Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/1N7fyWAFLqiuAOvuqkaJ6kmgObs.roa
File: 1N7fyWAFLqiuAOvuqkaJ6kmgObs.roa (raw, json)
Hash identifier: dbJokGrW1Qc74B16BSwJE8MZc4CWTzNJN2SzXHTe7ak=
Subject key identifier: D4:DE:DF:C9:60:05:2E:A8:AE:00:EB:EE:AA:46:89:EA:49:A0:39:BB
Certificate issuer: /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial: 01942521BFCBCA69F2F687C08EB8045D1D7F
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/1N7fyWAFLqiuAOvuqkaJ6kmgObs.roa
Signing time: Thu 02 Jan 2025 03:49:16 +0000
ROA not before: Thu 02 Jan 2025 03:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 92.119.60.0/22 maxlen: 22
92.119.60.0/24 maxlen: 24
92.119.61.0/24 maxlen: 24
92.119.62.0/24 maxlen: 24
92.119.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Apr 2025 17:45:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:bf:cb:ca:69:f2:f6:87:c0:8e:b8:04:5d:1d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Validity
Not Before: Jan 2 03:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4dedfc960052ea8ae00ebeeaa4689ea49a039bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e9:e4:ce:2d:a1:15:90:c4:85:04:cd:ff:05:
77:8a:d3:ad:a1:d2:a6:31:ca:72:8a:41:85:a8:83:
3b:8d:60:83:cf:71:70:f4:ab:62:96:68:5e:70:4b:
3e:09:06:ee:56:e2:cf:25:7a:6e:7a:c1:9e:9e:fe:
33:28:41:65:d4:a5:5f:d2:6f:6e:75:99:49:dd:48:
b8:18:d6:f9:c8:63:66:c0:8e:7e:a1:42:31:e9:57:
4e:98:23:bd:0e:fd:7b:57:63:30:60:b3:23:1c:e2:
3f:95:6a:5e:a6:ea:98:89:50:ec:e5:d4:f8:de:2e:
59:8c:04:bc:08:c3:65:e7:c3:45:40:aa:05:99:e1:
97:19:c7:29:16:19:06:3d:a8:4d:21:ba:c2:36:15:
81:d1:60:46:4c:f1:f9:28:c4:f8:8e:c2:ee:62:ab:
6e:eb:fe:2f:b2:97:eb:c9:48:c1:13:14:90:92:1d:
6f:7b:87:83:a3:85:60:16:04:5f:d3:b9:58:59:7d:
e7:48:68:f4:1f:13:81:a6:72:6b:2c:73:1a:9d:4a:
79:99:a4:7c:e2:39:f4:df:69:ba:49:26:2f:8e:e9:
19:cf:df:3b:fa:0e:c2:7d:55:33:68:95:4c:b8:4f:
6a:70:9e:b4:ed:28:41:9e:fb:f0:b9:6c:31:f6:08:
1a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DE:DF:C9:60:05:2E:A8:AE:00:EB:EE:AA:46:89:EA:49:A0:39:BB
X509v3 Authority Key Identifier:
keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/1N7fyWAFLqiuAOvuqkaJ6kmgObs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.60.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:1f:52:ef:ed:3a:73:2b:90:db:31:78:2a:40:d3:30:62:05:
0c:f4:43:03:6e:c5:ac:69:cf:fa:be:a6:26:54:9f:9f:90:34:
05:77:da:d6:dc:10:7f:a0:cf:62:fa:50:0c:58:8c:dc:11:1a:
8e:6b:e0:aa:b9:ae:db:e0:e6:ad:67:8e:28:c7:78:ed:64:f6:
fe:9d:8a:98:63:a2:fe:b2:4e:21:1e:8d:23:5b:3e:73:b8:4d:
fb:59:33:20:4e:bd:8f:fb:15:55:08:ec:8d:86:cf:80:c2:04:
8b:69:95:d9:eb:d4:5f:ed:20:11:31:63:0d:4e:2d:6a:f9:0a:
fe:6b:8f:54:d5:5d:03:4e:e8:d8:73:f5:0b:13:09:31:b8:01:
3a:21:3e:ef:c7:6c:d0:fd:d6:4a:c8:32:d6:83:54:a0:79:47:
2d:33:b0:65:da:ae:05:17:01:d2:39:08:58:eb:37:3f:1f:c9:
05:c1:a3:d0:b5:61:cd:5f:fa:bc:de:97:71:0b:87:2b:aa:1b:
e7:73:37:48:31:68:0d:8a:d7:ec:99:ab:df:5e:80:0b:1a:10:
07:5c:d5:cf:06:63:59:38:47:c1:c1:c3:b7:71:72:0d:29:de:
6d:12:cc:fd:ff:93:bc:a7:65:df:cd:b9:eb:1f:60:ee:cc:a3:
06:50:c1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:49:34 2025 by rpki-client