Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/I-f2fNxKATl0FpiDPthh_9zbLk4.roa
File: I-f2fNxKATl0FpiDPthh_9zbLk4.roa (raw, json)
Hash identifier: +8lNeaVlqzFXYfVui+ekAH9ab6omisvEbi0vBuTCUWE=
Subject key identifier: 23:E7:F6:7C:DC:4A:01:39:74:16:98:83:3E:D8:61:FF:DC:DB:2E:4E
Certificate issuer: /CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Certificate serial: 018CCA2B991C81866039ACFA44FAD0CA45FD
Authority key identifier: A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/I-f2fNxKATl0FpiDPthh_9zbLk4.roa
Signing time: Tue 02 Jan 2024 12:35:04 +0000
ROA not before: Tue 02 Jan 2024 12:35:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201612
IP address blocks: 176.97.158.0/24 maxlen: 24
192.174.68.0/24 maxlen: 24
2001:67c:10b8::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:99:1c:81:86:60:39:ac:fa:44:fa:d0:ca:45:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Validity
Not Before: Jan 2 12:35:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23e7f67cdc4a0139741698833ed861ffdcdb2e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d2:0a:6a:7b:3a:ae:bf:67:90:89:2b:9a:53:
9d:fb:41:3d:b3:cf:b5:f9:31:aa:04:98:c2:4a:b8:
93:ef:75:b4:92:bb:c3:0d:d0:26:9a:e7:a6:77:5c:
85:0c:98:84:35:4e:27:2d:da:48:ed:6e:5a:32:d6:
78:26:90:79:04:c0:79:72:f4:bd:df:96:d1:78:ff:
4f:94:0e:55:5d:26:18:28:05:6f:e6:1b:9a:e3:d7:
df:57:0e:78:f6:97:ae:ca:e2:49:ef:5a:17:66:24:
38:45:0f:7e:88:c3:a0:5f:85:e1:ea:6e:8f:7e:72:
92:a6:9d:b9:ae:d9:bf:e6:43:81:56:0b:f2:4f:be:
a4:56:83:1f:17:e0:bf:01:e6:b5:57:ec:ba:bb:4f:
eb:d2:9e:7f:11:d8:7d:25:e6:73:7c:4a:cf:2e:fa:
24:7e:d1:04:50:d8:7e:c0:a9:8a:48:c6:c4:5f:9c:
a3:5b:4c:1c:30:69:12:f9:b7:c0:65:53:7f:98:4b:
19:bb:7d:3e:c7:78:b3:77:6e:3c:17:8f:c6:1f:30:
1b:9c:2d:01:31:9a:ee:1b:b3:b1:02:f1:20:41:92:
81:b7:fa:f1:02:cb:e1:29:fa:b0:b4:ff:3c:b8:14:
f4:3c:88:c9:29:af:da:18:08:2d:61:72:a2:5e:bc:
71:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E7:F6:7C:DC:4A:01:39:74:16:98:83:3E:D8:61:FF:DC:DB:2E:4E
X509v3 Authority Key Identifier:
keyid:A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/I-f2fNxKATl0FpiDPthh_9zbLk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.158.0/24
192.174.68.0/24
IPv6:
2001:67c:10b8::/48
Signature Algorithm: sha256WithRSAEncryption
81:78:c2:fb:8b:47:a9:d6:fe:32:77:34:3b:7a:f9:98:eb:0f:
90:dc:24:75:86:e9:b7:15:9c:74:28:0e:18:25:3f:e0:b6:03:
0a:58:f4:f4:eb:99:f5:b5:66:e6:32:76:73:a7:7c:96:0b:77:
30:ce:ed:62:71:61:67:24:32:57:b8:f6:83:4d:6d:47:40:cd:
65:61:5c:70:8c:91:73:d2:cb:e5:b2:71:58:a9:ce:02:6e:b8:
49:ab:90:25:e6:56:bb:7b:15:d2:59:f7:63:19:7e:09:78:7a:
ad:6b:52:30:1e:71:9f:3c:59:71:13:90:72:45:2e:bf:9a:87:
38:2c:ed:4b:41:30:d6:09:4a:32:3b:5c:d9:b3:dc:27:30:b8:
25:43:2a:2c:1d:69:c0:6a:62:ad:4b:0c:7f:7e:62:27:c3:01:
8e:9d:1a:4b:60:73:64:d7:57:99:80:24:24:c0:21:1c:c9:dc:
50:8f:7f:a6:e4:3f:d3:29:0e:37:cc:27:05:fb:ca:c5:c0:85:
40:fe:40:cb:bd:e2:e7:4e:47:c7:af:7f:f0:08:87:8c:d3:c3:
83:a1:9b:77:88:d7:41:9b:38:41:f3:1f:95:de:d1:fb:c0:68:
39:ff:e1:3c:cc:35:4c:39:35:cd:18:77:d3:58:37:17:3e:24:
9a:4a:af:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:12 2025 by rpki-client