Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/_BdUbsWdbP6f2Tly6Z1CTenx6pc.roa
File: _BdUbsWdbP6f2Tly6Z1CTenx6pc.roa (raw, json)
Hash identifier: 6n3nj1F7SQb4s1MtHd+Ew2dMGVh8vL2tjD+4xuigL00=
Subject key identifier: FC:17:54:6E:C5:9D:6C:FE:9F:D9:39:72:E9:9D:42:4D:E9:F1:EA:97
Certificate issuer: /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial: 0193E01F8B6956E68566B63D66AE95ADAB52
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/_BdUbsWdbP6f2Tly6Z1CTenx6pc.roa
Signing time: Thu 19 Dec 2024 18:13:03 +0000
ROA not before: Thu 19 Dec 2024 18:13:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7155
IP address blocks: 92.51.216.0/22 maxlen: 24
92.51.220.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e0:1f:8b:69:56:e6:85:66:b6:3d:66:ae:95:ad:ab:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
Validity
Not Before: Dec 19 18:13:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc17546ec59d6cfe9fd93972e99d424de9f1ea97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bc:d3:e1:68:61:c7:5a:3c:36:91:77:e7:41:
65:db:4b:24:1f:af:f2:4e:f7:eb:f6:81:df:69:d4:
b7:cf:3c:47:6c:cf:53:86:19:b8:20:bb:f0:30:5c:
a4:d3:ce:9a:36:33:aa:20:f9:dd:a3:38:d6:76:4a:
95:cf:1a:42:cf:51:23:f2:ce:26:d3:21:46:3b:2e:
b7:c9:17:6e:d0:6b:d5:69:a8:38:d7:57:d4:14:d0:
c6:9a:3a:50:b8:48:a5:7a:59:5b:05:57:16:48:67:
6a:30:ff:df:2d:39:f2:fc:91:ac:96:e6:70:90:24:
c1:92:e8:a4:0b:de:52:a6:05:24:48:39:2b:1b:cc:
1f:78:7c:81:9b:da:bf:41:74:08:c1:1d:c6:7f:68:
bb:59:18:e1:64:49:40:5d:e1:4c:6a:a6:8f:c5:ed:
c5:1c:4e:c2:3a:d2:d1:f7:fc:aa:ad:0d:16:85:f6:
c0:50:46:80:e8:fe:64:a6:d7:9c:08:f5:cf:d0:20:
8d:5b:ca:5f:8c:01:b1:dc:fd:c8:6e:85:6b:4e:70:
43:13:9f:04:a9:12:e5:95:2e:75:97:03:79:3c:ae:
ee:2d:08:d8:73:d7:6d:fa:37:02:30:9f:0f:81:4a:
55:3b:66:77:d1:6b:78:d1:a3:ab:ec:0d:c6:0a:f5:
cd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:17:54:6E:C5:9D:6C:FE:9F:D9:39:72:E9:9D:42:4D:E9:F1:EA:97
X509v3 Authority Key Identifier:
keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/_BdUbsWdbP6f2Tly6Z1CTenx6pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.216.0/21
Signature Algorithm: sha256WithRSAEncryption
2f:a1:17:18:cf:bc:d1:cc:e6:dc:89:75:9b:be:3d:0a:48:ac:
73:ab:2f:f9:89:18:7d:73:20:90:08:6d:0d:00:2e:ac:9d:1f:
ab:bc:1d:30:11:f3:88:5c:ee:63:f7:4a:57:1c:81:5e:1d:3c:
27:c0:c9:58:71:d6:cd:c4:50:ad:42:be:33:a5:7a:ae:f9:7d:
9d:53:12:ab:24:f2:fa:33:5c:ef:a5:b5:63:92:a3:77:98:a4:
86:bd:bb:47:40:8f:5a:41:01:26:3e:fc:12:d4:7e:d0:48:3b:
f0:8c:d7:f3:f7:6b:31:b2:b0:86:18:5f:58:0b:a1:52:19:d9:
f1:2a:5b:ff:ab:44:f6:6f:f1:2b:61:78:d2:11:38:5a:cb:64:
eb:24:3b:1a:62:79:fd:d7:96:4a:e1:05:03:5d:b0:f1:fd:8a:
88:e7:0f:96:c8:b4:0b:3c:15:c3:53:34:5d:5d:7a:13:9b:64:
25:bd:0b:36:1a:75:04:53:2c:27:68:9d:10:37:2a:8a:c4:fe:
5b:54:80:a3:a6:60:d4:3c:4c:db:b3:b8:a5:95:16:2a:2c:4e:
36:36:d9:70:26:0f:e5:13:22:cd:1a:6d:38:89:74:9c:1c:b9:
07:15:d9:ae:6b:ea:0b:9f:fa:13:9d:89:aa:ef:a7:ae:7f:b4:
c0:87:a4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:12:12 2025 by rpki-client