Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/KHhPKYh7NTLLUTiLvCri61FgVzE.roa
File: KHhPKYh7NTLLUTiLvCri61FgVzE.roa (raw, json)
Hash identifier: F63vB1qBej8eRSIdWuhSFpfasVBstCsWSue8964O/Hk=
Subject key identifier: 28:78:4F:29:88:7B:35:32:CB:51:38:8B:BC:2A:E2:EB:51:60:57:31
Certificate issuer: /CN=f6b0366bbaeac7b5884e426df8009ec27a2c602e
Certificate serial: 019305C5FBBBD0CEE7BD2DD86E158CB2F4F6
Authority key identifier: F6:B0:36:6B:BA:EA:C7:B5:88:4E:42:6D:F8:00:9E:C2:7A:2C:60:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rA2a7rqx7WITkJt-ACewnosYC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/KHhPKYh7NTLLUTiLvCri61FgVzE.roa
Signing time: Thu 07 Nov 2024 08:38:01 +0000
ROA not before: Thu 07 Nov 2024 08:38:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21022
IP address blocks: 92.42.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 18:16:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:05:c5:fb:bb:d0:ce:e7:bd:2d:d8:6e:15:8c:b2:f4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b0366bbaeac7b5884e426df8009ec27a2c602e
Validity
Not Before: Nov 7 08:38:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28784f29887b3532cb51388bbc2ae2eb51605731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9f:b4:81:4d:5a:a3:92:0c:39:0b:3e:b0:54:
35:c9:3c:ba:3d:8c:c0:87:d9:72:6d:53:60:1a:50:
fd:6e:ba:88:db:88:e3:41:bc:f6:fc:95:9f:ab:a0:
91:cb:34:2d:4d:7d:24:76:6c:9b:a2:db:c1:cb:4d:
a3:8c:48:5d:8c:0c:49:d5:d9:04:5a:9b:ac:00:5a:
55:c0:19:d0:40:1c:4b:25:61:e3:70:d2:f3:b7:a3:
29:a6:73:5c:e9:75:df:bd:bc:6d:2d:03:ed:56:8f:
1e:63:8a:fd:4f:78:00:59:20:14:0f:7a:bd:5a:0a:
65:6f:43:8f:e3:c9:fc:04:b0:40:18:e7:04:f2:18:
f7:5d:10:3e:db:24:97:0f:7e:c5:54:fa:78:10:7f:
ee:ec:08:e5:53:d8:24:c9:41:1a:e6:57:33:9e:c7:
d6:9e:77:d6:50:62:89:80:9b:b7:33:83:ce:69:58:
5e:9b:0a:76:75:ae:18:23:3f:ef:be:61:fc:3a:37:
04:65:ad:fe:fe:ac:db:eb:e5:48:4f:98:c2:35:c2:
86:c0:0b:e2:d7:11:26:17:ce:85:b0:41:50:12:33:
70:7e:22:c8:3b:6d:1c:dc:61:80:2a:0f:fe:aa:a7:
a9:ed:16:ad:f9:fb:eb:bd:af:7c:44:54:5b:10:68:
01:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:78:4F:29:88:7B:35:32:CB:51:38:8B:BC:2A:E2:EB:51:60:57:31
X509v3 Authority Key Identifier:
keyid:F6:B0:36:6B:BA:EA:C7:B5:88:4E:42:6D:F8:00:9E:C2:7A:2C:60:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rA2a7rqx7WITkJt-ACewnosYC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/KHhPKYh7NTLLUTiLvCri61FgVzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.0.0/24
Signature Algorithm: sha256WithRSAEncryption
59:d1:d8:b2:1b:aa:ec:e3:b4:16:56:4d:74:c4:b8:18:7c:77:
43:5e:44:9c:27:78:00:e5:9b:d6:46:58:26:a1:1f:67:22:df:
ae:10:cb:55:a0:08:21:2b:50:05:92:22:8c:7b:93:37:02:40:
31:aa:bb:b4:4c:ec:a4:9e:bf:72:b1:c7:09:63:02:9d:9c:a5:
a9:87:2f:b5:ac:bb:aa:07:9a:0c:34:1a:ba:5f:cc:7f:5d:7d:
95:5c:fa:09:93:b4:af:7e:ef:84:7c:ab:29:2d:4d:16:ce:e8:
19:8e:94:ed:f7:d4:e9:8c:99:fa:97:34:9d:b5:f0:e5:bc:e0:
df:10:4a:94:64:ae:86:ab:6a:e5:06:be:b4:0e:0a:65:57:fd:
92:ab:56:f6:c9:c1:85:dd:2c:02:27:05:a3:f7:3b:ad:5a:93:
d3:03:89:2d:8a:07:b6:54:69:41:18:12:c2:aa:dd:a4:03:d2:
50:1b:80:9b:37:e7:38:24:2a:c4:a5:30:db:f0:f3:53:b2:ae:
d9:8b:c9:b1:3f:39:7b:29:b6:f3:a4:1c:c1:bb:de:ba:44:52:
4f:5b:ed:86:ee:1b:37:95:7a:d8:a1:f6:47:b4:3c:4a:2c:e3:
b1:ed:e8:64:c6:15:0d:f1:a1:76:a4:9f:a7:73:52:fa:e8:61:
b1:21:f3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:40 2025 by rpki-client