Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/neq9VT5oHeDFLQRo4N9m6wlldQg.roa
File: neq9VT5oHeDFLQRo4N9m6wlldQg.roa (raw, json)
Hash identifier: iuEZzNuV7Puajkqk/Cq7gQXve9j0W2wUql/7EniiQl4=
Subject key identifier: 9D:EA:BD:55:3E:68:1D:E0:C5:2D:04:68:E0:DF:66:EB:09:65:75:08
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0192B52ED00249A85A5832E6D5CCD760B99C
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/neq9VT5oHeDFLQRo4N9m6wlldQg.roa
Signing time: Tue 22 Oct 2024 17:03:16 +0000
ROA not before: Tue 22 Oct 2024 17:03:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 14.102.60.0/24 maxlen: 24
14.102.61.0/24 maxlen: 24
84.51.232.0/24 maxlen: 24
92.51.234.0/24 maxlen: 24
92.51.235.0/24 maxlen: 24
92.51.255.0/24 maxlen: 24
103.210.196.0/24 maxlen: 24
107.150.166.0/24 maxlen: 24
185.161.111.0/24 maxlen: 24
192.140.220.0/24 maxlen: 24
192.140.221.0/24 maxlen: 24
203.188.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b5:2e:d0:02:49:a8:5a:58:32:e6:d5:cc:d7:60:b9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 22 17:03:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9deabd553e681de0c52d0468e0df66eb09657508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:12:67:a8:56:7a:ff:94:9c:cf:4b:87:43:f5:
05:6a:a6:db:22:9a:b1:c2:85:50:a7:d2:9f:7a:bb:
8b:7f:70:a4:85:f6:f1:59:b7:70:db:1c:e8:02:74:
55:d9:c4:8a:08:44:2e:36:d3:83:97:23:a5:12:71:
82:d4:6e:cf:f1:e4:25:98:26:d9:ba:81:9d:36:39:
90:44:2d:54:4c:bb:b3:c1:2f:99:b9:0c:7b:ed:0f:
0a:cc:3a:25:03:ff:4f:52:47:ef:00:dc:1e:89:a6:
3d:64:9c:b7:2b:05:5a:59:3c:75:ea:d3:01:d2:25:
3b:85:2b:79:42:24:e0:8f:a7:db:30:1f:d6:87:75:
1e:10:3c:d3:31:b7:4d:1d:ea:b3:a4:65:20:93:14:
5f:e3:8b:df:d8:32:03:53:c3:8f:cb:0a:10:d4:0f:
38:b4:6a:6d:aa:6e:e5:9e:18:18:16:b9:6a:2c:10:
69:07:3c:f7:99:69:6b:27:46:4e:da:ab:15:e8:ff:
af:20:5b:ea:f7:67:3d:ab:d0:92:58:e6:e4:cb:61:
32:18:30:cb:28:a5:00:bb:44:1c:aa:2e:94:1f:18:
42:5d:3d:b6:0c:cb:15:ae:8d:b4:73:67:e4:b2:f8:
6b:c2:21:b1:7b:9b:6d:dd:a7:33:d1:36:2b:89:1b:
96:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EA:BD:55:3E:68:1D:E0:C5:2D:04:68:E0:DF:66:EB:09:65:75:08
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/neq9VT5oHeDFLQRo4N9m6wlldQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.60.0/23
84.51.232.0/24
92.51.234.0/23
92.51.255.0/24
103.210.196.0/24
107.150.166.0/24
185.161.111.0/24
192.140.220.0/23
203.188.165.0/24
Signature Algorithm: sha256WithRSAEncryption
68:39:ca:a1:7e:2b:13:65:06:41:77:ca:72:50:ed:8d:af:9c:
1c:ab:a2:06:f3:08:84:13:cc:9b:a0:c5:47:80:5a:e8:21:57:
89:85:72:d4:9b:43:e0:d4:f8:f2:5b:99:8e:c2:34:96:41:10:
fc:76:ce:23:7a:a8:25:b2:8d:44:53:17:35:b6:ab:41:ee:08:
0d:3e:eb:d6:4b:78:e6:6d:ac:ee:68:34:7f:1e:15:90:48:30:
ae:4b:86:93:71:75:b5:0b:79:d8:fd:c9:34:ef:d1:67:9f:a1:
70:49:f4:4f:6f:ad:2d:e8:51:e1:bd:f8:64:d8:aa:40:0e:01:
e6:2a:52:10:80:0d:a3:4d:31:b7:e6:1c:24:9b:6e:fb:d2:e8:
33:16:69:5e:92:c8:cc:71:7f:ce:ca:94:4d:78:52:87:4f:7c:
30:c4:5a:d9:d0:ae:37:79:07:53:bf:4d:f9:55:b2:14:f7:b7:
45:b6:02:16:89:b8:9e:50:22:2e:63:ce:6b:33:a0:0c:b3:a0:
08:2b:86:00:1a:01:87:f2:63:2c:a8:37:3d:01:90:b1:d8:1c:
a4:5f:5c:a2:71:9a:86:17:99:5d:8c:22:3c:17:60:14:66:0a:
a1:43:a6:a7:2d:44:81:50:84:f7:a2:82:ae:4d:70:4a:91:0b:
92:bd:f0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:56:18 2025 by rpki-client