Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/eJAMVjdrC8zU6l2AWHtw6OrSTIA.roa
File: eJAMVjdrC8zU6l2AWHtw6OrSTIA.roa (raw, json)
Hash identifier: f/3FoN2MpXlbPavPSsMZQ9ST/h2CVnUj27tOkBlGWLk=
Subject key identifier: 78:90:0C:56:37:6B:0B:CC:D4:EA:5D:80:58:7B:70:E8:EA:D2:4C:80
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019426D9F772A9710D7B323DF4C748B5AD0D
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/eJAMVjdrC8zU6l2AWHtw6OrSTIA.roa
Signing time: Thu 02 Jan 2025 11:50:06 +0000
ROA not before: Thu 02 Jan 2025 11:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214271
IP address blocks: 141.105.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 11:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f7:72:a9:71:0d:7b:32:3d:f4:c7:48:b5:ad:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jan 2 11:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78900c56376b0bccd4ea5d80587b70e8ead24c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e8:78:3e:ce:7a:f5:cf:d0:0e:1d:ac:11:81:
1d:b0:4b:bf:b4:7b:b5:79:d7:15:b8:bd:01:51:af:
0c:71:79:70:08:f6:01:ab:8b:2d:9a:90:e1:8a:5e:
f6:7f:2a:b2:ac:f4:b9:13:28:df:b1:51:2e:12:84:
68:d9:97:5e:d3:95:10:90:d8:80:6e:07:6d:5c:85:
99:74:73:df:c5:ab:ad:d1:4c:1e:71:28:9c:b7:72:
30:43:e4:e6:f0:ad:c0:fe:dd:70:e4:60:ab:bd:18:
94:d0:24:f6:f6:69:82:73:1e:17:42:66:fa:d4:59:
4e:3c:ae:8b:60:74:14:fa:20:3c:b8:98:c3:3c:2a:
7d:09:77:f4:29:5e:83:1a:58:e6:62:82:33:2a:01:
d1:75:54:f7:ef:a0:fa:15:15:58:95:9c:65:f7:69:
d9:37:e8:09:6e:1e:29:0b:8d:a3:a9:f4:67:b8:b3:
5b:e6:e2:56:97:4f:da:e5:c6:b1:b4:63:28:04:b2:
a8:42:a7:51:a3:21:8a:cd:e8:d8:fa:ea:4e:1f:77:
2a:36:1a:00:3d:ea:0a:62:99:4d:6c:9a:59:1a:bb:
2b:6b:7e:c7:55:11:62:d5:3c:47:d0:80:15:db:78:
db:3c:aa:ec:ab:c2:e2:96:6a:b0:d5:ca:fa:b5:01:
8a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:90:0C:56:37:6B:0B:CC:D4:EA:5D:80:58:7B:70:E8:EA:D2:4C:80
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/eJAMVjdrC8zU6l2AWHtw6OrSTIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.140.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:b8:cc:29:51:5b:56:68:4c:82:b2:d8:ab:2a:b7:9e:1e:8d:
44:c8:ac:cb:ba:82:d5:4b:cc:f8:5a:e6:0f:8b:37:33:b5:67:
9b:d3:bc:35:53:62:1b:38:8f:f4:00:14:2c:5a:88:85:33:67:
88:1a:23:ef:35:08:91:48:c1:98:9a:fe:81:94:8a:63:51:f7:
32:2d:46:00:05:82:73:a5:40:c3:51:18:48:8d:19:a9:43:ba:
ab:59:bc:b8:01:fa:05:f9:ea:f9:11:b5:14:0e:d0:23:5f:80:
7a:dc:ac:98:74:39:19:cc:00:5a:c6:c8:cb:17:97:81:64:be:
e1:2b:3a:42:a2:a6:ea:fe:6f:dd:d2:55:05:93:eb:4e:1d:54:
ff:ff:07:9c:20:af:55:4f:95:cd:ef:fc:ed:8f:6b:f0:7e:18:
37:a2:db:d0:e8:7f:45:99:c5:3c:00:b1:ef:17:5a:b5:2c:58:
74:6f:c9:30:40:ea:eb:27:77:a2:03:5d:a0:49:1a:63:fa:24:
e8:99:84:a5:84:56:41:ce:ce:00:5f:1e:0d:9d:b0:ab:fe:65:
f1:8a:6d:e9:95:99:b8:1e:94:80:bd:3d:6d:f3:08:82:26:19:
1b:b7:2a:cb:fd:d4:0c:a4:74:69:1d:1f:47:82:26:95:6a:1f:
23:64:2c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:36:17 2025 by rpki-client