Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/le7sdmYLIG5owCxdBZbqmJlzX1I.roa
File: le7sdmYLIG5owCxdBZbqmJlzX1I.roa (raw, json)
Hash identifier: ND4XbpyF4yFEBhXTEGlFYCK+2wFn5h4BP+h9U19wd88=
Subject key identifier: 95:EE:EC:76:66:0B:20:6E:68:C0:2C:5D:05:96:EA:98:99:73:5F:52
Certificate issuer: /CN=890c4983ee18bc5e025faafde31c64134a4620ac
Certificate serial: 0190172EB356F074D7D26689C6F4722964CA
Authority key identifier: 89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/le7sdmYLIG5owCxdBZbqmJlzX1I.roa
Signing time: Fri 14 Jun 2024 14:37:34 +0000
ROA not before: Fri 14 Jun 2024 14:37:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56634
IP address blocks: 192.162.212.0/22 maxlen: 22
192.162.212.0/24 maxlen: 24
192.162.213.0/24 maxlen: 24
192.162.214.0/24 maxlen: 24
192.162.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:17:2e:b3:56:f0:74:d7:d2:66:89:c6:f4:72:29:64:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=890c4983ee18bc5e025faafde31c64134a4620ac
Validity
Not Before: Jun 14 14:37:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95eeec76660b206e68c02c5d0596ea9899735f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b6:33:6a:b9:1f:97:a0:f3:29:7c:d1:0a:bb:
47:18:3d:ed:f5:59:3a:7e:71:a3:56:bd:4d:29:d9:
99:f7:43:03:25:f9:17:18:6a:5e:f0:27:fa:e9:d1:
73:51:1c:d1:dd:21:2d:61:c7:fa:18:7c:fd:05:21:
9b:f4:69:ef:95:af:b8:e8:df:f3:fa:9b:27:d7:99:
02:3c:55:73:23:02:eb:af:20:2b:07:e0:05:ee:86:
ed:a6:5d:f0:09:00:88:6e:7b:c0:6b:bc:c9:04:5c:
7d:ce:1e:00:67:c3:99:20:15:62:51:ec:16:03:1d:
2f:8e:0f:e8:6d:41:41:bd:3c:cd:c1:ba:c1:e9:ae:
1f:4e:93:78:f8:d9:4a:1c:64:6a:65:ec:62:1d:f0:
5b:aa:69:09:25:ee:c0:6d:87:3b:a4:80:50:9f:76:
b5:88:b1:70:69:bf:14:15:33:85:cf:41:e0:08:4d:
b9:8c:7b:50:5e:06:75:3a:f6:c5:34:71:94:2a:bf:
12:8c:76:c1:a1:35:ad:aa:9a:61:c0:7e:a2:99:3d:
ff:e2:ea:45:ec:42:fa:85:88:59:b3:0e:3c:35:e4:
d9:87:56:b6:1f:93:5a:65:1b:ed:d1:7f:49:e7:ec:
e2:86:46:eb:cb:15:a0:dd:2f:0b:a3:91:1a:78:a0:
7c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EE:EC:76:66:0B:20:6E:68:C0:2C:5D:05:96:EA:98:99:73:5F:52
X509v3 Authority Key Identifier:
keyid:89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/le7sdmYLIG5owCxdBZbqmJlzX1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.212.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:8d:58:23:44:e6:51:a2:67:8b:9e:56:94:76:9d:a8:6a:98:
07:26:5c:af:4a:cd:b8:bb:f6:73:c0:34:b3:22:de:9a:33:61:
06:96:0d:6a:2a:87:ce:98:05:9d:70:f9:f2:47:f7:0a:f4:2d:
2d:c1:0d:7a:82:72:80:f7:31:a5:2b:fa:d5:58:77:91:1f:49:
db:d2:b9:de:f6:c6:ee:80:53:e1:66:02:0f:e5:a6:e7:99:76:
70:6d:c9:ad:c6:25:32:67:02:51:cb:eb:b2:9b:20:3e:f4:3c:
9e:a9:6a:03:0b:6e:f1:6f:f1:2a:19:28:4a:cd:d7:67:73:86:
f7:5d:c0:6b:7f:ec:d1:ab:b1:3a:f0:a2:7e:d5:7b:9c:c5:b1:
0b:46:13:0d:d2:86:d8:bc:fb:66:88:59:8d:6e:de:a1:b7:ce:
c2:0d:a2:21:54:f9:65:45:b6:64:a4:b9:1a:7c:79:8c:6d:0d:
51:bf:b6:8a:48:28:78:fc:f7:eb:f5:07:d0:59:ec:04:11:0c:
9d:1b:19:a2:97:db:d8:53:5f:9a:5d:27:39:cb:97:b8:9c:fa:
85:7b:73:c4:79:73:80:92:64:49:8e:4a:ef:d7:40:18:a6:b9:
cf:64:56:d8:f0:b8:c2:ce:f7:56:28:1d:64:9c:f5:28:9f:44:
b5:1f:96:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:22 2025 by rpki-client