Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/8VxiV7BhBF7d8x4Ml4_iv56oShU.roa
File: 8VxiV7BhBF7d8x4Ml4_iv56oShU.roa (raw, json)
Hash identifier: xiSyqh6ZmV4huXI+kQ8T3mij+RZiMv5yPwug8zYeN9s=
Subject key identifier: F1:5C:62:57:B0:61:04:5E:DD:F3:1E:0C:97:8F:E2:BF:9E:A8:4A:15
Certificate issuer: /CN=0268b930beeca51fbf3543fe79f9b19345cf13d5
Certificate serial: 0190B6F8AC4DB41571DAD5FEEA8B485F6876
Authority key identifier: 02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/8VxiV7BhBF7d8x4Ml4_iv56oShU.roa
Signing time: Mon 15 Jul 2024 15:17:48 +0000
ROA not before: Mon 15 Jul 2024 15:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149522
IP address blocks: 192.94.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b6:f8:ac:4d:b4:15:71:da:d5:fe:ea:8b:48:5f:68:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0268b930beeca51fbf3543fe79f9b19345cf13d5
Validity
Not Before: Jul 15 15:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f15c6257b061045eddf31e0c978fe2bf9ea84a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1a:b4:78:ba:fb:40:83:69:33:6e:ec:36:96:
ad:e6:2d:89:1a:47:13:34:46:2a:df:ec:13:de:2c:
44:c9:81:a6:aa:07:2f:04:48:d4:eb:80:2e:fd:02:
4e:ef:40:20:ff:30:62:30:9d:2a:84:46:5c:43:40:
15:ed:63:3c:04:0e:04:4e:e5:f9:f2:57:ce:02:68:
f9:07:d2:37:e7:48:06:de:50:ae:9a:cf:53:06:3f:
bd:e6:b9:45:7d:fe:c9:5d:7d:9e:db:09:f8:bb:42:
e6:1c:7b:3f:cd:b2:c2:f3:cd:49:6b:7f:48:53:2a:
aa:96:fd:61:76:65:42:f8:0d:1f:77:a1:00:0c:b3:
7a:2f:c4:cb:49:79:f3:4e:de:1d:82:3c:b3:a6:4a:
5d:70:ef:2f:d4:08:5e:e9:cd:62:fc:6a:36:fb:14:
03:77:29:c1:45:cb:c6:45:41:0d:4f:da:e3:09:ba:
2c:9e:aa:fb:f7:3c:c3:9d:0c:08:d5:43:a1:8b:bb:
ee:3c:b2:48:01:ac:b1:a9:f3:24:23:69:7f:db:a2:
fd:f3:d1:b5:21:0a:5c:e1:3f:bd:c1:66:a7:5b:54:
52:c0:b1:5d:53:0e:09:62:b3:83:10:0a:56:89:5a:
d7:9c:99:67:dd:4b:55:ac:68:b1:37:bd:7b:16:39:
2f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5C:62:57:B0:61:04:5E:DD:F3:1E:0C:97:8F:E2:BF:9E:A8:4A:15
X509v3 Authority Key Identifier:
keyid:02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/8VxiV7BhBF7d8x4Ml4_iv56oShU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.94.78.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:f6:4e:ab:c5:87:2d:a6:9c:71:e4:52:65:75:d5:26:09:61:
18:0d:c5:88:74:09:c8:64:28:12:c9:5a:0b:bb:20:cd:a4:f4:
ad:c3:f8:18:80:3d:cd:c2:7b:db:e4:ce:94:af:81:53:d9:4a:
6c:31:96:20:f9:10:cf:a2:b4:7e:0d:e7:9a:07:2d:78:f3:d8:
0d:8a:a2:5c:d8:52:7d:39:90:4e:2f:f0:a7:ae:ee:1a:37:6c:
ab:a6:a1:1d:2b:07:29:7a:6e:1b:79:9a:00:14:b4:1c:0c:e1:
01:07:34:52:97:ff:fe:33:c7:3b:e5:8c:d9:32:19:c9:13:d2:
b6:d1:19:f0:9e:dd:3d:64:ce:20:ca:ab:fc:e1:8f:0f:7d:4c:
9d:f1:a5:e2:bc:e5:80:ff:f0:01:d5:b1:fa:9a:fa:f7:13:d5:
83:00:3a:d3:45:85:86:4b:5e:e8:f3:0d:56:a8:ff:ec:e7:8e:
ee:cc:8c:fb:e3:9d:d7:8d:09:96:67:27:67:76:83:76:91:86:
47:68:6c:53:f6:28:f0:cd:a2:ac:25:ae:01:cc:c1:84:0a:58:
c4:19:f2:c6:8f:23:fe:66:3a:3f:05:ea:b6:58:57:73:11:58:
ae:0a:26:bb:5f:42:fd:01:36:55:0b:40:3e:92:c7:ea:9f:4e:
ca:ad:86:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:15:05 2025 by rpki-client