Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/fumXAB3kLsDhFeyHd4o90_RfvU0.roa
File: fumXAB3kLsDhFeyHd4o90_RfvU0.roa (raw, json)
Hash identifier: gPIDCgGfw3T8gC/OJEjYh+3WcbXsN2C9rFZNwd9AoYg=
Subject key identifier: 7E:E9:97:00:1D:E4:2E:C0:E1:15:EC:87:77:8A:3D:D3:F4:5F:BD:4D
Certificate issuer: /CN=8636a4e14a71ddd510164b8631ad99bbfc75953a
Certificate serial: 018E9EE3FBA46CAF1818A19862F509D76771
Authority key identifier: 86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/fumXAB3kLsDhFeyHd4o90_RfvU0.roa
Signing time: Tue 02 Apr 2024 12:58:44 +0000
ROA not before: Tue 02 Apr 2024 12:58:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59909
IP address blocks: 159.255.147.0/24 maxlen: 24
185.148.92.0/22 maxlen: 22
199.255.112.0/22 maxlen: 22
206.225.20.0/22 maxlen: 22
212.24.116.0/22 maxlen: 22
2a0d:d100::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9e:e3:fb:a4:6c:af:18:18:a1:98:62:f5:09:d7:67:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8636a4e14a71ddd510164b8631ad99bbfc75953a
Validity
Not Before: Apr 2 12:58:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ee997001de42ec0e115ec87778a3dd3f45fbd4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2c:19:ab:e7:a6:21:7c:94:7e:47:d4:03:44:
d5:df:7a:66:ce:93:28:f6:ff:fb:76:61:a9:bc:7f:
fa:33:de:b1:9e:91:c0:d2:e5:16:0e:d0:97:31:10:
27:8b:de:40:9f:0f:43:39:5d:cc:95:54:99:2f:00:
5e:59:fc:bb:58:05:1e:6a:b8:d5:a1:72:00:11:80:
00:07:ce:67:4a:15:c4:16:63:25:87:2f:ae:3c:aa:
b2:a7:e2:57:b1:71:bd:a9:2e:4c:ed:9e:ee:39:fc:
67:de:bd:21:77:ff:58:a8:6e:1f:58:1c:be:32:44:
a6:4d:1c:e9:d9:d7:35:ed:9a:a1:66:91:ee:26:6c:
61:b0:cf:1c:ff:a5:63:d8:b9:5e:58:9f:36:1c:5c:
5a:a6:27:74:de:d5:d1:7a:1e:ea:3d:72:b0:b5:a3:
bd:ff:21:ad:e2:64:43:ca:bb:51:e2:25:6d:12:33:
44:5d:f2:21:3f:50:c0:65:8f:b4:76:13:83:d9:cd:
11:92:82:f3:92:f5:92:7d:2b:bd:b1:9d:bb:4f:3c:
31:bb:bb:1e:c0:c7:14:b3:62:d4:d6:48:5f:e9:8d:
1d:ee:94:5b:1e:84:f5:7e:3a:bf:46:0f:c2:d3:9f:
9b:c0:48:aa:2d:9a:22:d7:d3:eb:f8:f0:58:ba:b4:
ab:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E9:97:00:1D:E4:2E:C0:E1:15:EC:87:77:8A:3D:D3:F4:5F:BD:4D
X509v3 Authority Key Identifier:
keyid:86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/fumXAB3kLsDhFeyHd4o90_RfvU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.255.147.0/24
185.148.92.0/22
199.255.112.0/22
206.225.20.0/22
212.24.116.0/22
IPv6:
2a0d:d100::/32
Signature Algorithm: sha256WithRSAEncryption
17:7f:8b:c3:76:f0:b9:20:a7:89:44:9c:45:ed:6b:3e:a0:48:
21:95:df:a9:1f:e6:b1:b2:b1:4a:50:fa:51:1c:64:ca:e1:b8:
21:38:c7:68:74:9d:5c:6a:f4:5d:7e:56:29:7b:81:35:b9:ee:
f6:79:39:0d:2d:f3:93:7c:47:7c:dc:d5:74:02:f7:1c:ba:27:
9e:ab:48:cc:1d:b9:e2:59:3f:8d:5d:00:b2:df:17:73:d9:9b:
d1:5a:b6:39:4b:c9:85:eb:ad:7d:af:cd:75:33:36:7e:fd:81:
df:e8:96:62:e8:6f:3b:83:20:f5:9c:5b:bd:88:1b:69:16:09:
5c:72:c5:02:a8:1d:3d:39:cc:26:94:2e:1c:51:8c:f0:3b:93:
4c:33:40:bd:b4:dd:38:77:6e:58:64:5d:49:e4:ca:ce:7d:91:
f2:71:b0:59:18:1f:1c:a1:2d:f5:11:5c:be:13:e9:06:7e:02:
ce:d5:30:72:90:df:f1:4e:23:8d:d7:ff:6c:a5:71:11:aa:ef:
90:38:de:5e:45:b6:26:79:1c:4e:f5:e1:8d:aa:3d:5b:e3:7c:
ac:46:5b:34:94:bd:80:09:d3:c3:f2:72:57:cd:66:22:28:6d:
42:e0:cd:7a:6f:29:e3:3e:d4:fa:96:64:75:8c:84:0d:f6:b2:
f7:27:57:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:02 2025 by rpki-client