Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1-_4uRpCAMJPEwBrWK8y6YjqDCUo.roa
File: 1-_4uRpCAMJPEwBrWK8y6YjqDCUo.roa (raw, json)
Hash identifier: 3BNq4s5VEC5cjOWWrp+FL1bPngRiPfzU1LhtoXxBiSA=
Subject key identifier: FB:FE:2E:46:90:80:30:93:C4:C0:1A:D6:2B:CC:BA:62:3A:83:09:4A
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019251B8A769DF37D8828084A3143F75AB26
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1-_4uRpCAMJPEwBrWK8y6YjqDCUo.roa
Signing time: Thu 03 Oct 2024 09:31:48 +0000
ROA not before: Thu 03 Oct 2024 09:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 87.229.31.0/24 maxlen: 24
87.229.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Nov 2024 08:50:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:b8:a7:69:df:37:d8:82:80:84:a3:14:3f:75:ab:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Oct 3 09:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbfe2e4690803093c4c01ad62bccba623a83094a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:81:29:13:db:bb:f8:59:ef:38:cd:33:27:
dc:6b:5e:4b:9b:8a:97:72:13:e1:38:e3:e5:c9:72:
d9:c7:3d:50:cd:71:0f:ad:50:6e:20:aa:72:bd:6b:
2c:e3:3f:d8:9a:28:6c:ff:89:61:77:2a:41:8a:61:
e6:d9:ca:94:c5:24:b1:0f:12:e0:08:32:4c:1f:bc:
b6:93:a1:ff:23:3a:36:06:91:f2:7d:5b:29:a6:31:
97:4c:6d:2a:f6:15:39:3d:0a:21:a9:d7:a7:18:99:
8f:f7:34:b5:6e:dd:b1:f1:67:16:60:dc:bd:da:ad:
32:64:2f:4d:5a:4d:b1:04:62:ae:7b:f8:1e:b2:ef:
50:25:df:a3:05:30:41:cc:0a:68:69:f7:f8:a1:6f:
2a:72:74:67:4d:49:3e:e6:d8:cb:28:9d:02:96:06:
17:3c:82:a2:2f:51:34:66:3b:23:63:5b:56:f0:d7:
45:1e:bc:b1:c6:4e:42:8f:b8:4d:c2:33:6b:a8:20:
3a:77:06:95:27:b7:57:5b:29:56:69:ef:77:93:59:
94:02:a0:d7:37:d3:c1:5d:3e:8f:f9:a4:66:84:90:
da:59:d7:a2:5c:80:82:01:36:21:23:d4:9e:6f:22:
32:ef:83:83:6b:78:51:b8:5e:36:42:af:96:f3:91:
bb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FE:2E:46:90:80:30:93:C4:C0:1A:D6:2B:CC:BA:62:3A:83:09:4A
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1-_4uRpCAMJPEwBrWK8y6YjqDCUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.31.0/24
87.229.97.0/24
Signature Algorithm: sha256WithRSAEncryption
21:51:86:5f:10:ae:33:9e:1f:a9:10:c0:1c:bd:36:07:a2:e1:
c7:5d:09:1d:7b:b4:ee:78:dc:36:33:71:a5:18:01:94:bf:e0:
8f:5e:45:f4:00:75:ab:46:51:aa:44:b8:99:89:5d:aa:9d:0b:
36:5b:75:b7:d7:87:90:28:aa:a6:1b:cc:ab:cf:ae:46:7b:d4:
1d:57:ca:81:ab:64:15:df:a9:b7:a5:62:0f:cc:c5:40:80:56:
32:1e:9c:a8:5e:44:6e:69:d5:ac:8e:bf:d4:64:3e:08:22:da:
76:7e:44:23:40:c5:a4:c7:bc:60:5d:6b:95:77:ba:a3:f4:11:
85:02:24:61:0f:cf:a1:b4:0d:0c:7e:71:5a:ec:ff:35:d1:06:
b5:4a:5e:ec:0f:8f:b6:3d:0d:cf:1c:9d:69:aa:ce:93:b2:80:
fe:17:dd:29:83:f0:ed:ac:b0:ef:16:82:40:73:55:e0:1d:f6:
16:16:67:6e:f2:88:f3:d0:be:40:24:22:f7:8d:f9:d4:c3:09:
65:60:e0:d4:6c:68:05:9e:a8:c4:e3:10:ff:12:99:19:b1:98:
03:2d:fc:10:ae:91:91:6a:5c:76:12:d3:ea:fd:2f:6b:44:47:
82:f7:17:19:22:1d:e7:96:2d:a9:4a:67:67:ff:29:c8:de:24:
0a:20:cb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:53 2025 by rpki-client