Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/B92B1PyqYqwOfng0Hq1w4pTLf0k.roa
File: B92B1PyqYqwOfng0Hq1w4pTLf0k.roa (raw, json)
Hash identifier: Rl+E97lVpqH2dhkQt9XJm7WHDUfV+hjTMNzLLNcULM8=
Subject key identifier: 07:DD:81:D4:FC:AA:62:AC:0E:7E:78:34:1E:AD:70:E2:94:CB:7F:49
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0193024DECDAF6AA71AC14A3F6509575EC99
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/B92B1PyqYqwOfng0Hq1w4pTLf0k.roa
Signing time: Wed 06 Nov 2024 16:28:01 +0000
ROA not before: Wed 06 Nov 2024 16:28:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203493
IP address blocks: 194.226.42.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:02:4d:ec:da:f6:aa:71:ac:14:a3:f6:50:95:75:ec:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Nov 6 16:28:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07dd81d4fcaa62ac0e7e78341ead70e294cb7f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dc:5e:15:68:84:63:9c:3c:93:c8:36:8b:36:
dc:f0:9b:1b:e7:96:30:c2:37:af:16:9e:b7:b0:60:
49:17:c9:31:be:67:8f:93:0a:0c:fb:6d:eb:ce:ac:
83:69:3f:fa:d5:61:40:1d:4d:84:c2:6c:f6:2f:2a:
55:f0:61:24:d3:ee:a0:22:6f:3a:27:6b:ad:fa:d8:
ba:4c:99:19:0a:89:09:48:49:81:f3:f0:23:13:19:
ce:15:5f:f2:1a:12:8e:06:5e:db:a1:23:41:c0:e4:
46:3a:7d:b4:a4:a6:60:5e:ac:d6:ad:52:30:c7:57:
de:b9:00:aa:ce:40:77:d6:07:ce:aa:4e:73:32:00:
d6:50:63:9a:4e:5b:b3:21:16:7f:4d:bd:a0:7a:48:
83:65:4b:39:63:27:f8:d3:a3:20:0b:3d:f2:f8:58:
74:ba:58:aa:fe:d4:d4:60:76:a7:c8:8c:19:a3:64:
6a:7b:df:4d:63:78:a7:41:42:d5:cb:f0:15:fc:4a:
36:17:0a:d2:93:51:93:22:da:60:dc:67:7d:d2:d9:
3b:36:67:8c:19:78:b3:14:6b:29:01:a4:1d:aa:8a:
ec:cc:3d:b6:b2:b2:3c:0e:5a:29:98:bb:53:d4:59:
df:4a:f8:3a:f3:02:5d:21:90:f8:90:48:88:b9:2a:
b2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DD:81:D4:FC:AA:62:AC:0E:7E:78:34:1E:AD:70:E2:94:CB:7F:49
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/B92B1PyqYqwOfng0Hq1w4pTLf0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.226.42.0/24
Signature Algorithm: sha256WithRSAEncryption
03:27:7a:af:57:b6:13:22:45:c6:2d:09:f7:a9:a2:5f:67:ea:
bf:c0:cf:0d:7e:80:f0:e3:9c:24:6a:53:82:d9:76:b1:f0:c4:
99:eb:c8:bd:59:25:c3:b9:f3:c9:8c:18:cc:5b:4d:92:2b:09:
90:52:1c:8a:ee:41:ab:7a:92:1c:2f:64:c8:09:64:44:24:d8:
f2:74:3b:92:19:97:f0:14:ac:87:19:a3:1f:1b:9c:9f:59:d7:
23:ac:7d:ce:8a:82:db:02:88:14:df:1b:0a:b0:9b:77:d4:6e:
25:81:ee:78:06:b5:ff:0f:61:66:97:71:8b:57:92:bc:62:74:
34:46:18:c8:13:65:90:88:e3:16:b9:4e:40:85:22:86:c6:98:
86:ca:d2:26:f8:1f:31:14:e7:fc:8f:5c:88:e2:cb:47:11:ae:
46:53:03:2b:35:b2:6e:10:e5:02:6d:23:2a:4a:20:09:b6:6f:
06:74:16:22:99:d5:ef:eb:ab:3f:73:a9:aa:72:25:6b:1f:96:
af:ef:08:ee:ac:a1:08:5e:63:2f:99:79:11:ab:e5:bd:4f:be:
3f:c7:f6:e0:70:63:f7:f0:94:44:58:8e:95:f4:54:bf:ff:c6:
73:1b:b3:2d:52:ac:21:e3:7b:4e:a6:fc:9f:5e:e0:c4:f0:1b:
48:8e:29:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:58:53 2025 by rpki-client