Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/f02ctHRUkDr8QhKCA8qwtI1vUpo.roa
File: f02ctHRUkDr8QhKCA8qwtI1vUpo.roa (raw, json)
Hash identifier: osr0juGnCXJEuU4/abn+fVCbko59zZaG/TOSIvycnjc=
Subject key identifier: 7F:4D:9C:B4:74:54:90:3A:FC:42:12:82:03:CA:B0:B4:8D:6F:52:9A
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 018DA75B6754A7EFA0C8E2443F184D22C3C8
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/f02ctHRUkDr8QhKCA8qwtI1vUpo.roa
Signing time: Wed 14 Feb 2024 11:23:21 +0000
ROA not before: Wed 14 Feb 2024 11:23:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202122
IP address blocks: 92.61.224.0/23 maxlen: 23
92.61.224.0/24 maxlen: 24
92.61.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:5b:67:54:a7:ef:a0:c8:e2:44:3f:18:4d:22:c3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Feb 14 11:23:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f4d9cb47454903afc42128203cab0b48d6f529a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:41:f6:e5:24:e7:ad:71:ca:ae:6b:df:4d:b3:
9e:3d:ab:18:b6:1d:5e:92:30:02:4a:15:f5:71:fd:
f7:d9:52:e2:68:33:07:f5:9d:5d:bf:6d:af:27:fc:
f3:eb:d4:c3:e0:48:b9:f3:e5:f6:fa:f8:8f:eb:06:
e2:15:18:3a:e9:1b:14:41:c4:8d:0c:54:8d:fb:ec:
de:87:f5:c3:e5:cc:03:03:d0:19:49:46:b0:6f:e4:
15:b1:88:e0:af:d6:3e:74:3f:16:9b:4b:d2:84:ca:
79:1f:d2:6d:c8:4e:70:20:88:d1:9f:4e:c3:0e:42:
69:3f:5d:4d:12:ac:01:da:68:f4:3a:62:c7:26:b6:
82:03:a6:5b:79:24:e3:65:fb:27:f5:ca:53:af:e8:
bd:d7:99:6c:ae:71:2a:08:95:73:d9:5d:48:cc:36:
49:1a:81:75:5d:20:52:f3:54:10:39:72:74:55:1b:
03:29:6a:26:81:48:4c:7d:e0:db:d2:c1:26:b1:be:
74:34:73:56:cd:58:3d:4f:79:51:7d:1d:ca:13:ab:
60:f5:c9:88:71:0e:c8:d1:bd:c8:32:62:02:db:dc:
70:6e:6f:69:f3:3f:86:fa:4f:3b:55:d9:42:72:5b:
b0:91:1f:64:bf:81:9e:77:e6:7c:c3:d2:62:31:90:
ff:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4D:9C:B4:74:54:90:3A:FC:42:12:82:03:CA:B0:B4:8D:6F:52:9A
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/f02ctHRUkDr8QhKCA8qwtI1vUpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.224.0/23
Signature Algorithm: sha256WithRSAEncryption
29:23:dd:5c:be:80:3d:8d:82:7f:9e:5b:f6:7c:c4:78:e6:9b:
cb:69:3b:10:bf:e1:8c:31:62:a5:a1:23:2d:e0:87:09:c8:16:
4b:fc:ee:12:3a:ad:4e:55:d0:71:94:5f:9b:13:8f:c6:e1:8d:
bb:ec:d8:b7:5b:b1:0a:fb:ad:78:cb:1b:2a:79:5d:32:ab:17:
f4:d5:88:66:02:5f:8c:94:f6:42:ae:24:1a:0e:13:51:cf:58:
1d:0d:13:99:4a:05:6a:51:68:64:0f:6d:b7:d5:cc:73:74:b0:
91:18:20:6d:f0:d5:dd:30:18:0c:a9:c2:0c:8e:fc:5c:35:2c:
dd:2d:32:af:60:89:52:92:fe:4c:ce:83:2d:79:4d:90:7a:19:
31:ee:11:3c:41:f0:78:07:74:c7:3b:f1:29:07:0e:d8:ad:83:
32:ba:42:76:71:2e:e4:83:1c:40:cf:9e:13:c1:4a:b8:38:bc:
42:24:77:9d:63:a0:bb:b1:36:2a:16:cc:17:18:ba:ea:2b:ac:
95:81:51:2f:b2:a5:10:7a:10:2f:73:b8:77:2f:6f:0e:7b:86:
86:95:25:b1:5f:d0:e3:b9:73:25:30:2c:77:eb:64:65:30:2b:
2a:6b:c9:76:75:11:63:e6:1b:95:ac:64:3f:79:22:fd:b3:be:
1a:4c:d5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:41:47 2025 by rpki-client