Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/OdF1Od0oa-6JPe9KeED7MPyEoyw.roa
File: OdF1Od0oa-6JPe9KeED7MPyEoyw.roa (raw, json)
Hash identifier: dmFAO/u9NO7FdqQyJC4LpVsJpUp6x4pLeBVJ7UjOrkk=
Subject key identifier: 39:D1:75:39:DD:28:6B:EE:89:3D:EF:4A:78:40:FB:30:FC:84:A3:2C
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01942369DB29E92E4B9FBC2F957D6D5AB251
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/OdF1Od0oa-6JPe9KeED7MPyEoyw.roa
Signing time: Wed 01 Jan 2025 19:48:47 +0000
ROA not before: Wed 01 Jan 2025 19:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213808
IP address blocks: 92.119.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Jan 2025 16:57:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:db:29:e9:2e:4b:9f:bc:2f:95:7d:6d:5a:b2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 19:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39d17539dd286bee893def4a7840fb30fc84a32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f5:15:f1:76:91:56:78:aa:0f:3f:0f:39:dc:
eb:c1:48:6b:34:84:ba:d8:b9:b6:a5:f7:2f:92:cb:
ae:b1:35:3b:cb:9d:3d:ae:95:cd:8d:6c:2d:73:2d:
c1:4a:04:35:92:5f:03:7a:02:b5:5a:b4:a2:19:2b:
f3:ac:f4:2e:55:45:b3:f4:6c:c6:1a:5f:cd:3a:1e:
47:dc:f3:21:e4:9b:cc:42:6d:cb:ee:58:13:03:15:
8d:69:6c:c8:43:be:22:c7:1b:c7:a9:33:49:97:bd:
c4:64:a2:9b:6f:be:95:f2:ac:19:64:ac:46:96:17:
17:68:66:ba:ed:30:8d:f1:89:cc:e5:db:35:25:fa:
b9:e8:33:cc:8b:0a:a0:37:a5:05:d3:be:3c:42:a3:
c8:74:b7:ce:da:10:11:75:c6:ae:04:d0:21:3a:6c:
a9:4e:17:76:03:dc:b2:51:8b:a9:99:c9:75:70:e2:
9c:9d:cf:2c:b8:ac:17:ca:19:05:3a:77:7c:ec:d7:
6f:27:8f:3e:fd:18:90:02:21:5d:56:a8:98:c0:36:
23:14:96:2a:65:9f:27:bb:14:db:10:37:9e:87:bd:
14:b7:26:d5:87:72:53:24:73:a2:18:18:47:9f:64:
85:a0:d9:e5:f5:50:e8:b6:c0:5b:5a:ee:a0:5c:02:
26:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D1:75:39:DD:28:6B:EE:89:3D:EF:4A:78:40:FB:30:FC:84:A3:2C
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/OdF1Od0oa-6JPe9KeED7MPyEoyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.228.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:be:2c:9e:e0:dd:4d:cc:3a:c9:91:cf:ac:32:01:91:75:fa:
b6:2c:ae:93:3a:c8:5d:67:59:2d:50:22:c4:bc:df:37:11:d7:
63:ba:fb:f2:8a:ac:c9:cc:2a:86:1a:b5:39:82:2c:ac:18:77:
76:23:6b:65:d8:44:e9:ab:c9:0f:9e:27:78:3f:43:f6:25:4f:
66:fe:a5:df:81:36:75:12:e6:7c:a2:9e:44:fd:1a:13:01:dd:
b4:e6:da:5b:c7:52:87:3e:87:01:f7:70:57:52:95:ec:83:6f:
53:c9:4f:05:53:79:a7:65:2c:56:26:64:ed:b7:de:3e:6d:0a:
19:0a:f7:a6:00:d4:99:5e:d3:16:58:8e:07:3a:e6:3e:e3:d5:
c7:1e:83:b4:3a:a7:c6:85:43:62:74:33:1d:d1:84:23:e6:8f:
82:c1:cc:fd:60:a8:8c:63:41:0e:2d:fe:48:9c:2e:8f:3e:c7:
38:21:1f:c5:e6:4b:56:55:aa:9e:5e:64:b6:d2:24:0a:13:74:
a4:02:63:d3:17:32:a6:20:b7:e9:19:c4:02:69:a2:e7:a5:04:
09:03:64:c7:a9:40:22:e7:7b:84:2c:ee:09:07:d5:c5:a3:5d:
28:4c:0f:be:6b:69:76:10:41:ce:39:19:df:41:68:c2:cd:47:
fb:cb:9d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:04 2025 by rpki-client