Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/FaRj-V4oWOlf93S9t7S0WzB7jhQ.roa
File: FaRj-V4oWOlf93S9t7S0WzB7jhQ.roa (raw, json)
Hash identifier: gIY589RAfar+ZG2xtwpsH1VB1SS20Vo8MPM1RIBSSh4=
Subject key identifier: 15:A4:63:F9:5E:28:58:E9:5F:F7:74:BD:B7:B4:B4:5B:30:7B:8E:14
Certificate issuer: /CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Certificate serial: 018CC56DE2A5FFC18A9F5F102C12A233602A
Authority key identifier: 20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/FaRj-V4oWOlf93S9t7S0WzB7jhQ.roa
Signing time: Mon 01 Jan 2024 14:29:22 +0000
ROA not before: Mon 01 Jan 2024 14:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47692
IP address blocks: 152.89.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e2:a5:ff:c1:8a:9f:5f:10:2c:12:a2:33:60:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Validity
Not Before: Jan 1 14:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15a463f95e2858e95ff774bdb7b4b45b307b8e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:44:20:e7:b7:f2:3f:84:13:f5:00:8a:28:75:
05:41:ea:bd:83:fc:65:f6:ae:ba:29:62:63:53:bf:
b8:4c:15:4f:f7:64:85:85:de:73:b1:7f:e6:50:4d:
54:05:49:d5:5d:5d:5b:4e:9d:71:be:84:13:5d:2f:
55:81:10:2a:7b:7e:e2:80:6e:b4:a0:54:30:fe:41:
3a:2c:77:0a:1d:02:2c:b1:01:9f:a7:08:38:49:75:
c7:36:53:1f:14:ee:84:1f:8b:b8:13:28:5a:58:fa:
8f:70:36:eb:49:47:71:8f:bf:24:29:62:54:db:8e:
41:83:69:03:42:dc:74:63:fb:58:88:f4:c7:22:1e:
4f:c5:df:ef:01:2d:75:ab:d0:a6:bc:e9:fe:de:db:
44:19:f3:41:54:26:4b:c2:73:cc:71:51:15:e6:e7:
4d:73:1b:7c:3a:e8:b8:68:8a:1c:93:8d:4a:c3:22:
a5:01:84:a8:55:7a:63:49:c5:75:cc:e2:a4:ff:70:
d0:35:47:2e:80:62:69:71:72:17:ae:42:9a:b2:17:
ed:21:fb:e1:71:5e:35:3d:56:77:3e:b1:1c:7a:6a:
f6:30:df:16:89:48:5e:1e:8b:0b:5d:17:87:35:09:
ee:49:17:cb:ee:ea:34:d4:ac:8f:07:4f:68:d5:06:
ea:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A4:63:F9:5E:28:58:E9:5F:F7:74:BD:B7:B4:B4:5B:30:7B:8E:14
X509v3 Authority Key Identifier:
keyid:20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/FaRj-V4oWOlf93S9t7S0WzB7jhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.225.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:c9:2a:1d:49:dd:b4:05:bf:13:0b:c9:29:20:77:66:e0:ce:
a1:7d:70:40:4f:7b:74:22:85:7d:ab:44:43:e0:c5:03:1f:27:
ec:63:97:38:ee:3a:72:ab:4c:43:40:dc:0e:87:f0:0c:9a:8d:
ee:56:c2:ef:bb:2d:95:7a:4f:d1:c7:e1:37:09:a1:8c:45:36:
79:0a:a4:25:4c:fa:81:9a:0a:f2:d5:c3:c5:b7:1f:0c:99:9b:
e8:fd:b0:08:8b:15:01:15:5a:fa:04:2c:e3:b0:9d:00:d0:d7:
5e:d9:66:68:3b:f0:4e:32:49:5c:7e:bf:a2:9a:d4:76:4d:fa:
81:66:ae:4b:f9:a0:5d:a2:4e:c4:75:14:ca:ce:91:8a:bd:5d:
f0:33:73:77:fe:8f:0e:a7:48:ba:60:39:4b:a4:94:86:ca:ab:
e1:24:cd:5d:df:48:c4:14:d8:c0:28:f4:1c:c2:a1:f0:89:2c:
0b:55:ff:c2:39:8a:44:62:7e:3d:53:b4:90:61:06:50:0c:19:
ad:9f:d1:77:b5:9e:ce:cd:d4:4c:e3:43:7c:7f:32:6a:e1:3f:
9b:91:45:dd:32:52:8a:50:0c:02:0b:c8:c9:27:60:d9:97:28:
9b:09:a0:08:8a:ed:c1:de:e4:24:fa:67:de:cd:5c:ab:2f:5c:
6a:69:01:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:09 2025 by rpki-client