ab:c3:8d:a4:01:cc:
cb:34:d6:b0:d5:d0:8c:c8:80:be:50:51:4f:24:46:44:51:d3:
44:24:a7:5e:89:fd:22:55:1f:75:52:b2:11:e5:2b:23:8c:f3:
c2:18:d8:2a:f5:e5:15:63:d0:17:e6:0e:21:75:71:16:8a:9a:
e6:eb:0f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:53 2025 by rpki-client