Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/wVE6M5Lg-x6vQIK0qEIkcnQrcIc.roa
File: wVE6M5Lg-x6vQIK0qEIkcnQrcIc.roa (raw, json)
Hash identifier: swdrEBS4YYGxg7F+vfcdDPVhEGwIL412cpJzZhqTcKc=
Subject key identifier: C1:51:3A:33:92:E0:FB:1E:AF:40:82:B4:A8:42:24:72:74:2B:70:87
Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c
Certificate serial: 0192A0BE931735578B2338F5E8D6F2A91462
Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/wVE6M5Lg-x6vQIK0qEIkcnQrcIc.roa
Signing time: Fri 18 Oct 2024 17:48:16 +0000
ROA not before: Fri 18 Oct 2024 17:48:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8881
IP address blocks: 14.102.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:a0:be:93:17:35:57:8b:23:38:f5:e8:d6:f2:a9:14:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c
Validity
Not Before: Oct 18 17:48:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1513a3392e0fb1eaf4082b4a8422472742b7087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:98:7b:12:1f:12:35:41:e2:13:b6:2f:45:
af:9c:c9:b1:cd:4a:e5:13:5f:b9:e8:14:b4:de:90:
84:5d:33:f2:00:b3:ab:5b:73:85:55:b9:25:86:cd:
74:6a:0a:ae:3e:88:a1:99:c5:3e:cf:34:dc:51:2a:
97:63:9f:93:10:46:94:4d:cf:08:7d:4a:a8:e4:79:
b7:67:d2:c9:14:60:67:a9:88:a9:9b:b0:4a:d3:d2:
1f:55:e2:87:51:f5:29:ce:03:17:18:e8:69:4e:55:
62:27:e1:12:23:b2:4a:6e:b6:f7:80:6c:ec:3a:b1:
26:90:d0:11:44:a4:85:2e:2d:91:c1:be:4d:f4:82:
7b:d2:71:fa:dd:26:02:37:94:44:35:cd:2e:df:a0:
64:5b:03:c0:2a:ae:63:9b:ac:78:b2:02:ab:33:c8:
43:28:0a:fd:0a:01:32:43:47:21:03:da:e9:8c:7d:
c3:43:6c:77:84:31:31:3d:c7:93:e2:70:1a:2f:37:
0a:78:72:c8:db:fb:f1:86:63:fc:36:fb:63:38:1e:
0d:38:e0:26:a0:a0:d0:3d:b9:fe:cc:b7:03:42:2f:
df:84:c3:da:0e:c1:a1:76:10:32:5b:2e:c3:a9:84:
2a:56:07:8c:b1:7f:da:4c:94:29:ba:c3:e3:83:83:
45:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:51:3A:33:92:E0:FB:1E:AF:40:82:B4:A8:42:24:72:74:2B:70:87
X509v3 Authority Key Identifier:
keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/wVE6M5Lg-x6vQIK0qEIkcnQrcIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.90.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:9d:60:4b:30:61:eb:b3:9a:88:ac:e9:70:2b:e0:bb:a0:16:
d4:aa:21:10:d7:f0:bd:fe:78:a6:30:52:52:6e:6d:35:cd:c8:
97:25:99:1c:dd:ba:f5:0b:ad:57:0b:74:74:be:7d:f1:2b:56:
9d:d0:c0:15:b7:7b:fe:6c:fd:af:d7:3b:b1:1d:bc:47:0a:6f:
6f:18:7a:d0:35:c7:70:9b:83:47:8e:a8:69:1e:dd:9b:e8:08:
d9:99:89:e5:d6:83:27:73:5b:3c:34:36:1e:3b:46:9d:b2:1d:
bc:f5:ba:27:43:15:25:01:6b:7e:f4:45:eb:6e:e2:9b:c6:35:
03:a7:4b:d3:9f:f0:13:9d:69:f0:2a:b1:50:49:67:d8:b1:c9:
c8:e2:0d:cc:39:3c:26:6c:47:0c:c1:55:a6:2a:4b:5b:e6:78:
9f:5f:6b:c1:e5:b9:c2:d2:c0:60:b0:ee:dc:c9:df:8e:a3:7e:
69:7d:2b:ff:d3:f6:3c:08:11:aa:92:20:56:6d:e4:79:24:08:
6b:df:9c:86:f7:a3:ff:7e:c9:0d:08:12:d2:45:79:10:9b:03:
9b:ba:02:56:ad:bb:e8:9e:e2:1e:c6:77:b8:05:ac:7a:fd:91:
d5:56:36:3e:82:7f:88:aa:34:2a:7f:8d:fc:e7:40:ab:d7:35:
09:8c:ba:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:51:10 2025 by rpki-client