Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/kgnHHfYdAoa_sSB8Wdi0n86Lp3I.roa
File: kgnHHfYdAoa_sSB8Wdi0n86Lp3I.roa (raw, json)
Hash identifier: TNGvZYRCFcTkzBmvLgDRQy5YFyq9KQqixLB5MriYjL8=
Subject key identifier: 92:09:C7:1D:F6:1D:02:86:BF:B1:20:7C:59:D8:B4:9F:CE:8B:A7:72
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 019154A92FB2163925780ADEAF7A6A324B9E
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/kgnHHfYdAoa_sSB8Wdi0n86Lp3I.roa
Signing time: Thu 15 Aug 2024 06:10:59 +0000
ROA not before: Thu 15 Aug 2024 06:10:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 141.226.243.0/24 maxlen: 24
213.137.82.0/24 maxlen: 24
213.137.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Aug 2024 07:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:54:a9:2f:b2:16:39:25:78:0a:de:af:7a:6a:32:4b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Aug 15 06:10:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9209c71df61d0286bfb1207c59d8b49fce8ba772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d6:a2:7c:ba:e6:b8:9c:9b:7c:a2:68:96:d3:
8c:95:e2:d6:26:db:02:c7:1b:4f:e3:cd:75:b6:f3:
41:47:3c:71:f7:f1:38:d6:dd:5b:e6:09:e1:cf:c7:
e6:dd:96:fe:ba:00:29:13:d5:90:65:9d:d6:1e:40:
98:1b:08:f2:bf:9c:3a:02:5e:01:45:23:00:4b:9a:
bd:b1:42:e5:84:c2:ce:41:c4:61:02:62:eb:79:4a:
27:76:46:24:01:5b:67:ed:6e:e4:70:ee:e8:87:80:
c8:ac:24:54:13:24:95:15:cf:17:cd:25:de:37:a8:
06:1f:2e:73:77:9e:47:e2:ce:73:8b:22:9a:f8:29:
b7:0e:c2:de:e6:9b:d2:31:8c:db:f6:e8:51:9a:bb:
6d:e9:8a:b5:7b:a3:18:6d:13:fb:83:5c:42:00:6a:
e6:1f:32:70:f7:fb:c4:4d:16:e2:a0:6a:85:86:00:
37:41:b1:6a:a5:5d:c3:e2:9d:07:ce:f0:92:30:6d:
9c:f4:27:3d:33:f3:1c:74:f4:66:9f:d3:01:14:1a:
67:23:97:8a:9c:b4:0c:1b:9d:55:66:99:81:7b:56:
29:12:cd:f4:65:75:27:13:a7:7b:c8:10:44:f8:c7:
4a:2a:5d:f7:09:80:0a:2a:ba:72:53:48:c0:a5:ac:
55:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:09:C7:1D:F6:1D:02:86:BF:B1:20:7C:59:D8:B4:9F:CE:8B:A7:72
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/kgnHHfYdAoa_sSB8Wdi0n86Lp3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.243.0/24
213.137.82.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:fd:f7:40:28:e6:17:2a:aa:15:9e:82:16:4e:5a:4c:1d:a6:
87:37:2e:b6:bf:c4:25:d6:d4:3f:40:7d:99:7a:c2:c4:bd:7c:
36:20:e2:f5:63:6f:3b:10:0d:75:04:be:af:65:e0:0b:84:34:
9d:cf:29:22:cc:f8:bc:a1:a7:1a:c6:dc:fb:6e:d2:a4:dd:10:
57:85:b8:3c:a2:0f:d5:5b:c8:a1:52:d5:97:d4:01:50:5b:76:
4d:74:24:94:e8:94:6c:b4:5a:b7:22:68:4d:d1:e9:46:f4:20:
c7:de:9f:59:5e:8a:b8:5d:5c:22:fc:1c:01:4c:f0:ee:39:ce:
6d:cb:7b:64:c7:bc:e9:97:e4:a2:6c:86:67:70:dd:6d:db:09:
c1:33:47:56:b2:37:38:17:32:4b:68:09:f1:5b:22:b1:a5:66:
a2:af:37:79:e8:d8:f9:ea:54:f9:01:fb:12:92:83:05:10:42:
c6:eb:39:ec:90:43:fb:06:0c:9a:c0:9d:e4:87:08:89:42:c2:
14:bb:ab:e5:5b:a9:0a:eb:a9:d6:8d:fd:54:39:dc:a1:7f:9b:
4d:72:e7:93:4c:e2:f6:a7:3f:cd:28:ea:f0:94:45:30:c5:22:
34:3d:03:c2:7b:f9:28:f6:9c:04:85:2f:fe:59:73:8a:8a:78:
6c:c3:04:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:58 2025 by rpki-client