Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/usBxO9KrO24S7_hvYno-FTciQb0.roa
File: usBxO9KrO24S7_hvYno-FTciQb0.roa (raw, json)
Hash identifier: mgA8fRTjmNOG3u4HtrljljlETNpykzFoHsImm1RHgqg=
Subject key identifier: BA:C0:71:3B:D2:AB:3B:6E:12:EF:F8:6F:62:7A:3E:15:37:22:41:BD
Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial: 019172AD8F04F36EFDA8B0D0CA94D9A70700
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/usBxO9KrO24S7_hvYno-FTciQb0.roa
Signing time: Wed 21 Aug 2024 02:04:22 +0000
ROA not before: Wed 21 Aug 2024 02:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48472
IP address blocks: 94.247.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Aug 2024 12:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:72:ad:8f:04:f3:6e:fd:a8:b0:d0:ca:94:d9:a7:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Validity
Not Before: Aug 21 02:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bac0713bd2ab3b6e12eff86f627a3e15372241bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:98:c7:76:c2:43:a7:bb:2c:7d:9a:b1:65:83:
92:ae:eb:dd:f2:f5:98:ef:eb:8b:10:73:46:b1:ff:
d5:b3:85:b3:44:85:77:46:a7:2c:87:7e:9b:31:88:
2c:c2:4c:c7:ba:fc:a5:de:ec:bb:53:7b:a5:62:f1:
ee:17:8c:86:a7:3e:63:09:05:30:68:c2:f1:84:a6:
d8:d6:ef:eb:28:b6:2e:a5:c1:3c:30:6a:5d:12:c4:
fe:27:ec:90:cc:d0:20:23:cc:72:ba:9b:da:2a:ca:
8d:5c:90:9d:e7:fe:0e:00:93:d3:2e:f1:d6:72:f8:
e7:cb:4f:e8:36:48:4a:c4:c0:cd:23:19:2f:e0:f4:
31:f4:c3:de:14:2d:e1:0c:b8:01:2b:38:03:58:5f:
f2:a0:79:b8:22:1c:e7:f2:96:07:78:33:07:88:0d:
35:a8:64:d6:ad:79:9f:58:6b:42:d2:4a:7a:30:19:
4c:37:c8:4a:d6:7a:fe:5a:b3:32:25:db:a2:dc:80:
30:7e:17:11:b2:61:b2:97:c9:c9:4f:c5:0f:d5:1c:
bb:6c:ce:37:1c:67:4b:3c:14:bf:de:7a:99:88:20:
8c:9b:f8:6b:fe:de:6a:4c:c0:ca:b5:b2:6d:e0:07:
bd:6c:51:a0:5d:d7:54:6f:f2:21:28:d3:7d:a6:d3:
f7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C0:71:3B:D2:AB:3B:6E:12:EF:F8:6F:62:7A:3E:15:37:22:41:BD
X509v3 Authority Key Identifier:
keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/usBxO9KrO24S7_hvYno-FTciQb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.104.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:0d:17:4c:ea:d8:fb:d4:11:e6:c7:57:81:8b:a7:29:b7:b1:
a7:c0:82:55:83:75:44:2a:ee:16:fe:26:4b:4f:05:50:8c:db:
4a:79:7e:79:6e:5b:a4:8d:94:39:e1:45:05:ff:cb:60:52:de:
f0:fd:58:5a:f8:1d:c2:4b:2f:4d:b8:bd:01:4e:04:bf:ec:4b:
7d:49:42:3c:b1:82:b3:7e:f7:aa:c3:3c:7f:9d:c4:c0:35:a0:
1e:30:28:00:7a:15:86:51:8a:1f:5b:f9:73:2a:19:be:34:c8:
dc:88:9e:35:02:ef:9a:3a:f8:ad:10:3c:67:a8:d6:88:0b:41:
e6:71:ad:4b:4d:5c:67:76:90:36:3e:8f:8f:9b:3b:cf:63:12:
cd:0a:19:29:a7:eb:ef:0a:19:d6:d6:1d:65:45:92:03:a9:27:
09:f5:80:79:7e:0d:58:ea:9f:cf:f9:67:98:58:f4:7d:18:11:
3a:da:22:8b:6a:e7:c4:10:f9:96:d1:8a:e8:5c:dd:44:7e:f5:
c2:aa:84:f9:1e:43:50:18:50:fa:49:fe:bd:c5:ce:63:1c:ee:
57:eb:71:7f:c6:58:e2:b1:0b:cf:b6:e9:9e:9a:ed:46:7c:20:
dd:6a:f6:40:6f:b6:03:6e:2d:41:6a:0b:03:ba:21:84:31:7e:
42:24:ed:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:43:49 2025 by rpki-client