Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/L-hKB8VZ5tko4nxi4bDbgmh0-v4.roa
File: L-hKB8VZ5tko4nxi4bDbgmh0-v4.roa (raw, json)
Hash identifier: fv0DVT4i4BIwsnPH30MBmHsLcJcsIlzm3uQy5KfCIaE=
Subject key identifier: 2F:E8:4A:07:C5:59:E6:D9:28:E2:7C:62:E1:B0:DB:82:68:74:FA:FE
Certificate issuer: /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial: 01942521C0DA9ED88BFD9C12A9A17A8A397B
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/L-hKB8VZ5tko4nxi4bDbgmh0-v4.roa
Signing time: Thu 02 Jan 2025 03:49:16 +0000
ROA not before: Thu 02 Jan 2025 03:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208324
IP address blocks: 92.119.60.0/24 maxlen: 24
92.119.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Apr 2025 17:46:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c0:da:9e:d8:8b:fd:9c:12:a9:a1:7a:8a:39:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Validity
Not Before: Jan 2 03:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fe84a07c559e6d928e27c62e1b0db826874fafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0b:bf:2c:6f:44:f2:44:c7:2e:a2:62:de:11:
06:78:3e:f4:78:f8:5f:35:9e:a5:60:b0:4a:43:8c:
3d:25:28:7e:cf:5a:4a:9c:08:8a:15:ae:d4:f8:71:
cf:6a:c6:6a:a0:13:3e:47:3a:6c:45:ae:7e:1c:2b:
ed:39:91:1f:07:e2:ce:6b:21:ca:ac:e9:ae:10:a2:
ae:a0:1b:8e:80:9a:9c:05:5f:93:29:ef:d9:c3:fe:
dc:af:2b:f2:e1:b6:0b:53:a1:c0:4c:96:a5:dd:89:
00:b0:93:a2:a5:b9:b8:2c:fc:86:01:b2:4d:71:d3:
02:51:10:7a:ce:5f:02:a6:3c:c8:fc:9e:9f:29:09:
70:9a:49:99:2e:2e:6d:b9:4b:1c:fc:93:30:c5:b3:
f6:e8:c9:6a:e6:ba:19:50:39:68:fc:58:7f:ca:cb:
6d:67:b1:7d:5f:5b:1c:07:7b:4a:39:14:74:5f:97:
65:0e:1e:6b:0a:01:5f:5c:ab:76:39:d9:15:92:3a:
3f:30:7c:89:8c:84:4e:cf:d0:96:a3:38:16:d0:38:
3e:9f:b5:b9:93:5d:51:be:6e:9f:3e:41:18:6f:62:
e3:e7:61:8c:a5:a0:01:c6:89:1c:45:31:b3:37:57:
9a:7e:56:b5:db:b5:01:bc:b8:2a:d7:97:c8:f7:43:
6e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E8:4A:07:C5:59:E6:D9:28:E2:7C:62:E1:B0:DB:82:68:74:FA:FE
X509v3 Authority Key Identifier:
keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/L-hKB8VZ5tko4nxi4bDbgmh0-v4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.60.0/24
92.119.63.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:3f:5d:b7:bd:69:57:d8:a4:b0:d3:35:76:fa:a7:62:f1:7b:
25:75:f3:ab:7c:a5:78:bc:24:9d:77:41:e7:ad:5a:4b:94:57:
32:c0:3f:7a:5b:40:5f:62:b3:fb:1c:f8:ec:fa:72:86:4f:ed:
2a:c4:00:08:3e:68:a4:c3:b2:15:63:89:56:c8:6b:b9:27:c3:
d9:f3:8c:1e:98:b4:f7:16:5f:a7:e2:03:fa:cf:89:65:a2:fe:
ec:eb:0f:5b:30:76:4b:21:4e:2d:e2:0a:62:3c:fb:14:40:d8:
49:6d:a0:c9:fa:2e:f4:3a:94:3e:8e:5b:35:31:54:47:e9:de:
a3:20:37:c0:c1:7e:54:ef:c1:3e:1e:c8:87:41:c3:92:22:52:
9e:30:30:c6:3e:11:80:9f:af:71:fc:59:b1:b7:e6:fe:57:92:
af:37:78:88:6e:02:9e:66:22:6f:1b:e1:6a:bf:e9:5c:71:51:
5f:45:a6:fe:74:8c:2c:1e:6d:bd:4d:b1:c2:19:7b:52:cb:3b:
53:75:35:24:fe:91:a2:5f:1b:76:3f:74:bc:c0:29:dd:00:4c:
c7:5d:76:f7:17:94:7e:2f:2e:64:99:8c:73:87:40:98:04:75:
4f:24:57:d1:aa:b5:df:5b:ad:dd:ff:ba:4b:95:9c:a9:dc:2e:
db:9f:f6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:22:35 2025 by rpki-client