Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/upvxU_RWiJVMOVDp9ihCUrybikM.roa
File: upvxU_RWiJVMOVDp9ihCUrybikM.roa (raw, json)
Hash identifier: uyIyfw0XxFJdcfBgnO9Mw/fiG09exrCBM5i2F0olUDc=
Subject key identifier: BA:9B:F1:53:F4:56:88:95:4C:39:50:E9:F6:28:42:52:BC:9B:8A:43
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 0190E68FD6B6CC2F9629F5334A94496E3873
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/upvxU_RWiJVMOVDp9ihCUrybikM.roa
Signing time: Wed 24 Jul 2024 21:05:04 +0000
ROA not before: Wed 24 Jul 2024 21:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198981
IP address blocks: 92.42.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e6:8f:d6:b6:cc:2f:96:29:f5:33:4a:94:49:6e:38:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Jul 24 21:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba9bf153f45688954c3950e9f6284252bc9b8a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6f:03:60:90:96:03:8e:40:d9:9b:52:3f:6f:
3e:05:31:3d:71:55:f3:c8:0a:af:40:a9:1d:bb:3a:
a6:fb:dc:e1:db:22:69:c6:91:fb:b9:ab:9d:72:78:
86:42:1c:46:32:e3:f5:c3:95:6c:e9:25:31:e4:c9:
97:5e:a5:06:13:75:44:4a:49:87:af:86:86:52:fe:
c2:e4:b3:73:40:8f:a1:d7:f5:4e:95:f4:2c:1f:06:
48:aa:c8:4f:b1:db:90:50:3d:d1:5c:07:77:59:94:
ea:e3:63:6f:7e:ba:e7:af:0a:ec:e2:d8:c9:ae:66:
c6:71:03:7b:8f:5d:3b:8b:d5:7a:38:19:29:aa:8e:
51:80:7d:91:bf:99:1b:ac:96:02:e4:78:db:4c:68:
00:7d:d9:a7:25:37:97:45:a1:79:63:93:96:50:da:
51:b3:d7:4f:82:f9:8d:82:b1:1a:1d:48:e1:97:be:
54:18:b9:7d:da:c9:6b:a2:61:4c:80:56:ab:29:b8:
f9:19:d6:3c:ff:a8:9f:87:3b:5c:f1:0b:5b:eb:91:
aa:fb:4e:55:ce:8f:1e:b6:48:b9:9d:fd:9f:31:81:
03:b3:d0:f7:4f:fc:4b:60:6f:43:c0:b1:59:1b:fd:
62:36:22:b0:e9:58:a9:55:39:6a:de:9b:79:67:69:
9c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9B:F1:53:F4:56:88:95:4C:39:50:E9:F6:28:42:52:BC:9B:8A:43
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/upvxU_RWiJVMOVDp9ihCUrybikM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.102.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:b8:42:e3:df:9f:4c:91:00:28:41:70:ed:f9:f2:a8:4f:b3:
89:4c:57:b5:c0:88:63:af:19:f1:fe:53:b1:f9:9f:47:6a:c5:
77:f3:07:8d:9d:23:79:79:59:5d:b1:b7:97:4e:29:ce:cf:9b:
a5:9b:7d:34:a2:63:d4:19:7a:3f:97:6b:b1:8c:32:5e:86:c9:
10:58:5f:89:fe:d4:ac:f8:6a:5c:4f:a9:46:d2:84:46:42:40:
f6:76:79:4d:c4:13:99:8a:96:97:43:11:8d:fb:1a:e2:e8:82:
53:c0:6d:22:ab:a3:11:bb:f5:6e:4f:5f:ae:40:e8:ee:ec:42:
84:be:df:ab:19:59:e1:94:91:a4:98:c7:80:c4:29:ef:17:42:
33:00:38:52:30:a9:fb:33:e3:e8:2a:c7:3a:5f:d6:ab:85:dd:
31:3b:d8:28:24:f6:39:e0:b0:0d:2d:20:4f:ce:e0:ca:03:a4:
1e:36:8f:07:ac:3d:e8:96:36:df:d3:71:72:77:03:94:45:b3:
76:4d:17:f3:41:be:05:b3:bd:36:60:88:bd:b0:8d:19:07:43:
73:57:c9:d6:0a:14:f5:e5:4c:c2:fb:b9:77:82:f0:6f:2a:bf:
14:6c:ef:5b:90:ec:33:7a:8d:03:73:de:8d:37:ae:5a:6e:e5:
a4:93:54:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:47 2025 by rpki-client