Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/RxqVzIdyEi8k3mYgG2MCfYASOaA.roa
File: RxqVzIdyEi8k3mYgG2MCfYASOaA.roa (raw, json)
Hash identifier: +JsXIVwNoLM0yebzhdYctNmDk9cVxsBQtKIrlHux6hU=
Subject key identifier: 47:1A:95:CC:87:72:12:2F:24:DE:66:20:1B:63:02:7D:80:12:39:A0
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193DFEE1B4932245E01D24CA95F58874FCA
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/RxqVzIdyEi8k3mYgG2MCfYASOaA.roa
Signing time: Thu 19 Dec 2024 17:19:03 +0000
ROA not before: Thu 19 Dec 2024 17:19:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 2.57.242.0/24 maxlen: 24
89.39.120.0/24 maxlen: 24
212.192.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:df:ee:1b:49:32:24:5e:01:d2:4c:a9:5f:58:87:4f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 19 17:19:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=471a95cc8772122f24de66201b63027d801239a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:03:00:64:19:8a:43:21:8a:98:89:5d:ff:fc:
94:92:60:29:de:77:74:a0:a5:c5:52:62:08:60:01:
30:25:71:73:a4:35:dc:fc:e9:16:c6:cd:0d:e1:17:
18:92:87:59:10:11:9c:ad:26:b2:6c:8e:11:e1:b8:
cb:c3:90:ad:cf:e8:79:5b:f3:91:6d:f5:25:e3:1b:
43:8e:ad:4f:29:63:3b:a5:56:07:61:f1:c6:62:88:
0d:f9:6b:dd:3b:22:3d:2d:7a:67:c3:06:53:15:e7:
02:e5:03:1d:3f:da:5e:84:d5:94:0a:2f:19:e1:28:
45:1b:25:8a:1f:31:43:63:2b:e7:ac:55:2f:bb:2c:
3d:96:b5:c6:df:68:b6:f4:68:a8:64:de:57:b0:a7:
ee:dd:72:68:33:ab:35:a5:05:42:c0:a4:54:78:8e:
17:10:36:f3:d9:6b:3f:21:bb:9a:1f:c3:79:d8:dd:
36:39:84:89:8c:3b:87:da:3f:25:fc:d5:8a:e1:c1:
f7:b0:e2:99:a2:78:a7:2c:31:e5:83:14:e0:fc:d7:
3b:a7:d2:b8:b9:de:69:33:e0:5c:2b:61:e5:4a:b2:
75:b4:6e:60:51:80:fc:0a:dc:14:7e:bc:52:17:70:
a2:32:e5:75:ea:3d:4e:ed:08:f3:1f:92:5c:23:a1:
4c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1A:95:CC:87:72:12:2F:24:DE:66:20:1B:63:02:7D:80:12:39:A0
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/RxqVzIdyEi8k3mYgG2MCfYASOaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.242.0/24
89.39.120.0/24
212.192.11.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:8b:bd:aa:5b:48:df:08:0a:ab:ff:8d:cd:54:88:61:20:25:
69:80:b7:e8:e7:d8:59:25:17:12:f2:8f:c5:3c:38:3e:0c:95:
86:21:4f:6a:ae:54:64:fd:6a:ed:f7:ed:9e:c2:4d:8f:3f:55:
23:39:a5:48:98:1c:40:95:01:2d:7d:0c:57:14:12:59:c4:cc:
a0:8c:a7:8f:01:8c:d7:c5:2c:c4:3e:02:37:12:07:2a:04:2e:
d0:03:a9:3d:a8:f9:8f:c9:31:52:34:47:27:9b:22:e8:90:65:
dd:4e:aa:bd:15:78:a4:3b:8a:94:98:7d:cd:ee:73:4b:35:93:
03:75:5b:ce:db:c4:9d:26:11:c4:37:4d:26:2f:ae:3c:61:54:
31:af:3e:da:5b:2d:a6:af:88:b9:9d:2b:be:8d:fa:f9:fc:8a:
a7:da:e9:52:9a:ce:b3:da:df:ae:5c:c1:ea:6b:7a:ea:31:13:
e9:2e:34:9a:03:c0:f4:af:18:fc:f3:76:a5:2f:fb:dd:50:4a:
2d:f3:a6:91:46:2f:2c:76:e0:8b:ab:cf:4c:2b:28:b5:4a:4a:
e8:a6:45:32:85:20:67:af:4c:00:8d:44:c1:d9:9d:07:86:30:
a9:04:88:0d:c3:2a:25:43:9d:d0:41:cd:68:0e:cd:d6:53:ff:
de:47:66:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:18 2025 by rpki-client