Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/lKJuEtH1BEGgWTlMfD_Qg8HAP4o.roa
File: lKJuEtH1BEGgWTlMfD_Qg8HAP4o.roa (raw, json)
Hash identifier: 0BHzfRO4mFtwMflX472viWM9haGtJ4BUHYyVV3rmwo0=
Subject key identifier: 94:A2:6E:12:D1:F5:04:41:A0:59:39:4C:7C:3F:D0:83:C1:C0:3F:8A
Certificate issuer: /CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Certificate serial: 0191FF7785A958406ECE84BC0E026B6DD72A
Authority key identifier: F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/lKJuEtH1BEGgWTlMfD_Qg8HAP4o.roa
Signing time: Tue 17 Sep 2024 10:11:48 +0000
ROA not before: Tue 17 Sep 2024 10:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39217
IP address blocks: 185.98.74.0/24 maxlen: 24
185.98.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ff:77:85:a9:58:40:6e:ce:84:bc:0e:02:6b:6d:d7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Validity
Not Before: Sep 17 10:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94a26e12d1f50441a059394c7c3fd083c1c03f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:59:f6:ee:16:e4:f8:dd:71:d2:a2:0a:31:93:
60:c9:6b:69:c6:ed:7e:73:50:0c:03:fb:0b:4c:1d:
0d:85:00:bb:f5:4f:dd:f3:d3:8f:1a:4a:19:20:6f:
e6:42:9b:3f:89:69:b6:16:11:ae:09:64:2c:a1:8a:
f3:4b:44:fb:0d:7b:b8:d8:fb:fc:5c:4d:a4:60:c9:
1b:0a:93:01:c8:86:3d:20:f5:c1:e1:ea:fc:47:88:
a2:5a:4a:86:6b:50:81:8f:a8:bf:1d:a3:af:6f:71:
49:ca:b1:1e:92:d7:0c:a5:d8:10:4c:cf:8e:b5:9e:
23:69:77:29:95:57:ca:4f:30:65:7c:6c:0b:4e:81:
08:7a:c1:bd:ac:49:7f:7d:66:c3:1f:10:da:20:60:
fd:bf:95:21:4e:9f:7c:35:71:67:60:a8:22:8a:0b:
42:25:1c:de:67:10:28:48:bd:3b:69:8e:e1:29:42:
10:59:54:5f:c8:8c:c4:75:06:c3:85:64:34:93:3d:
10:2d:29:10:9b:3f:27:87:06:a8:05:78:3b:d2:38:
77:38:37:5f:db:ea:5f:dd:b0:f0:ed:b8:1b:b5:20:
c0:98:79:24:d3:8b:dd:d2:f1:db:52:51:a7:41:7f:
e5:5d:8e:a0:a2:22:4a:a0:23:9e:81:83:ef:68:5d:
fa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A2:6E:12:D1:F5:04:41:A0:59:39:4C:7C:3F:D0:83:C1:C0:3F:8A
X509v3 Authority Key Identifier:
keyid:F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/lKJuEtH1BEGgWTlMfD_Qg8HAP4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.74.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:e1:ef:e7:e0:ab:15:09:4c:97:04:04:55:5a:57:e6:ee:f1:
f1:df:3b:98:b8:57:c2:39:46:a8:48:a0:b1:61:d7:71:44:20:
d8:2b:6e:25:58:7a:a4:43:b8:79:ae:a6:d5:d3:f8:b2:ed:28:
fe:b7:5d:ed:c5:da:c3:1e:c2:6e:31:b6:e7:fd:22:ba:8e:34:
19:cb:44:e8:e1:6d:f8:5b:db:c4:b6:20:0c:6d:e6:65:1a:7b:
ae:64:1d:85:d7:34:33:d7:35:a4:8e:ce:72:91:b7:07:8c:5a:
9a:af:93:0b:7f:3b:59:01:09:f1:b3:7a:cc:6c:b6:31:4e:ab:
82:a4:8a:fe:f4:1f:ec:e1:b8:2a:00:1e:16:fe:69:7c:b9:da:
3c:40:87:be:1b:3b:22:39:d2:6b:b6:4a:29:94:47:7e:86:77:
46:26:16:9c:af:69:39:6e:f5:01:4a:7b:46:1e:3c:b5:12:93:
03:53:80:62:f7:fb:2a:21:f9:2d:23:3a:07:69:43:75:25:98:
9f:5e:e5:c1:84:04:4b:70:20:d5:ba:ce:e5:37:bd:dd:e1:e0:
c0:3d:13:38:2f:ea:b9:07:39:5c:33:0b:9f:73:bf:2f:2b:79:
51:dc:dc:e9:8d:de:16:f6:c6:61:37:c1:31:6d:9f:6f:96:b8:
05:cf:72:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:39 2025 by rpki-client