Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/1-T9G5MgaRv313hVD4WuYG_KSO1I.roa
File: 1-T9G5MgaRv313hVD4WuYG_KSO1I.roa (raw, json)
Hash identifier: CqS+mS/pMWZYJIRZiSceInPjyp7SfRiQwcV6V5/NVd0=
Subject key identifier: F9:3F:46:E4:C8:1A:46:FD:F5:DE:15:43:E1:6B:98:1B:F2:92:3B:52
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01928E9B8E33491036BA5DB7EE67C1B43A2E
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/1-T9G5MgaRv313hVD4WuYG_KSO1I.roa
Signing time: Tue 15 Oct 2024 05:16:52 +0000
ROA not before: Tue 15 Oct 2024 05:16:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 271968
IP address blocks: 217.76.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8e:9b:8e:33:49:10:36:ba:5d:b7:ee:67:c1:b4:3a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Oct 15 05:16:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f93f46e4c81a46fdf5de1543e16b981bf2923b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:95:8e:c2:49:17:34:95:42:e5:fc:52:62:b9:
e1:ab:f0:0f:49:b0:5e:0d:8c:0e:93:29:9d:4f:c3:
d6:ae:ea:91:d3:45:b5:13:61:96:65:55:89:da:85:
66:aa:ec:2c:a5:03:1a:b6:5b:1d:4f:81:fa:8c:4c:
45:f1:ae:ea:cf:1e:aa:77:fc:cc:1d:98:06:15:fa:
da:bb:11:ed:fa:65:fa:e2:c6:e3:c1:30:5e:08:05:
3d:cd:53:01:58:22:0f:84:d8:65:e1:47:32:b2:61:
64:d3:c1:03:38:a6:8c:66:bf:c8:56:d5:47:8a:43:
5f:97:e2:5d:d1:d1:1e:6b:fc:f9:c1:92:3f:dc:ca:
8f:9d:1e:dd:29:ff:eb:dc:4c:e9:78:16:61:99:5c:
6b:3f:ca:24:f4:5d:5f:00:61:aa:bb:ca:54:9a:14:
94:f4:68:cb:7b:ba:c0:3c:0f:e1:3d:97:66:f0:37:
ce:47:77:d7:c2:c6:9f:3a:ab:87:97:ba:49:08:a8:
bf:54:8c:81:2f:cb:82:fe:3a:60:ff:ac:c3:ec:a1:
95:75:0c:dc:61:98:87:2a:3b:37:c3:2c:9e:5c:21:
3d:c5:ad:07:71:8b:3e:57:45:18:e6:f8:6c:9b:72:
03:c5:90:47:45:5d:c2:f4:39:b4:3e:ef:21:f5:3c:
e2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3F:46:E4:C8:1A:46:FD:F5:DE:15:43:E1:6B:98:1B:F2:92:3B:52
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/1-T9G5MgaRv313hVD4WuYG_KSO1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.76.245.0/24
Signature Algorithm: sha256WithRSAEncryption
15:05:c3:a4:9b:06:9e:a2:c3:8e:d4:e8:e4:60:c8:7b:36:20:
65:0c:b8:a8:0c:2e:d8:fe:b8:04:88:e2:21:3a:d5:f7:39:5c:
b2:f4:d7:69:2c:30:ff:47:10:31:b5:f4:0b:fe:46:39:24:b4:
92:1f:86:ab:bb:ad:49:44:ed:74:5c:ab:5a:6a:e1:d2:cd:48:
2e:72:9b:21:29:8b:bc:db:ab:83:b9:ef:2a:f2:d3:b0:3f:20:
98:4e:5e:9c:1a:89:3a:4b:94:20:08:44:bc:e6:75:d1:57:53:
68:58:c5:e6:fd:ab:a2:c3:ef:9a:6a:21:50:81:30:ac:d1:6a:
c3:6d:4a:5f:4c:3c:ce:45:aa:6d:13:00:93:ed:57:a5:27:94:
5a:8b:2b:ac:73:4f:ce:63:18:71:85:ab:e9:fc:81:5c:d9:ea:
d1:37:78:75:f1:c0:19:c3:5c:be:f4:a5:0d:df:cc:1f:08:88:
81:84:d0:7a:91:67:51:a2:16:c7:b7:db:38:b1:c1:f2:60:d1:
3c:a6:21:fe:30:1c:2e:3f:5f:83:f7:25:5c:2c:35:07:e1:09:
49:4a:31:bc:a5:70:68:74:92:4e:9e:be:96:d0:ab:d1:b4:39:
df:ca:37:ec:1f:13:dc:ae:cc:11:1d:a3:4a:19:4e:a4:91:70:
8d:8d:23:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:29:04 2025 by rpki-client