Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/sPeokAR-Fs3QF6kgxnY1Mln6cE4.roa
File: sPeokAR-Fs3QF6kgxnY1Mln6cE4.roa (raw, json)
Hash identifier: y9wAEgungVsJkEt/V1Br+tCS6vp9AMavusIhdjXlm7A=
Subject key identifier: B0:F7:A8:90:04:7E:16:CD:D0:17:A9:20:C6:76:35:32:59:FA:70:4E
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 0194221FDF63914787D48B2CCD3A50D8B66C
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/sPeokAR-Fs3QF6kgxnY1Mln6cE4.roa
Signing time: Wed 01 Jan 2025 13:48:21 +0000
ROA not before: Wed 01 Jan 2025 13:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215101
IP address blocks: 141.226.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Feb 2025 15:58:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:df:63:91:47:87:d4:8b:2c:cd:3a:50:d8:b6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Jan 1 13:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0f7a890047e16cdd017a920c676353259fa704e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:90:48:ab:95:c4:10:d0:c3:85:d2:9a:f4:
61:06:45:9c:55:fe:70:80:3f:27:ed:e0:22:d7:02:
ee:a5:f0:34:e3:4c:8e:49:75:9f:05:21:75:3b:02:
95:ee:40:ef:8e:bd:5a:a6:39:d0:5f:7e:31:f3:d0:
fb:42:3f:50:de:ff:51:da:b7:fb:94:bf:f2:5f:dd:
f9:ab:cd:3a:0b:c3:67:9b:60:1b:43:d4:e8:77:8d:
77:1c:8f:f4:fc:44:46:5d:67:2c:60:2a:b0:3f:3a:
db:41:2b:69:e4:93:42:25:fc:3e:05:8d:cd:ee:36:
b1:37:49:e7:e1:a9:bd:b1:0f:12:5e:fb:bf:a5:9b:
c0:ee:47:19:95:29:b8:1a:4e:a5:0e:7d:41:a8:53:
b6:48:48:e2:7d:83:1d:56:f9:3a:04:6b:fc:67:db:
37:1e:09:27:a8:fc:91:fa:f4:1b:4a:be:e0:47:d7:
e4:2c:7e:5d:07:7e:85:2a:04:62:92:8f:e5:0c:2b:
9e:e1:ea:bf:5c:8c:1d:e6:af:a4:c9:50:99:18:8a:
79:46:d8:b2:8b:54:76:b6:e0:54:6f:ed:ba:a6:b5:
00:5b:9a:9e:03:28:b3:94:d8:42:bc:ee:29:88:85:
53:f3:84:05:b5:98:18:d5:17:d9:71:47:04:54:b2:
66:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F7:A8:90:04:7E:16:CD:D0:17:A9:20:C6:76:35:32:59:FA:70:4E
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/sPeokAR-Fs3QF6kgxnY1Mln6cE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.245.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:34:b6:e7:07:f4:fb:ae:4e:02:f8:6c:78:94:64:a1:f7:e6:
8f:6a:51:2f:9f:30:0b:0c:cb:ab:69:f9:63:74:89:e6:ca:29:
26:55:54:fd:1e:9b:10:99:90:0a:6a:1b:15:06:ae:1b:38:a5:
38:cb:0f:2c:98:25:75:d6:ac:78:04:e3:0a:2b:37:19:37:2e:
ae:00:9b:21:4c:b5:a1:ee:82:99:f3:f5:4f:d1:10:7c:59:d6:
e3:48:1b:06:0c:55:c2:02:90:b5:19:56:6e:2c:23:a4:ea:89:
3d:fd:b7:b5:64:ba:6f:d4:10:3c:45:fb:01:b6:e6:c3:22:b6:
8a:4b:9f:db:6f:3d:30:52:aa:ac:ae:38:a4:0a:c0:94:b5:d4:
47:3a:a4:5a:14:2d:5e:30:8c:2d:04:66:9a:da:9b:fc:72:a4:
d9:6b:11:4e:64:f6:16:34:d9:7a:06:8c:99:e0:3e:65:1b:3f:
7b:48:58:18:76:2d:ca:c5:97:85:49:4f:0f:53:5f:60:c6:be:
82:f4:75:37:d9:be:5a:2e:24:8a:fb:07:f3:73:22:0a:51:4a:
78:ab:be:dc:0d:1c:e2:89:15:86:0d:22:80:79:50:cb:33:9d:
82:3d:82:9a:3c:2d:c0:02:7d:12:34:28:b7:2e:8f:53:d5:ba:
61:04:28:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:41 2025 by rpki-client