Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/1-BnHNSIc-1UHX1l9RuHYnxN2JGo.roa
File: 1-BnHNSIc-1UHX1l9RuHYnxN2JGo.roa (raw, json)
Hash identifier: ltfenp+QMb/j5vs8yv3swOTJR6aT4nXMhj5NDsM+hRo=
Subject key identifier: F8:19:C7:35:22:1C:FB:55:07:5F:59:7D:46:E1:D8:9F:13:76:24:6A
Certificate issuer: /CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
Certificate serial: 019201B0FAB763400FFAEDD878BE2FC267C4
Authority key identifier: C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/1-BnHNSIc-1UHX1l9RuHYnxN2JGo.roa
Signing time: Tue 17 Sep 2024 20:33:48 +0000
ROA not before: Tue 17 Sep 2024 20:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 216.25.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Oct 2024 16:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:01:b0:fa:b7:63:40:0f:fa:ed:d8:78:be:2f:c2:67:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
Validity
Not Before: Sep 17 20:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f819c735221cfb55075f597d46e1d89f1376246a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7a:1b:07:e3:c1:c7:25:7a:cf:a3:45:f0:be:
9c:79:60:43:4b:b7:75:f0:0c:b6:55:0d:d2:a3:37:
0e:74:ce:3b:5e:9b:1c:47:4f:b2:e9:8a:6c:2c:62:
de:06:65:bd:d2:31:5c:be:5d:5a:87:20:0a:1c:27:
8b:15:f7:52:8b:d4:54:51:25:28:6a:cc:4a:41:5e:
40:f6:0d:95:47:76:cf:e2:a5:48:ad:2a:2d:b7:56:
74:dc:19:81:90:32:20:eb:0b:4b:e7:11:bb:f7:81:
f1:4b:8e:c8:dd:a1:fa:24:12:74:ab:e1:ba:79:64:
60:6c:26:e5:78:c1:a3:a6:aa:d0:6e:cd:4e:25:39:
95:6c:eb:94:88:57:96:48:7e:9a:72:4c:01:24:a6:
17:2c:6b:bd:d9:06:1b:8c:a7:2d:5b:0d:8e:bc:2d:
4b:19:a0:ec:bd:94:f5:3a:83:00:39:ce:a2:0e:c3:
03:41:b4:6c:04:f2:ef:5f:c1:e7:20:e4:d0:8b:c1:
47:8b:8e:30:41:e7:be:de:a3:8f:fa:08:0f:e8:e5:
98:3a:47:b1:a4:d7:fb:c9:94:4d:a0:4a:ad:4e:e8:
ae:68:2f:fa:70:93:15:ca:f7:5e:86:e4:29:d9:21:
3f:e6:87:ff:61:28:07:23:a5:ba:cb:3f:53:b2:fc:
93:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:19:C7:35:22:1C:FB:55:07:5F:59:7D:46:E1:D8:9F:13:76:24:6A
X509v3 Authority Key Identifier:
keyid:C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/1-BnHNSIc-1UHX1l9RuHYnxN2JGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.25.124.0/24
Signature Algorithm: sha256WithRSAEncryption
56:44:52:38:2c:7e:2e:a9:f0:81:2c:08:fc:57:a8:86:6c:46:
40:7c:db:fa:ae:26:6c:f5:67:f3:5b:35:da:9c:09:95:19:49:
c0:78:c2:15:68:9f:b0:9a:a6:a6:de:76:93:bf:29:d2:63:cb:
a8:2f:a3:72:24:f2:04:66:41:bb:ff:c9:19:39:85:0d:7f:c8:
31:c1:b5:d1:3f:bf:98:60:75:8e:17:91:20:63:97:59:df:0e:
6d:6c:8a:d7:16:33:5f:03:4e:1c:3c:4c:e0:7c:31:11:b0:49:
c7:91:f5:8b:10:f7:13:da:2f:20:13:95:9a:ff:6d:d2:82:58:
c2:6b:f3:f2:1b:55:81:d3:46:5e:5a:c3:95:36:91:52:42:72:
bc:1d:8a:bf:03:40:fe:8b:8d:de:13:46:68:79:f6:2d:b3:26:
78:65:b4:29:ea:81:c4:37:d4:dc:1f:ac:d7:d8:72:6d:9c:a8:
10:52:2a:72:4c:aa:e1:64:52:94:5d:99:93:54:c9:98:c2:d5:
e6:c2:0f:eb:80:39:d4:d1:00:25:d9:cf:79:e3:97:f0:df:7c:
ba:ca:e5:97:e4:91:e3:f2:e3:4e:38:9a:98:d9:bd:95:24:49:
bf:7f:cb:6d:73:58:93:13:88:32:b1:e0:a1:1d:f1:6b:d6:e6:
4a:5c:46:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:10 2025 by rpki-client