Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/eGna_ww12Mr-RT9otahhlUsP-HA.roa
File: eGna_ww12Mr-RT9otahhlUsP-HA.roa (raw, json)
Hash identifier: bzWw1i1G2yNrGht8f8OSYVS2yuDRSN1mbYvNWYqkkto=
Subject key identifier: 78:69:DA:FF:0C:35:D8:CA:FE:45:3F:68:B5:A8:61:95:4B:0F:F8:70
Certificate issuer: /CN=f6b0366bbaeac7b5884e426df8009ec27a2c602e
Certificate serial: 019321971623548335DDF8841431BE767F32
Authority key identifier: F6:B0:36:6B:BA:EA:C7:B5:88:4E:42:6D:F8:00:9E:C2:7A:2C:60:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rA2a7rqx7WITkJt-ACewnosYC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/eGna_ww12Mr-RT9otahhlUsP-HA.roa
Signing time: Tue 12 Nov 2024 18:16:09 +0000
ROA not before: Tue 12 Nov 2024 18:16:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48955
IP address blocks: 92.42.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:21:97:16:23:54:83:35:dd:f8:84:14:31:be:76:7f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b0366bbaeac7b5884e426df8009ec27a2c602e
Validity
Not Before: Nov 12 18:16:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7869daff0c35d8cafe453f68b5a861954b0ff870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:33:47:65:70:5d:be:36:c4:e8:fb:3e:dc:
7f:ab:f2:7a:17:1b:ee:40:b5:35:90:a6:54:11:3d:
fb:f7:62:b0:f6:38:01:54:f8:56:b5:ea:36:a0:48:
f6:33:64:06:98:da:72:00:61:ac:fa:b5:4e:6a:a4:
86:c3:9a:d1:1f:b0:c0:fe:e2:29:e3:9b:e2:01:65:
f3:95:87:fd:b9:7c:d9:10:c3:59:1a:0f:d1:f4:08:
06:e4:6b:7e:fe:ca:5e:be:af:05:30:ad:cf:f4:4e:
6f:61:0c:2d:6c:af:17:4d:2b:72:1a:b8:00:a1:c5:
c1:85:fa:b0:9d:64:52:17:65:9f:cc:43:1c:d6:4f:
e6:99:0a:b1:fc:da:59:ec:89:e1:37:0b:96:ef:77:
96:8d:3c:ee:0f:e1:9f:47:b8:06:fc:55:71:94:ec:
8c:86:f6:d2:dc:94:67:e7:e1:2a:a0:c8:a1:b7:5d:
59:69:7e:bc:f6:14:89:9d:99:9d:c8:7f:b7:35:88:
71:32:60:ad:20:d7:26:46:06:89:60:3b:fd:cf:8a:
2b:5a:e5:7f:64:e6:6f:13:47:88:31:90:1b:a7:08:
0c:bd:be:30:d0:73:fe:d5:d5:6a:de:60:2a:7d:a0:
2f:94:11:43:00:bf:0a:5f:d6:f2:40:ab:c1:cb:62:
e0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:69:DA:FF:0C:35:D8:CA:FE:45:3F:68:B5:A8:61:95:4B:0F:F8:70
X509v3 Authority Key Identifier:
keyid:F6:B0:36:6B:BA:EA:C7:B5:88:4E:42:6D:F8:00:9E:C2:7A:2C:60:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rA2a7rqx7WITkJt-ACewnosYC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/eGna_ww12Mr-RT9otahhlUsP-HA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.0.0/24
Signature Algorithm: sha256WithRSAEncryption
84:1d:b7:85:dd:a6:a4:53:bf:7c:1e:fa:7c:24:e7:75:67:4b:
e7:db:55:9d:d9:70:2a:57:a5:09:e6:69:ca:d9:02:2e:42:fa:
77:fd:ff:93:52:f3:1b:ce:d0:5a:49:0d:b1:3e:ef:75:e0:cc:
4f:16:09:52:8c:63:04:6f:2d:b7:ac:d8:16:4e:3c:6b:88:76:
7e:a9:d8:ce:74:09:a3:1e:61:8a:1e:14:5b:0e:cc:7e:88:d7:
d6:5c:65:0b:40:6c:32:b4:8d:c5:e8:e0:f9:14:94:1e:19:b7:
38:73:0e:d0:d5:fb:d2:fd:bc:7a:3b:24:f3:f3:44:76:60:01:
03:39:a0:1b:d5:0a:c1:44:92:4d:7d:ec:0a:14:7b:88:60:cb:
ba:11:f8:02:02:61:5d:9a:30:0f:89:bd:0b:03:5a:5f:60:d8:
92:a2:f8:6e:f0:d9:57:2b:57:f6:ae:a6:4c:31:08:27:dc:2f:
60:a8:06:9e:48:06:3a:e0:08:e1:bd:c9:ba:df:d6:04:97:0c:
bb:a9:60:e4:a0:ce:6c:e5:d9:10:95:01:24:15:38:11:bb:38:
77:82:bf:4f:3b:22:6b:71:58:ee:bf:b4:0c:43:39:02:f4:7d:
18:b2:e3:87:d2:83:6d:b0:ab:86:2c:a0:32:4b:42:e3:72:e7:
be:ab:e2:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZMhlxYjVIM13fiEFDG+dn8yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YjAzNjZiYmFlYWM3YjU4ODRlNDI2ZGY4MDA5ZWMyN2Ey
YzYwMmUwHhcNMjQxMTEyMTgxNjA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODY5ZGFmZjBjMzVkOGNhZmU0NTNmNjhiNWE4NjE5NTRiMGZmODcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwQzR2VwXb42xOj7Ptx/q/J6Fxvu
QLU1kKZUET3792Kw9jgBVPhWteo2oEj2M2QGmNpyAGGs+rVOaqSGw5rRH7DA/uIp
45viAWXzlYf9uXzZEMNZGg/R9AgG5Gt+/spevq8FMK3P9E5vYQwtbK8XTStyGrgA
ocXBhfqwnWRSF2WfzEMc1k/mmQqx/NpZ7InhNwuW73eWjTzuD+GfR7gG/FVxlOyM
hvbS3JRn5+EqoMiht11ZaX689hSJnZmdyH+3NYhxMmCtINcmRgaJYDv9z4orWuV/
ZOZvE0eIMZAbpwgMvb4w0HP+1dVq3mAqfaAvlBFDAL8KX9byQKvBy2LgTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHhp2v8MNdjK/kU/aLWoYZVLD/hwMB8GA1UdIwQY
MBaAFPawNmu66se1iE5CbfgAnsJ6LGAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXJBMmE3cnF4N1dJVGtKdC1BQ2V3bm9zWUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9mYTcwN2EtYjMzNC00YjA1LTgzZmEt
MTQyMGI4NDEzNGQzLzEvZUduYV93dzEyTXItUlQ5b3RhaGhsVXNQLUhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9mYTcwN2EtYjMzNC00YjA1LTgzZmEtMTQyMGI4NDEzNGQz
LzEvOXJBMmE3cnF4N1dJVGtKdC1BQ2V3bm9zWUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXCoAMA0G
CSqGSIb3DQEBCwUAA4IBAQCEHbeF3aakU798Hvp8JOd1Z0vn21Wd2XAqV6UJ5mnK
2QIuQvp3/f+TUvMbztBaSQ2xPu914MxPFglSjGMEby23rNgWTjxriHZ+qdjOdAmj
HmGKHhRbDsx+iNfWXGULQGwytI3F6OD5FJQeGbc4cw7Q1fvS/bx6OyTz80R2YAED
OaAb1QrBRJJNfewKFHuIYMu6EfgCAmFdmjAPib0LA1pfYNiSovhu8NlXK1f2rqZM
MQgn3C9gqAaeSAY64Ajhvcm639YElwy7qWDkoM5s5dkQlQEkFTgRuzh3gr9POyJr
cVjuv7QMQzkC9H0YsuOH0oNtsKuGLKAyS0Ljcue+q+KH
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:21:04 2025 by rpki-client