Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/fSsSofWUHpVpcaCiOnyni_fMMfE.roa
File: fSsSofWUHpVpcaCiOnyni_fMMfE.roa (raw, json)
Hash identifier: FO5zAc5O8haqhhRyNjo4gAYi/n3wY9cmAk3QkXwFs7U=
Subject key identifier: 7D:2B:12:A1:F5:94:1E:95:69:71:A0:A2:3A:7C:A7:8B:F7:CC:31:F1
Certificate issuer: /CN=bf2938590e0d0019725662d4b4ae4cc9ec3a734d
Certificate serial: 0190A11A28804608A73B1D2231BB83AF740A
Authority key identifier: BF:29:38:59:0E:0D:00:19:72:56:62:D4:B4:AE:4C:C9:EC:3A:73:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/fSsSofWUHpVpcaCiOnyni_fMMfE.roa
Signing time: Thu 11 Jul 2024 09:22:44 +0000
ROA not before: Thu 11 Jul 2024 09:22:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60943
IP address blocks: 46.255.31.0/24 maxlen: 24
193.160.240.0/22 maxlen: 22
2a0c:dac0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a1:1a:28:80:46:08:a7:3b:1d:22:31:bb:83:af:74:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2938590e0d0019725662d4b4ae4cc9ec3a734d
Validity
Not Before: Jul 11 09:22:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d2b12a1f5941e956971a0a23a7ca78bf7cc31f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:05:35:4f:2f:00:91:f2:51:e1:70:4b:56:97:
66:c6:dd:ff:59:d2:d1:b8:86:70:cf:0d:36:09:e6:
83:30:f5:83:0c:6f:9b:71:29:8d:40:2a:3a:c9:68:
4a:3a:b3:f6:b7:6f:b8:32:77:0e:95:bb:7f:85:f8:
25:df:0a:61:51:38:c8:00:45:68:a8:bf:18:ad:4a:
b2:9f:28:5a:4b:f3:b1:4e:c5:f5:3f:b9:b4:ca:45:
65:e0:da:cd:da:de:63:75:97:87:4b:24:5a:d6:31:
de:24:a1:ac:5a:b0:7c:4d:ff:7a:fd:8b:48:01:76:
49:61:e5:d8:06:cc:da:58:ff:2f:96:8d:a0:ac:cd:
d3:d3:71:b6:eb:18:d8:fd:a7:53:b1:99:66:da:6d:
65:a5:11:fc:be:16:8f:42:17:24:4b:50:ce:28:9c:
ba:e8:5a:26:bf:21:95:ec:1c:b5:d9:ff:62:1c:c1:
0d:12:ea:ad:58:62:36:4a:ed:b2:cc:41:bd:cb:3b:
c1:40:24:40:57:bb:15:d6:1b:79:f2:8b:2c:1c:2e:
75:5c:23:b1:fe:57:7e:28:53:cc:ed:34:22:fb:ff:
55:a7:2c:62:05:d7:09:55:94:9c:12:08:a3:c9:8d:
81:5f:8c:c5:74:86:8e:7c:8b:39:43:13:ab:fc:77:
6e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2B:12:A1:F5:94:1E:95:69:71:A0:A2:3A:7C:A7:8B:F7:CC:31:F1
X509v3 Authority Key Identifier:
keyid:BF:29:38:59:0E:0D:00:19:72:56:62:D4:B4:AE:4C:C9:EC:3A:73:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/fSsSofWUHpVpcaCiOnyni_fMMfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.31.0/24
193.160.240.0/22
IPv6:
2a0c:dac0::/29
Signature Algorithm: sha256WithRSAEncryption
5d:97:3c:cf:c7:d7:3c:ce:5f:87:68:dc:4f:28:c9:ff:0a:dc:
b5:9e:b9:2f:68:41:b4:3f:5c:f5:46:9a:7c:3c:dd:fa:31:c2:
87:b6:9b:fd:1f:4e:66:2b:66:09:03:c2:0c:dc:4a:73:0c:6a:
c0:c8:43:4a:e0:4c:e8:7f:c8:9d:3c:8d:90:67:58:9e:db:53:
a9:f3:e3:98:9c:5a:45:90:75:a4:8d:c2:c8:ff:70:4c:b9:a7:
8d:b3:b3:49:39:89:7e:15:6c:39:40:67:c2:ca:07:28:17:b7:
d3:b9:b2:df:d3:30:3f:12:fe:b2:77:e4:79:50:d8:47:34:4a:
97:69:8b:2e:dd:b1:1d:11:b3:68:f0:38:42:2b:c8:4e:54:bc:
f5:5e:04:cf:c2:5d:de:7e:a2:21:35:9b:da:53:55:1c:75:94:
c5:b4:5c:c8:2b:47:ca:96:17:c9:8c:ff:4e:01:6f:ea:d4:7c:
00:0a:6d:48:8d:c3:68:ce:0b:e6:d2:b6:b7:11:c3:a5:2a:ad:
fb:fb:48:93:0f:f3:44:bf:85:0c:52:c4:45:2b:22:e5:8f:5b:
02:72:d5:6c:23:1a:9c:6b:59:24:89:24:01:3f:f7:84:cc:cd:
af:c5:da:d0:dd:cb:ba:a1:d0:e0:18:a0:3b:a5:a0:7e:db:48:
b7:35:08:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:45 2025 by rpki-client