Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/A757RGEPK1JXDgA2f06tGNDB8Hc.roa
File: A757RGEPK1JXDgA2f06tGNDB8Hc.roa (raw, json)
Hash identifier: kiVPnX63joQoQ4nh63gZiLzAAzFz1kjiA1AAAif0yqQ=
Subject key identifier: 03:BE:7B:44:61:0F:2B:52:57:0E:00:36:7F:4E:AD:18:D0:C1:F0:77
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 0192FD328D27ACA51CD56A6FF2E5EA8CAC69
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/A757RGEPK1JXDgA2f06tGNDB8Hc.roa
Signing time: Tue 05 Nov 2024 16:40:01 +0000
ROA not before: Tue 05 Nov 2024 16:40:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2856
IP address blocks: 86.105.58.0/24 maxlen: 24
94.176.72.0/23 maxlen: 24
188.208.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 08:27:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fd:32:8d:27:ac:a5:1c:d5:6a:6f:f2:e5:ea:8c:ac:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Nov 5 16:40:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03be7b44610f2b52570e00367f4ead18d0c1f077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:db:71:86:b4:c2:e8:c7:cf:34:4d:d4:8a:43:
41:c5:cd:dd:0f:b1:04:7a:85:a8:dc:d3:d5:a4:16:
dc:46:0f:f1:1e:07:e2:dd:f9:19:d6:d5:99:68:9e:
d7:7f:06:98:d2:e3:22:2f:2f:4b:09:ea:5f:2e:46:
39:5b:39:fd:0e:a2:00:8e:83:fb:3d:f6:fc:a3:e5:
5c:45:ec:b6:cf:86:be:dd:4e:07:d4:ae:e3:be:26:
ef:35:0b:18:37:38:06:69:49:41:a4:23:dd:b7:8f:
60:db:1f:4c:e8:90:67:e5:1e:9c:d7:b3:f0:7a:c9:
41:2a:8d:c5:46:4e:97:32:36:fe:23:18:cc:d3:9c:
3d:e0:07:dd:a6:3f:a5:12:a2:64:58:9e:de:30:86:
32:0c:b8:0b:46:52:34:a8:d8:24:7e:d4:bf:24:33:
5b:93:3b:76:31:b2:0a:4a:d7:f8:74:cd:87:e3:fa:
ee:9c:06:f4:bf:8a:ac:51:cc:d4:04:73:8c:46:8f:
77:b4:2f:71:b8:0d:0a:3f:ea:71:fd:b6:10:73:13:
70:44:2f:d5:11:fe:a0:63:f0:ca:95:3a:47:fa:90:
ef:0f:54:b9:cd:39:88:4f:ed:16:6f:9b:22:91:90:
81:01:cf:22:82:fb:d0:e2:60:93:95:7d:d3:c6:e5:
c9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BE:7B:44:61:0F:2B:52:57:0E:00:36:7F:4E:AD:18:D0:C1:F0:77
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/A757RGEPK1JXDgA2f06tGNDB8Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.58.0/24
94.176.72.0/23
188.208.124.0/24
Signature Algorithm: sha256WithRSAEncryption
57:f8:8c:c0:3e:7e:ef:1b:c7:99:6f:89:db:47:5a:54:52:dd:
4d:20:93:6c:9c:12:8c:47:78:03:49:a9:1c:2a:8a:c1:8d:f1:
2c:d3:bb:34:75:06:95:86:29:52:56:ba:9f:5d:97:32:f9:96:
26:d0:e6:e0:5d:c3:75:c5:32:2e:d5:a4:27:b1:c7:5e:53:11:
5b:56:2d:8f:d1:3d:2a:8b:f6:33:50:40:22:f3:84:27:74:9c:
f6:03:46:65:c0:6a:ff:a3:d9:a4:7d:3d:f4:36:40:10:48:e0:
54:47:f8:a6:01:9f:fb:ce:44:c2:a7:ce:1a:a9:82:91:cf:fe:
13:36:d0:6c:dd:72:d3:8a:62:16:21:76:e8:9d:a1:fb:7f:3f:
02:a2:c0:2a:77:8d:3e:12:f9:67:f6:98:31:c0:b1:57:82:3b:
9d:d0:1b:bf:f9:1c:69:33:b9:8f:29:f2:b8:fa:cf:82:aa:0a:
ef:61:e5:70:2e:8a:f8:78:2a:73:5e:da:95:15:40:86:0a:44:
f3:43:88:f3:80:39:d0:d7:53:b5:2b:8c:06:b5:02:13:1a:b5:
7f:b8:a2:cb:07:e2:87:91:27:c4:7a:29:eb:47:21:11:0a:34:
8c:da:47:cc:8f:39:23:0b:43:e2:2f:b3:11:de:69:c1:72:6f:
db:b2:7a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:48 2025 by rpki-client