Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/RoGEAu1y-Fcopj4oXpcUQ0EFs40.roa
File: RoGEAu1y-Fcopj4oXpcUQ0EFs40.roa (raw, json)
Hash identifier: iYFXmHPOyaUBPPLOlCv+J1Se2U6r11Y0YlStp43ZOV4=
Subject key identifier: 46:81:84:02:ED:72:F8:57:28:A6:3E:28:5E:97:14:43:41:05:B3:8D
Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial: 0193F3A78A88B567D5DA6238DEA6C7B54669
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/RoGEAu1y-Fcopj4oXpcUQ0EFs40.roa
Signing time: Mon 23 Dec 2024 13:14:23 +0000
ROA not before: Mon 23 Dec 2024 13:14:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12902
IP address blocks: 79.98.168.0/21 maxlen: 24
79.98.170.0/24 maxlen: 24
185.240.112.0/22 maxlen: 24
217.77.128.0/19 maxlen: 24
217.77.144.0/24 maxlen: 24
2001:9c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f3:a7:8a:88:b5:67:d5:da:62:38:de:a6:c7:b5:46:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
Validity
Not Before: Dec 23 13:14:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46818402ed72f85728a63e285e9714434105b38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:38:00:93:66:b1:13:b9:65:c5:4d:5f:66:
ae:ec:29:c7:ed:67:d0:bb:45:d3:51:c5:3b:68:dc:
38:c8:49:c6:e6:e8:39:d0:13:7d:c9:3f:7d:92:80:
29:db:49:c4:80:48:03:f8:1c:f2:73:1c:b8:5f:b0:
9b:56:22:02:e2:50:ea:bb:92:3d:42:6d:b4:57:cc:
95:66:8d:77:96:3c:c1:7e:ce:a1:8d:c7:97:3d:3b:
ca:85:e2:e1:2d:10:45:20:f8:30:c7:75:af:9c:34:
7f:ce:e8:66:f5:82:81:e8:66:ca:c7:3d:08:cf:e0:
40:af:67:1d:17:c6:95:eb:b4:82:13:4c:26:94:56:
0e:07:a5:c2:37:8c:06:76:e1:3b:ff:15:fb:0f:29:
89:47:27:6c:96:94:67:3f:c3:87:a1:33:f8:cc:a0:
53:a2:9c:ed:23:24:a3:df:00:d9:ee:3a:bc:32:6a:
c6:85:08:6b:8e:b6:82:fa:3a:0b:ac:e5:8d:f1:a2:
89:7e:57:fd:bb:36:0c:80:6d:69:16:1d:1b:e6:a9:
f3:99:0a:bc:d9:4b:6b:27:38:1f:4d:33:11:73:9c:
5c:f1:10:ec:fd:c8:0c:09:a5:75:4b:82:8b:dc:93:
17:9f:6b:ac:45:ab:d4:c3:65:e3:8e:49:ff:74:8b:
4c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:81:84:02:ED:72:F8:57:28:A6:3E:28:5E:97:14:43:41:05:B3:8D
X509v3 Authority Key Identifier:
keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/RoGEAu1y-Fcopj4oXpcUQ0EFs40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.168.0/21
185.240.112.0/22
217.77.128.0/19
IPv6:
2001:9c0::/32
Signature Algorithm: sha256WithRSAEncryption
ad:72:ec:fa:2b:62:02:d9:b3:18:39:57:f7:a5:02:de:ed:40:
1a:82:60:94:9b:88:0d:b4:22:1d:2a:e0:d4:c3:1a:78:55:0f:
45:f3:dd:04:75:0e:a4:f8:52:f0:a9:54:df:3e:e4:aa:ce:11:
75:44:c5:b5:2c:c3:a6:ff:87:c3:f2:84:bb:a4:4f:71:59:7a:
69:83:9c:e6:53:61:24:bf:de:a4:6d:da:bf:a0:07:7f:82:2b:
53:7b:0d:73:4b:e9:7f:a3:c3:f1:39:03:81:eb:a2:f9:b7:f6:
ae:35:2f:45:0d:6e:00:a5:ec:cd:8d:ac:9e:86:c8:d6:d6:7e:
6e:67:7b:aa:7f:e9:58:64:fb:2a:c1:05:58:d7:e6:d3:fd:1f:
c6:a1:0c:e4:1a:00:c2:00:32:c8:6f:e1:d0:dc:0f:6e:06:26:
82:50:8d:5d:e9:41:fd:0e:3f:06:2b:4a:25:83:25:f8:00:83:
6e:37:eb:1d:fa:ba:7c:8f:dc:ff:37:98:5e:00:d8:5b:3c:3c:
dc:f3:93:e9:b5:4a:bf:4a:86:21:14:ae:95:0d:d8:58:3e:a7:
ad:1c:fe:28:f3:69:1b:3c:e7:29:7b:39:cc:42:7f:3c:14:f6:
ec:4b:53:f9:31:76:87:5d:9b:80:ce:de:17:18:b8:61:00:22:
13:f7:4b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:29:20 2025 by rpki-client