Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fZj0QAhgNXYadKVVyj0kjPGmsws.roa
File: fZj0QAhgNXYadKVVyj0kjPGmsws.roa (raw, json)
Hash identifier: 5DigZUB2Z3It9ZpLALzzJRQ70v/XuVLHndAyV9XAKVk=
Subject key identifier: 7D:98:F4:40:08:60:35:76:1A:74:A5:55:CA:3D:24:8C:F1:A6:B3:0B
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FDB9BC18B53504AA43E0D5C057582
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fZj0QAhgNXYadKVVyj0kjPGmsws.roa
Signing time: Thu 02 Jan 2025 05:49:32 +0000
ROA not before: Thu 02 Jan 2025 05:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61979
IP address blocks: 92.38.44.0/23 maxlen: 24
92.38.46.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 15:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:db:9b:c1:8b:53:50:4a:a4:3e:0d:5c:05:75:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d98f440086035761a74a555ca3d248cf1a6b30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:15:09:71:83:a1:1e:c0:49:d0:0e:48:53:ba:
ee:0c:43:22:8e:a0:34:13:d1:78:9c:f6:6d:a6:16:
ec:a8:50:8c:fa:d4:18:c5:29:13:b5:71:7c:c2:47:
67:63:b4:0c:c6:0c:6c:2f:7a:56:35:66:c9:b6:12:
50:84:2a:7e:98:0e:51:4b:86:70:02:50:2b:cd:68:
28:58:ca:f9:5d:22:0b:c3:a9:21:06:e6:53:6b:7b:
5e:40:3d:fb:b5:97:d0:32:a4:41:f6:ea:13:c5:2a:
ed:d0:3a:ca:7f:bf:62:50:a6:72:ef:9f:f6:be:08:
f3:bd:28:0e:aa:a5:88:79:98:dd:53:a5:2f:69:b2:
4a:e0:3b:0f:e9:b0:ac:e7:85:c3:23:72:2e:04:6c:
71:ba:77:32:e3:43:87:1e:21:5f:79:68:ea:8f:75:
f4:fb:6b:d1:8d:7f:e0:58:61:3b:f9:54:2c:aa:de:
8e:48:7c:7f:35:ac:16:93:e8:c5:0c:c2:36:cf:86:
89:40:e0:53:1b:c0:10:aa:f5:91:d0:f1:cf:4b:55:
8b:1d:7d:36:d3:50:3a:51:ee:ce:ef:84:5d:74:7a:
a7:76:f8:92:80:69:41:9f:5f:0d:fd:6e:bd:fd:d9:
5c:ab:55:87:7b:55:7d:8a:09:24:52:65:87:8d:41:
77:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:98:F4:40:08:60:35:76:1A:74:A5:55:CA:3D:24:8C:F1:A6:B3:0B
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fZj0QAhgNXYadKVVyj0kjPGmsws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.44.0/22
Signature Algorithm: sha256WithRSAEncryption
13:22:74:fe:db:91:7a:34:cf:0f:cd:33:ec:99:19:40:53:e2:
1d:09:e4:be:8e:24:57:f3:19:48:a5:47:58:57:c6:97:a9:6a:
ed:2d:69:44:9f:eb:0a:7c:e7:da:a1:61:78:ea:0a:84:62:a8:
f2:95:4c:0f:01:7e:cf:ab:30:0d:d9:ce:f1:27:d1:f0:e6:2f:
5f:19:aa:4b:81:11:86:e0:92:21:3f:78:95:c2:a6:b6:6f:5d:
95:8a:03:5f:45:6e:14:7d:29:0d:8f:09:d1:31:ae:82:ee:cf:
9a:ec:72:b4:8f:0a:a9:72:33:64:a2:33:75:b9:b8:90:28:a2:
f3:a3:7e:38:42:af:00:f1:d9:72:20:f7:51:ab:56:8f:b6:56:
58:2d:8a:3e:52:b0:75:dc:45:0d:3f:e3:92:e0:23:68:32:05:
72:a1:16:f8:b0:aa:ac:b4:ee:c6:97:2c:95:7b:85:ce:3d:d5:
5c:f3:e5:e0:ef:72:b4:c1:0f:4f:e3:98:1a:bf:f9:6a:fb:50:
64:41:ff:17:ec:1d:4b:9b:c4:be:dc:a5:59:18:ce:44:36:fd:
38:42:a0:30:0a:38:32:5c:7b:e6:df:80:bd:ed:fa:c5:aa:b2:
96:0f:dd:c4:bd:67:f0:63:de:ad:4b:16:c5:0f:14:3e:3a:99:
c1:41:2a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:07 2025 by rpki-client