Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/kW-Ri6SY7bGIa5h9-66qRXsPXA8.roa
File: kW-Ri6SY7bGIa5h9-66qRXsPXA8.roa (raw, json)
Hash identifier: YGZKqbPmOcXo7wQ3T3o1LzHqhh8GfROYEFxIurfpcVE=
Subject key identifier: 91:6F:91:8B:A4:98:ED:B1:88:6B:98:7D:FB:AE:AA:45:7B:0F:5C:0F
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0192CC1FED7DC6D5ED1A589857699999CE31
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/kW-Ri6SY7bGIa5h9-66qRXsPXA8.roa
Signing time: Sun 27 Oct 2024 03:58:17 +0000
ROA not before: Sun 27 Oct 2024 03:58:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 109.111.60.0/22 maxlen: 22
176.221.26.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 07 Nov 2024 00:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:cc:1f:ed:7d:c6:d5:ed:1a:58:98:57:69:99:99:ce:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Oct 27 03:58:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=916f918ba498edb1886b987dfbaeaa457b0f5c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:15:f6:6f:00:b3:33:41:51:19:23:ab:a8:5a:
95:bb:d7:e2:be:9f:fb:61:7f:38:91:11:c4:92:b0:
1c:24:d7:ec:08:75:65:4b:a8:fa:2c:d4:54:b6:61:
98:8c:0f:95:da:ca:f3:4c:19:a6:8c:21:37:e3:f3:
b2:dc:05:78:a2:06:1f:dc:6f:e1:b5:9a:57:c0:12:
82:72:f6:4b:eb:fe:90:ea:a9:b3:6f:c3:4f:9f:43:
b8:d5:c3:48:3b:1c:0e:89:ad:7f:fd:ff:c9:80:d0:
57:4e:b8:52:fb:b5:4f:28:9f:f6:b5:3a:7d:0a:16:
7d:41:87:e9:30:1f:86:33:1b:3c:21:e3:27:7e:15:
c7:b2:68:5e:78:7a:5a:32:d9:49:e3:50:4e:b2:5b:
95:9f:ca:02:5f:01:d0:ee:79:e5:d3:44:11:b9:f3:
84:f8:60:24:b2:fe:af:78:7c:86:8a:f6:6b:90:09:
78:0e:fe:5a:11:40:fe:36:ca:cc:55:63:d4:1b:fa:
10:85:bd:09:a2:9b:a5:a0:3a:69:4f:a1:04:c9:9b:
4b:4b:84:79:5d:e7:6e:0f:9e:73:c2:12:32:5a:d5:
61:3e:52:16:e5:fc:b9:07:88:b2:fb:7f:84:4d:6b:
8b:30:c0:f3:67:0b:61:42:27:90:7f:c5:97:f7:71:
ac:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6F:91:8B:A4:98:ED:B1:88:6B:98:7D:FB:AE:AA:45:7B:0F:5C:0F
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/kW-Ri6SY7bGIa5h9-66qRXsPXA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.60.0/22
176.221.26.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:c3:22:63:fa:91:4a:ec:7a:ec:5a:3c:90:a9:c6:df:99:bc:
d6:d8:1d:10:e4:09:9d:72:4f:17:4b:b9:bb:e3:19:e2:f4:9a:
da:bd:e0:a9:25:5f:76:d6:a8:50:fb:72:73:da:10:44:d0:81:
d8:1b:83:ad:53:54:29:cc:d5:af:51:53:9e:ae:3d:d2:b2:b2:
83:0e:8c:ed:7f:2f:0b:5a:b9:60:4a:83:44:46:db:52:f4:32:
8c:e0:b2:e2:76:19:8d:a3:93:1a:77:c4:3a:25:de:62:ca:ee:
3c:20:ca:f2:f6:5c:32:a7:c6:cc:bb:c9:cf:08:2e:ae:5a:07:
87:e6:8e:ed:c4:7f:72:f4:18:2a:41:6b:6a:7a:0d:64:8f:a4:
5d:e1:9b:68:87:bc:84:f6:6b:c5:25:0a:c5:b8:cd:da:4a:ea:
95:5b:d4:a4:47:86:a4:e2:b8:69:ca:cb:19:5a:fb:a8:48:60:
57:d5:2f:80:03:ad:91:65:8c:d4:27:f5:5e:c6:82:dd:c9:99:
39:34:c1:29:3b:16:9c:41:dd:b3:10:5d:1b:84:0c:b9:8d:35:
5f:9b:e8:a1:5d:5c:fd:4c:81:75:4b:2b:77:6d:0c:bf:c1:50:
23:1b:ec:14:ab:3a:c1:17:6c:66:1b:ca:87:fb:e3:14:65:e9:
86:43:8d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:35 2025 by rpki-client