Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/IPMVKQi4A1wqtYJPR4uhJS7SS3w.roa
File: IPMVKQi4A1wqtYJPR4uhJS7SS3w.roa (raw, json)
Hash identifier: VtjwD2F7nLJpZhcRAviau4mJBy+GKVUe44p5sEX3edk=
Subject key identifier: 20:F3:15:29:08:B8:03:5C:2A:B5:82:4F:47:8B:A1:25:2E:D2:4B:7C
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0192B521FF85ABDCE2EB696FDCE0250368D0
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/IPMVKQi4A1wqtYJPR4uhJS7SS3w.roa
Signing time: Tue 22 Oct 2024 16:49:16 +0000
ROA not before: Tue 22 Oct 2024 16:49:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42708
IP address blocks: 92.51.248.0/24 maxlen: 24
198.55.30.0/24 maxlen: 24
212.78.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Oct 2024 04:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b5:21:ff:85:ab:dc:e2:eb:69:6f:dc:e0:25:03:68:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 22 16:49:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20f3152908b8035c2ab5824f478ba1252ed24b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f5:31:31:ed:0a:1c:6f:8c:3e:ba:28:13:53:
24:76:f4:6c:18:7b:3b:6f:c9:86:cd:02:fe:7f:78:
ab:03:c6:66:67:a2:c4:d7:e8:0a:fb:3d:e1:d4:02:
3c:94:89:81:4b:88:82:30:6a:c2:51:12:61:aa:9a:
16:83:6f:bb:b4:1f:d4:d7:2f:a0:dd:11:72:9d:54:
29:07:76:41:97:b7:46:a2:b7:40:e5:ee:62:d1:53:
c6:92:d2:7a:a6:67:b8:86:20:00:b1:52:5e:99:1c:
a9:55:5d:da:14:2b:64:a9:d0:cc:7a:c5:08:22:33:
75:09:17:d8:c7:e6:9d:d9:a2:9f:81:05:64:68:e2:
f1:91:0b:2e:49:51:fc:68:b0:e7:84:57:2b:83:41:
75:1f:e5:d4:e8:41:61:f7:a6:3a:a4:0f:5c:8f:a0:
c5:0f:27:4f:9f:75:95:43:ea:b4:7a:fd:7d:9d:29:
55:42:6b:e1:68:4c:de:18:e3:a8:28:79:5f:40:a6:
f1:83:2f:bf:94:3c:e8:1d:54:85:5f:99:01:cd:a4:
83:65:0d:60:11:5e:b7:0d:18:03:3a:2d:5a:7c:7a:
7d:01:b2:7d:b4:95:79:63:82:49:48:31:66:3d:9c:
38:27:4d:ea:e7:3c:45:09:d5:d8:b3:c8:54:d6:02:
b9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F3:15:29:08:B8:03:5C:2A:B5:82:4F:47:8B:A1:25:2E:D2:4B:7C
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/IPMVKQi4A1wqtYJPR4uhJS7SS3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.248.0/24
198.55.30.0/24
212.78.244.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:11:15:84:2c:d8:30:e5:59:01:5b:d5:03:16:7d:be:6d:3b:
8d:7e:65:69:a3:ad:da:6b:31:bf:3f:c4:55:61:c7:66:10:e5:
85:e4:c7:fb:ae:f5:db:2d:f9:77:63:88:03:9f:27:ac:33:1f:
16:d1:22:0e:bf:07:d4:17:b7:bc:e0:3d:bf:2d:20:5e:72:64:
af:45:47:c8:25:3e:25:4d:62:ec:ca:64:f9:b9:ed:92:c6:70:
82:27:3e:8c:40:c7:92:22:ff:9f:8c:03:cb:42:32:e5:b1:cf:
c4:f5:88:c7:1b:43:4d:b5:be:c8:1f:77:cc:27:45:79:b1:c3:
67:c5:ae:4d:ab:1c:21:33:b0:e8:7b:80:fc:9d:dc:70:54:5e:
43:1f:20:07:4b:2d:81:73:79:51:9e:47:46:6c:e7:ac:c8:df:
42:36:37:b4:a5:9e:9d:30:29:5a:46:52:f1:22:c7:e4:f0:6d:
2b:12:f6:e5:06:be:1d:94:a1:ad:e5:6c:09:55:1d:99:21:0c:
98:f5:34:a1:51:b5:b9:17:ed:68:a9:b1:42:12:83:d1:02:bf:
1d:2f:b6:e5:5f:3c:ba:3d:f0:37:06:dc:aa:a8:1f:77:8d:77:
0f:a7:21:fd:73:0b:d1:64:5d:a2:5a:50:01:87:ec:b4:2a:60:
00:e4:82:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 05:14:41 2024 by rpki-client on console-fra.rpki-client.org