Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/f-SYlIeEX7b8r_XdPHc3b6rp9gE.roa
File: f-SYlIeEX7b8r_XdPHc3b6rp9gE.roa (raw, json)
Hash identifier: ORKyizFERSJldVTD/7RTFGai+5uNvalBZpF2hndCPsw=
Subject key identifier: 7F:E4:98:94:87:84:5F:B6:FC:AF:F5:DD:3C:77:37:6F:AA:E9:F6:01
Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073
Certificate serial: 018CC801F24A70F45E13A59F6D4A1B9B9426
Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/f-SYlIeEX7b8r_XdPHc3b6rp9gE.roa
Signing time: Tue 02 Jan 2024 02:30:19 +0000
ROA not before: Tue 02 Jan 2024 02:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62383
IP address blocks: 188.210.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:f2:4a:70:f4:5e:13:a5:9f:6d:4a:1b:9b:94:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073
Validity
Not Before: Jan 2 02:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fe4989487845fb6fcaff5dd3c77376faae9f601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c1:7e:0e:62:02:3f:91:55:ce:09:09:a0:fd:
ff:cf:d7:08:c4:d6:30:83:b8:3f:22:9b:5c:64:43:
36:54:68:eb:ab:48:7c:9b:f6:cb:b5:3f:e3:41:32:
b0:84:95:02:12:fa:4c:fd:a5:1c:43:bf:17:fc:8b:
de:a4:b8:6b:f3:11:e8:c2:ef:2d:9d:10:8b:b2:f5:
0c:87:46:3a:25:5e:64:cc:04:a3:54:90:e6:e2:fd:
c6:71:46:a1:80:ee:2e:24:e8:18:92:8c:91:3c:d4:
a1:52:9d:f7:21:95:52:1e:5e:f1:ca:07:e9:5f:27:
cf:cc:ec:b5:dd:67:e4:42:94:84:50:88:f0:4e:11:
0f:f0:95:75:91:b9:a9:fd:ef:4e:b8:65:01:7e:78:
92:f3:fd:93:18:1b:36:df:06:ff:86:46:54:7f:70:
f9:79:0f:62:ac:41:96:34:ea:9f:19:0d:f8:99:df:
ba:9c:43:48:e6:0c:90:76:57:62:0c:9c:a4:a6:4c:
60:a7:37:33:d9:55:f1:19:a4:a6:2a:16:42:31:c5:
8f:ce:cb:3c:58:b4:f8:53:f9:60:72:6f:f2:67:69:
65:e0:d8:d0:f5:01:a7:ae:da:54:98:c0:7f:8d:59:
38:7d:47:d7:92:49:42:54:0b:13:22:2c:64:e0:35:
a9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E4:98:94:87:84:5F:B6:FC:AF:F5:DD:3C:77:37:6F:AA:E9:F6:01
X509v3 Authority Key Identifier:
keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/f-SYlIeEX7b8r_XdPHc3b6rp9gE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.210.92.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:d3:93:6a:97:9b:18:2a:1f:fd:a2:61:5d:1e:67:86:b7:6e:
e2:10:60:b3:62:c9:9f:3a:18:35:9b:22:b5:87:75:4c:11:7e:
4d:c1:dc:45:67:4a:29:21:44:dc:f9:98:dd:2f:74:6a:c8:74:
30:bf:03:7a:a5:4f:0f:a6:ec:ed:55:84:a6:c1:2b:6e:5e:06:
49:06:b4:a5:7a:05:42:65:ba:44:da:7c:8c:89:97:4c:37:d6:
ce:ce:cd:4b:11:e2:ee:c9:9a:d5:a5:46:c8:64:02:37:8b:53:
b7:4d:ce:19:ae:73:80:31:cf:41:f5:6c:57:b2:da:45:c4:24:
45:73:cd:29:59:6a:7d:b2:01:da:6e:6e:cf:d8:14:f7:fb:0a:
ae:c6:13:30:ac:c2:d1:21:69:d4:91:3d:98:94:76:3b:8e:04:
70:f0:28:7d:8c:9d:e4:73:f8:36:58:7e:7d:73:64:98:39:88:
43:f7:91:9d:34:f3:0b:a2:61:93:57:e5:75:79:89:6c:f5:ae:
56:e6:23:79:2f:df:03:33:15:63:46:ef:b2:1b:0b:d7:72:5a:
54:46:a2:d7:d0:8b:a6:67:33:bc:45:fc:0b:1c:36:19:36:3d:
4e:f5:a8:ca:f2:b7:97:0c:37:46:0f:48:6e:06:6d:20:fa:15:
01:33:af:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:25 2025 by rpki-client