Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/OkWsPpCY9cmp0n7on3mOCdxKZeE.roa
File: OkWsPpCY9cmp0n7on3mOCdxKZeE.roa (raw, json)
Hash identifier: AKVMJaAbXj4vjL/+WnwKx6S5l/ISR1qmL0qXph50h7Y=
Subject key identifier: 3A:45:AC:3E:90:98:F5:C9:A9:D2:7E:E8:9F:79:8E:09:DC:4A:65:E1
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 018CC7953171B0617D84D6755B554CF0D043
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/OkWsPpCY9cmp0n7on3mOCdxKZeE.roa
Signing time: Tue 02 Jan 2024 00:31:32 +0000
ROA not before: Tue 02 Jan 2024 00:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32875
IP address blocks: 109.166.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:31:71:b0:61:7d:84:d6:75:5b:55:4c:f0:d0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 2 00:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a45ac3e9098f5c9a9d27ee89f798e09dc4a65e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c1:77:c0:97:34:94:da:f4:66:73:d8:27:46:
07:61:07:f7:d8:65:cf:4f:09:67:d1:03:24:dd:2d:
2c:99:1e:f0:7d:78:9f:52:94:38:ca:8c:15:25:d7:
af:ec:1c:52:dc:53:0f:68:93:c3:46:fe:10:0d:ca:
83:f5:20:e5:75:3a:20:5e:70:21:a3:a6:2f:70:8e:
ee:40:34:92:bd:61:80:6b:0e:3f:2d:8d:c8:64:a9:
88:7f:9c:ed:5f:d1:d8:49:70:4e:b8:1a:a8:da:e8:
05:51:e8:24:b4:d5:33:dc:f1:ee:ef:10:75:4f:dd:
96:ea:b6:d0:b7:a4:c5:0c:da:3d:8c:74:ab:59:23:
ba:a4:93:d0:1f:2c:47:c4:e2:59:df:38:f2:22:c9:
84:8c:f5:36:8f:58:b6:58:bb:d6:3d:ff:7b:a4:de:
d5:6b:6e:da:c3:8f:3f:4f:98:6f:ca:d1:02:e8:e4:
b4:a6:9a:91:83:3a:f1:0c:fd:a8:e0:7f:06:68:9f:
37:29:c7:e1:5c:26:06:c0:5f:d4:22:3d:30:fe:4a:
f5:66:ad:bf:47:24:aa:54:b6:7e:7c:be:f1:f6:64:
b8:16:24:d7:fb:c4:71:7c:03:4e:02:ca:0e:32:8b:
84:e3:91:e7:4c:87:7d:12:99:9f:6b:21:5a:be:a4:
1e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:45:AC:3E:90:98:F5:C9:A9:D2:7E:E8:9F:79:8E:09:DC:4A:65:E1
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/OkWsPpCY9cmp0n7on3mOCdxKZeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.166.39.0/24
Signature Algorithm: sha256WithRSAEncryption
84:35:64:b4:24:80:6c:39:bb:cc:a9:86:97:6b:f2:1b:5a:93:
f3:85:17:f2:d2:4c:81:a9:ae:95:7f:8b:99:cf:7f:b3:a3:59:
21:8a:01:47:44:35:a9:6a:59:26:77:79:a4:0f:2f:6b:b5:b2:
b8:87:a0:ac:66:7a:7b:b3:28:09:e6:22:b2:bc:d1:7a:cd:7d:
fb:be:17:6d:1d:06:87:80:64:17:b3:f4:64:d9:f6:ea:08:68:
94:ce:87:00:14:55:7b:bf:2b:19:c3:bf:14:9b:ff:3a:f0:9d:
b0:a1:2a:9d:1b:cb:10:a3:cf:dc:28:93:ed:cb:79:3b:f3:2e:
a8:d1:a4:8b:82:a8:85:80:d1:c4:fa:d9:0e:fa:86:9e:6a:c4:
98:7b:da:da:6d:18:dd:5a:48:3e:54:84:cc:1b:f7:eb:1e:75:
38:69:2a:09:b2:80:1c:35:0b:7c:5a:0c:00:64:1b:a5:ff:3b:
46:14:04:54:c4:4c:26:3e:94:02:1d:76:98:81:fe:de:00:33:
6c:65:d8:e4:b4:56:fc:f3:21:e9:37:db:76:9d:6f:40:52:87:
c7:b8:75:e1:31:5f:f8:0b:b2:4d:05:13:f7:7f:5c:4d:97:0e:
4d:d5:06:80:a5:9f:74:18:c5:68:b4:2a:4d:7e:15:6d:bb:0f:
96:75:25:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:17:15 2025 by rpki-client