Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/otFjzUtO2idku-08pKbvtE3ReQg.roa
File: otFjzUtO2idku-08pKbvtE3ReQg.roa (raw, json)
Hash identifier: X6MV5H5bxEA3+1HuCzpxtYoTJ9fRNR15SYXk1hnT3AY=
Subject key identifier: A2:D1:63:CD:4B:4E:DA:27:64:BB:ED:3C:A4:A6:EF:B4:4D:D1:79:08
Certificate issuer: /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial: 0194258FB387EBB166B247B58B8F23493858
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/otFjzUtO2idku-08pKbvtE3ReQg.roa
Signing time: Thu 02 Jan 2025 05:49:22 +0000
ROA not before: Thu 02 Jan 2025 05:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39707
IP address blocks: 92.39.96.0/24 maxlen: 24
92.39.97.0/24 maxlen: 24
92.39.98.0/24 maxlen: 24
92.39.99.0/24 maxlen: 24
92.39.100.0/24 maxlen: 24
92.39.101.0/24 maxlen: 24
92.39.102.0/24 maxlen: 24
92.39.103.0/24 maxlen: 24
213.234.23.0/24 maxlen: 24
213.234.24.0/24 maxlen: 24
213.234.25.0/24 maxlen: 24
213.234.26.0/24 maxlen: 24
213.234.27.0/24 maxlen: 24
213.234.28.0/24 maxlen: 24
213.234.29.0/24 maxlen: 24
213.234.30.0/24 maxlen: 24
213.234.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 05:28:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b3:87:eb:b1:66:b2:47:b5:8b:8f:23:49:38:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Validity
Not Before: Jan 2 05:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2d163cd4b4eda2764bbed3ca4a6efb44dd17908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:af:0a:79:39:49:82:0d:90:b7:9b:13:60:
99:32:a7:be:63:c5:90:4b:1b:b2:a9:1c:53:66:f8:
ef:77:34:d0:1e:3d:a6:b9:dc:02:f0:97:d2:36:3e:
d1:53:ce:c1:5e:29:f9:09:4a:c5:c8:9b:ff:c1:6c:
8b:c5:3e:30:57:84:4c:bf:9a:80:23:92:61:72:82:
b6:2f:cf:8a:01:97:10:cc:1f:ad:19:0e:a4:aa:13:
e8:9b:d2:13:b2:0f:aa:55:65:00:44:ba:8d:de:89:
7b:bf:44:69:dc:77:59:a5:37:bd:77:8a:00:6d:d2:
5e:ba:3a:e2:2e:10:7e:ac:72:11:b5:a4:46:d0:7d:
07:88:ab:b6:5b:a9:c3:8f:43:7f:14:82:75:72:a5:
b0:cd:a7:d5:62:42:90:63:7e:a9:63:ff:cb:dc:e1:
13:6d:22:c5:1a:71:c5:af:46:e0:b8:ee:84:43:64:
98:42:d0:14:10:24:5a:18:16:63:e8:ab:31:37:ad:
55:64:5e:b2:ae:73:a6:2e:21:b0:cb:8d:3d:b3:42:
8e:de:6f:e7:13:2c:5f:66:60:96:ab:e2:ac:a7:4f:
00:17:29:b8:f5:25:e0:c4:88:ef:ca:9a:a4:d0:52:
28:73:6c:6e:d5:38:44:84:38:c8:05:ed:be:45:58:
28:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D1:63:CD:4B:4E:DA:27:64:BB:ED:3C:A4:A6:EF:B4:4D:D1:79:08
X509v3 Authority Key Identifier:
keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/otFjzUtO2idku-08pKbvtE3ReQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.39.96.0/21
213.234.23.0-213.234.31.255
Signature Algorithm: sha256WithRSAEncryption
96:54:f6:0b:30:57:95:d4:cb:b8:b6:d2:9a:38:63:ed:0d:28:
13:c5:f0:51:06:0f:9c:6a:ad:2d:bc:eb:9e:3e:9d:a4:b5:19:
f7:19:bc:6a:7c:80:e5:68:6a:8f:31:86:96:3c:b3:28:14:73:
97:56:b9:f5:99:74:d4:57:4c:db:8d:58:86:56:99:9b:96:ae:
cc:85:c0:1d:98:cf:3d:91:19:94:7a:59:52:02:66:bf:26:6e:
c4:c4:81:d2:f0:40:bb:a5:fb:70:0f:32:f3:8b:2c:2a:2f:04:
a9:a9:27:cd:82:a5:84:73:25:01:92:d8:51:96:83:54:72:4e:
6f:55:fc:e5:0c:2c:dc:04:7d:0d:1e:a7:d0:94:b3:4f:35:fa:
8e:19:85:a7:8c:5d:0f:84:ba:e8:42:ee:c7:db:58:31:50:b0:
8f:bc:39:67:e5:8c:2b:fe:c1:f2:38:06:91:c2:06:4d:50:95:
f3:44:5a:4f:63:97:fa:11:b0:1f:16:81:1d:e7:02:e4:86:f8:
db:d2:e7:8e:dd:61:67:6e:40:86:dd:da:20:30:a6:e9:a2:9f:
92:4b:af:26:73:7a:0d:37:b2:7e:c4:90:9b:07:27:6e:2d:44:
a4:30:ca:ab:88:8a:fa:1b:f7:a1:e6:1b:d6:d5:9c:66:94:b4:
92:48:df:94
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:40:01 2025 by rpki-client