Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-ToWzUL9DEFn8Fj760K8R0RxScE.roa
File: 1-ToWzUL9DEFn8Fj760K8R0RxScE.roa (raw, json)
Hash identifier: wkMHr9VjenaFmDGsX6mKW47YupXAVPzvcoYRoM8PT6M=
Subject key identifier: F9:3A:16:CD:42:FD:0C:41:67:F0:58:FB:EB:42:BC:47:44:71:49:C1
Certificate issuer: /CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
Certificate serial: 018CC348B08994347C4EF918B6568677A3CB
Authority key identifier: FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-ToWzUL9DEFn8Fj760K8R0RxScE.roa
Signing time: Mon 01 Jan 2024 04:29:29 +0000
ROA not before: Mon 01 Jan 2024 04:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58118
IP address blocks: 91.239.8.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:b0:89:94:34:7c:4e:f9:18:b6:56:86:77:a3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
Validity
Not Before: Jan 1 04:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f93a16cd42fd0c4167f058fbeb42bc47447149c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:39:ab:de:84:65:69:c9:d5:32:95:d8:d1:9e:
48:95:3b:bb:39:35:11:b0:21:af:0b:6a:3d:91:8f:
4e:b6:13:ca:43:6e:2e:c4:98:ef:63:d7:44:23:09:
bf:f3:bf:4c:b7:cc:6e:7a:6d:08:4e:1d:1a:be:0a:
59:8e:fb:91:2a:de:c0:95:ca:85:cc:28:b8:fe:e0:
1b:ce:2e:4c:f0:de:dc:c3:b7:2f:37:04:3d:50:39:
1b:d9:e2:d4:df:22:b0:37:3b:48:97:fc:18:51:f7:
9d:a2:58:f5:4d:0e:cb:6f:83:7a:58:9d:9b:65:e8:
29:69:08:33:b5:a2:ef:51:25:ce:23:3b:9d:27:ad:
21:1c:71:a3:fb:59:54:d0:24:5c:ce:92:e9:8a:00:
8d:71:0f:04:eb:97:cc:8d:53:e1:9c:d8:64:95:7e:
dd:67:be:f5:67:ad:d3:d9:7e:d7:e0:f1:11:b6:24:
45:ef:f1:2b:7c:6b:43:f4:fb:42:f1:e0:0a:86:75:
27:9c:1c:83:a4:00:95:2d:94:78:aa:e5:3b:c2:99:
04:ef:19:f7:3f:21:8d:72:13:62:41:1b:10:ca:2c:
bd:26:90:92:ee:63:97:64:ac:85:82:ad:08:cd:b5:
e8:29:a7:43:18:2a:89:7d:cc:6a:4d:30:04:ee:cc:
43:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3A:16:CD:42:FD:0C:41:67:F0:58:FB:EB:42:BC:47:44:71:49:C1
X509v3 Authority Key Identifier:
keyid:FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-ToWzUL9DEFn8Fj760K8R0RxScE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.8.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:d4:c7:5b:b9:1e:cf:a9:59:bf:e9:ad:c2:2a:c6:3c:c1:07:
1d:8c:5a:32:77:82:e6:20:48:df:5b:c0:0f:c6:02:6a:68:46:
f6:41:5a:64:8a:ee:87:28:aa:bf:6a:37:b4:49:72:7a:cb:99:
e1:86:b5:fe:85:3f:f7:04:fd:61:3e:ef:95:43:80:0a:38:bb:
ab:29:bc:7a:4f:bc:fe:59:62:6e:7f:6a:8e:7a:37:dd:a2:ae:
71:93:b4:55:aa:a3:c3:a5:a5:53:21:39:da:37:64:c9:7c:91:
41:4e:5c:dc:38:c4:b3:69:cc:f3:8b:95:53:45:68:c2:7c:79:
46:f0:a9:d4:99:ae:fd:da:d2:7c:89:5e:ac:3e:f4:b8:bd:16:
c9:1c:13:2c:0b:76:aa:f7:11:89:bb:de:0f:80:b2:ca:dc:5b:
3e:d5:cf:29:95:61:1f:c6:ba:27:13:32:ec:71:42:96:33:81:
f6:0c:52:56:3a:0d:21:df:4e:8b:80:22:b5:68:c6:1b:63:ae:
d9:d5:cb:98:23:98:f8:e9:bd:72:22:51:9d:8e:a5:12:5a:92:
7f:f2:82:22:0a:8c:b2:63:f9:28:5b:97:e8:76:e9:73:fe:df:
6c:3a:37:07:11:96:9f:62:f3:34:bd:60:9a:14:77:01:ce:bd:
7c:b4:7f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:52 2025 by rpki-client