Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/eppZz3U06M1_8yUaC_DNTgYGctw.roa
File: eppZz3U06M1_8yUaC_DNTgYGctw.roa (raw, json)
Hash identifier: F3zCro8SCICj4rG9KGNeRCpKeKoya5AF0J43+yZ6hrA=
Subject key identifier: 7A:9A:59:CF:75:34:E8:CD:7F:F3:25:1A:0B:F0:CD:4E:06:06:72:DC
Certificate issuer: /CN=90c3cae86555687324319d1226938c703ee4edc1
Certificate serial: 0193C9FBCD8687E66D02E4EE73826B5EF68E
Authority key identifier: 90:C3:CA:E8:65:55:68:73:24:31:9D:12:26:93:8C:70:3E:E4:ED:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/eppZz3U06M1_8yUaC_DNTgYGctw.roa
Signing time: Sun 15 Dec 2024 11:02:22 +0000
ROA not before: Sun 15 Dec 2024 11:02:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202392
IP address blocks: 194.62.148.0/24 maxlen: 24
194.62.149.0/24 maxlen: 24
194.62.150.0/24 maxlen: 24
194.62.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c9:fb:cd:86:87:e6:6d:02:e4:ee:73:82:6b:5e:f6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90c3cae86555687324319d1226938c703ee4edc1
Validity
Not Before: Dec 15 11:02:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a9a59cf7534e8cd7ff3251a0bf0cd4e060672dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8e:18:ec:f7:71:7f:69:cc:36:6f:b5:46:a1:
83:a5:1b:6f:a4:26:0b:87:a1:0d:87:d2:15:bd:33:
4b:2c:38:ee:b3:64:f6:fa:1f:5b:e5:f4:16:36:36:
bb:db:64:cd:9f:97:51:59:a4:72:55:c2:f6:71:9b:
69:ec:49:84:ae:c2:00:c4:8e:aa:47:8c:25:9f:06:
1a:29:c7:e8:00:fd:ab:4c:3b:f5:1f:a3:6e:3c:77:
86:fb:cf:0d:8a:09:73:c6:ed:d0:bb:82:86:93:55:
20:21:35:16:ef:12:2d:87:c5:ea:19:71:70:6e:31:
54:86:c6:5a:f4:82:c8:37:d8:32:6f:94:c8:45:eb:
51:41:ed:f1:20:68:3b:1c:d0:24:f2:e6:3a:bb:bc:
51:b4:05:e6:56:ad:fe:f9:0c:c7:e6:d3:dc:00:21:
63:bf:53:64:fb:41:d4:bd:d7:2a:16:5c:46:ff:b9:
e6:f2:cf:5b:db:3e:1e:37:26:ff:35:e1:1c:e1:57:
4d:f9:7d:14:f6:7f:c2:72:2a:0c:ed:18:4b:3f:98:
d1:b8:44:f7:39:c0:ab:29:7c:bb:2e:2a:86:3c:cd:
56:74:9e:0e:33:5b:a9:59:93:b0:9b:1c:80:3e:f3:
57:d0:35:a0:87:24:e4:e8:20:6a:bb:f0:54:04:2d:
4f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9A:59:CF:75:34:E8:CD:7F:F3:25:1A:0B:F0:CD:4E:06:06:72:DC
X509v3 Authority Key Identifier:
keyid:90:C3:CA:E8:65:55:68:73:24:31:9D:12:26:93:8C:70:3E:E4:ED:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/eppZz3U06M1_8yUaC_DNTgYGctw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.148.0/22
Signature Algorithm: sha256WithRSAEncryption
72:20:53:74:cc:73:8d:da:74:b4:dd:c3:a2:5e:6b:44:a3:ec:
42:2a:fb:03:49:6d:f2:c9:98:14:20:51:9d:23:6e:a4:7e:19:
e4:4b:ef:76:44:86:d5:b5:77:c8:3b:48:8d:c4:c0:d5:d4:33:
1c:51:3b:28:04:1f:4c:b0:ba:fa:99:88:d6:cb:3f:64:27:16:
e9:d6:cf:30:fb:13:98:dd:ae:b0:47:79:c9:ed:e6:1d:f6:f0:
b6:da:32:ed:4c:ad:8f:eb:fb:b8:89:3a:f5:b7:f1:35:65:70:
de:d1:5c:cb:cc:0b:ad:65:b5:80:ef:69:00:0f:df:24:d5:35:
8e:3a:d0:35:1f:55:21:82:8c:7f:3f:98:54:e1:12:3f:b8:69:
aa:70:68:97:6f:8a:a1:da:ef:c1:8c:aa:cc:52:02:4a:28:8e:
44:41:c1:99:4a:92:ec:31:e0:ac:d8:5b:e0:ed:54:05:8c:c5:
ff:5f:6b:bc:e6:8d:03:a1:d6:8d:86:2c:52:e7:8e:12:b1:4b:
4b:37:61:d0:af:03:ca:7f:04:83:db:75:92:35:d6:fa:70:c3:
5e:f7:cb:c7:60:c3:60:40:ad:bb:2a:19:49:2d:85:e7:83:3e:
d7:ea:d8:69:ac:22:4e:cb:a9:ec:77:04:b8:a7:22:dd:1f:b3:
b7:d7:30:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:36 2025 by rpki-client