Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/c2S7B92ZJNn7_SEhpU1K_j-DdYk.roa
File: c2S7B92ZJNn7_SEhpU1K_j-DdYk.roa (raw, json)
Hash identifier: itwHOepSEkwnAphHimulXinYSFn4tt/LXbgpaZltn+c=
Subject key identifier: 73:64:BB:07:DD:99:24:D9:FB:FD:21:21:A5:4D:4A:FE:3F:83:75:89
Certificate issuer: /CN=c874132c12f86995fe2893e4dea72638d2601079
Certificate serial: 0192E34EB532ED9B1D8F3F6DB0B3E829D010
Authority key identifier: C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/c2S7B92ZJNn7_SEhpU1K_j-DdYk.roa
Signing time: Thu 31 Oct 2024 16:00:39 +0000
ROA not before: Thu 31 Oct 2024 16:00:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198129
IP address blocks: 128.127.72.0/22 maxlen: 22
128.127.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:47:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e3:4e:b5:32:ed:9b:1d:8f:3f:6d:b0:b3:e8:29:d0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c874132c12f86995fe2893e4dea72638d2601079
Validity
Not Before: Oct 31 16:00:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7364bb07dd9924d9fbfd2121a54d4afe3f837589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8b:a3:fa:cf:26:38:1e:42:d4:b8:ce:8f:c3:
28:a4:2c:be:1c:66:a5:ed:b5:7d:f4:d2:6a:80:17:
0c:f9:fa:3e:c1:33:d9:01:c7:48:6d:2e:f3:6a:76:
19:07:c2:55:d1:15:63:2c:00:cc:14:ba:11:10:63:
6f:02:cc:16:bd:9d:1d:9b:c6:86:d1:5a:fb:1d:4a:
d6:a2:3f:84:5f:4a:8e:06:0d:fa:52:08:34:fb:03:
aa:92:7e:6e:c4:96:8c:67:65:e2:e2:4b:1c:c0:72:
cb:f2:93:3e:a5:63:b2:f7:58:1d:76:13:30:7f:27:
06:23:d6:e6:fc:36:88:60:10:53:f6:6c:fd:b3:23:
40:ac:cd:67:93:a4:48:15:72:fb:d8:b6:6f:2f:47:
ae:7f:bc:9d:8b:6b:17:1a:1e:78:46:ab:88:02:e9:
d8:ac:a2:8d:18:e7:52:3e:f8:aa:52:a7:23:35:31:
a9:f1:bf:c8:d5:53:4a:e2:91:fd:ec:18:15:a3:70:
16:c0:ef:0a:c2:46:cb:91:c6:97:32:20:fa:26:ac:
a0:40:55:23:e9:50:6d:a2:ec:9d:84:44:f2:ab:4e:
f8:23:5b:fc:e4:ea:3f:1a:87:4c:62:69:f7:15:fb:
50:7b:32:26:95:03:5d:19:e6:d2:c8:66:c7:eb:ed:
35:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:64:BB:07:DD:99:24:D9:FB:FD:21:21:A5:4D:4A:FE:3F:83:75:89
X509v3 Authority Key Identifier:
keyid:C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/c2S7B92ZJNn7_SEhpU1K_j-DdYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.127.72.0/22
Signature Algorithm: sha256WithRSAEncryption
73:fb:fe:cf:08:30:4b:bc:85:47:e1:fc:7e:e8:19:9d:94:a2:
c5:30:65:51:2e:a9:e6:83:8c:73:43:36:0a:0c:08:d0:6b:b3:
fb:fe:42:a3:3b:cf:a1:39:68:31:07:84:e3:3a:82:71:cd:3a:
9a:41:6f:86:e8:41:05:83:4b:22:66:2f:b3:9b:0d:34:5f:df:
76:2c:0f:8c:f6:83:a5:60:79:89:2b:4d:87:d7:c0:d1:b0:f3:
4f:37:7c:ed:2c:33:a8:af:f9:43:3b:5c:6f:78:18:59:dd:a8:
4c:05:5d:da:77:64:f0:54:d4:c6:79:ee:80:b2:3e:7e:8e:55:
6e:b5:5a:5d:bf:2d:0d:65:14:b1:af:ca:bf:c9:16:04:15:54:
e6:07:94:3d:dd:f3:67:f8:11:94:ea:7a:1e:d0:8b:55:f7:66:
d5:0d:51:44:92:51:4a:c0:b1:38:ed:6c:2a:dd:97:f1:65:72:
d0:09:9f:33:ed:24:70:2e:f0:b5:73:a1:64:cc:1a:6f:c8:1d:
13:b0:47:32:ab:84:86:82:5b:8f:b1:2d:e1:7c:79:53:80:0b:
eb:d2:a5:73:18:65:52:08:11:8f:d6:90:db:38:ee:6e:89:d7:
d5:27:6e:9a:f7:f3:00:30:72:36:d0:71:a7:eb:dd:7d:4a:bd:
c1:d1:8f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:41 2025 by rpki-client