Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/X7uupdxUiGMOF725CcHOImVQM78.roa
File: X7uupdxUiGMOF725CcHOImVQM78.roa (raw, json)
Hash identifier: H5Yc1Yo3xOKH/VY7B/uFOhsTp2GIG87B6TDfyJUNI7U=
Subject key identifier: 5F:BB:AE:A5:DC:54:88:63:0E:17:BD:B9:09:C1:CE:22:65:50:33:BF
Certificate issuer: /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial: 018CC56E434DAC965CA0787D5A4373862363
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/X7uupdxUiGMOF725CcHOImVQM78.roa
Signing time: Mon 01 Jan 2024 14:29:46 +0000
ROA not before: Mon 01 Jan 2024 14:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207990
IP address blocks: 92.118.69.0/24 maxlen: 24
92.118.70.0/24 maxlen: 24
92.118.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:48:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:43:4d:ac:96:5c:a0:78:7d:5a:43:73:86:23:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Validity
Not Before: Jan 1 14:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fbbaea5dc5488630e17bdb909c1ce22655033bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:0e:d1:ba:47:e9:fb:5e:2e:27:34:2b:f3:
21:eb:a6:c9:c1:98:6c:db:6f:87:33:7a:ff:11:65:
45:4a:32:d5:51:a8:cc:dc:04:95:b4:04:1a:40:97:
cd:9a:2c:4a:60:ca:7e:eb:3d:cd:2d:ff:40:b4:94:
48:18:ab:a7:18:94:1e:5a:76:ab:63:a2:9d:8d:32:
c9:3c:c1:00:89:fa:6f:3f:20:a2:89:d1:36:a8:e9:
24:6c:69:e4:70:18:24:f0:be:57:61:06:25:df:92:
41:ee:6d:ad:a4:41:bf:8e:5f:38:eb:8d:ad:28:bd:
f7:cc:5e:ca:44:ae:a2:97:12:51:db:a7:8d:b2:48:
74:ba:6d:8b:10:56:19:ca:d9:75:29:0e:40:6a:0e:
0a:68:6a:c8:6b:a7:d5:9f:4c:0d:9e:7a:80:ca:ab:
20:b1:2f:72:95:e7:a0:0e:61:ba:0e:4d:d6:21:7e:
21:84:d0:20:c8:4b:2f:3f:8e:b0:90:17:ae:6d:e6:
e3:e4:75:d2:99:63:7d:6c:f9:d0:3c:5a:66:a9:de:
27:b7:b9:b5:84:15:81:ae:e7:70:d0:4d:31:33:d9:
0f:a1:29:e8:c1:29:48:db:d8:7d:e0:5c:a0:41:1b:
87:0c:48:e8:67:02:e5:9b:b4:1c:fc:90:a0:1e:21:
c7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BB:AE:A5:DC:54:88:63:0E:17:BD:B9:09:C1:CE:22:65:50:33:BF
X509v3 Authority Key Identifier:
keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/X7uupdxUiGMOF725CcHOImVQM78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.69.0-92.118.71.255
Signature Algorithm: sha256WithRSAEncryption
20:4a:35:ef:eb:0d:69:68:89:67:75:80:f9:2f:25:3f:f1:3c:
a8:58:4c:71:47:15:58:3c:a1:2c:9d:56:51:96:8a:6c:26:2f:
d1:5a:69:ba:9f:13:7c:8c:36:0e:02:b0:77:f5:46:7c:cc:03:
5e:0a:29:3b:6c:d5:07:5a:e9:4d:b3:73:87:02:65:d5:2e:c0:
a9:f3:af:ee:fa:61:ab:4e:34:f8:30:4a:28:d1:a5:c0:37:df:
6e:e5:ef:9c:48:7d:b1:55:e6:18:5d:39:39:d3:55:5e:7c:7c:
f7:84:7b:e4:8b:96:93:0a:23:49:67:26:bd:85:db:21:95:4c:
cd:9e:c9:d5:56:19:01:b5:3d:8e:26:5a:20:1e:b5:f7:12:88:
23:70:c0:94:1d:97:4c:ff:0d:f6:3c:d5:8d:9d:8a:2a:3b:fe:
16:0f:0f:00:2b:2b:64:9b:00:8b:a9:c6:64:ed:bb:a3:d4:da:
cc:d5:ff:91:c3:c5:9d:eb:7b:56:6a:e6:0a:92:94:77:3e:7f:
ed:c0:72:63:c5:f7:3d:c3:68:1d:a7:4d:be:b7:a5:f6:38:ad:
b5:37:c8:a4:70:99:f6:49:f2:0f:b7:d6:21:88:4b:9d:e5:07:
17:e1:14:fc:be:77:06:51:5f:80:8e:50:37:d2:36:0f:16:49:
68:04:a8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:01 2025 by rpki-client