Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/sFBBsVTJ0wKU3wqQ3RdEonpAFsQ.roa
File: sFBBsVTJ0wKU3wqQ3RdEonpAFsQ.roa (raw, json)
Hash identifier: oXLY9YVbQ51sltpcenBm9dkZe73Ldv3pRi/W5K4xXYQ=
Subject key identifier: B0:50:41:B1:54:C9:D3:02:94:DF:0A:90:DD:17:44:A2:7A:40:16:C4
Certificate issuer: /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Certificate serial: 018E639D1E8FB962C486819EC365FED2D94F
Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/sFBBsVTJ0wKU3wqQ3RdEonpAFsQ.roa
Signing time: Fri 22 Mar 2024 00:43:45 +0000
ROA not before: Fri 22 Mar 2024 00:43:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 217.119.96.0/24 maxlen: 24
217.119.98.0/24 maxlen: 24
217.119.104.0/24 maxlen: 24
217.119.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:63:9d:1e:8f:b9:62:c4:86:81:9e:c3:65:fe:d2:d9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Validity
Not Before: Mar 22 00:43:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b05041b154c9d30294df0a90dd1744a27a4016c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2e:34:4d:3f:97:1c:08:b2:e3:bc:6c:b2:b3:
0a:e7:6d:db:7a:ed:d2:bd:5f:2b:e4:15:53:7f:c1:
9d:4a:e3:74:ad:a3:06:59:b4:4c:a9:b2:38:91:88:
c6:19:dc:0f:8d:ed:b2:7e:37:33:ce:7e:78:f1:2b:
7f:29:f1:b6:2c:48:60:67:04:33:72:b3:91:eb:6a:
d2:9c:ee:2c:b7:38:bc:09:c9:8e:d0:87:5a:99:5b:
ac:08:2a:f5:2e:bb:be:55:72:c0:93:73:75:7a:3a:
74:ca:6b:6c:e6:17:03:02:7e:d2:2b:8d:8a:65:5f:
5d:ab:8e:0e:dd:0d:f5:d1:55:fd:f1:78:3d:1e:8b:
e0:73:69:fc:3f:d5:b3:6f:30:1b:12:c0:41:44:19:
86:38:ec:07:0a:d1:9c:fd:96:31:24:5e:e5:ad:9a:
49:f5:5d:e1:bf:f2:a1:ad:b9:b0:f5:00:ab:2e:d6:
c5:ef:fe:f4:e9:4c:d4:e5:d9:f7:ff:c4:53:bc:c0:
e5:2a:f3:dd:9d:77:dd:4a:77:c9:bf:5b:3e:8a:e8:
1a:b0:dd:76:ea:76:dc:cc:b2:4e:f8:b4:c9:e7:26:
6e:38:06:4b:2f:8d:8c:18:2e:11:ab:97:57:c1:d3:
93:69:b1:5a:56:92:eb:7e:e3:4e:e0:fb:39:59:ec:
8b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:50:41:B1:54:C9:D3:02:94:DF:0A:90:DD:17:44:A2:7A:40:16:C4
X509v3 Authority Key Identifier:
keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/sFBBsVTJ0wKU3wqQ3RdEonpAFsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.96.0/24
217.119.98.0/24
217.119.104.0/23
Signature Algorithm: sha256WithRSAEncryption
32:52:c6:af:5a:d2:f6:87:10:54:29:a4:e5:b2:01:fb:08:47:
3b:82:9c:9d:92:8d:74:30:63:d4:96:ec:c2:65:41:d3:f5:8c:
cf:c7:b6:67:b4:f5:db:5c:bb:69:68:f5:52:5e:40:48:a1:cd:
ef:ec:da:7c:2b:7b:a8:d0:4f:09:c4:07:89:aa:4a:8c:3c:a5:
1e:5d:e7:64:97:0c:9b:49:83:d2:a6:7e:1f:17:13:86:1a:f0:
3e:c4:39:92:c9:20:20:59:8b:c9:c1:cc:ea:07:f4:3c:d9:43:
f2:6b:07:b0:8a:3d:24:05:03:0c:b3:46:8d:0e:2d:4d:87:9c:
0c:08:6b:57:a1:96:2a:39:52:f9:ad:7b:0c:a0:2f:6b:7a:e3:
67:ef:42:9a:54:c4:3d:b0:fb:13:e4:7d:44:90:a0:a2:09:2b:
d0:c7:8e:30:3e:ab:a7:75:ee:81:42:52:39:d4:25:21:de:68:
1c:f8:24:1c:94:74:84:d6:23:96:1e:54:72:da:7a:32:3f:db:
13:f5:52:3e:ce:e9:d5:61:ff:e6:d2:c5:cd:77:27:5b:f1:5e:
8b:10:4e:70:24:5b:9b:3f:61:93:18:3c:06:98:4a:55:cf:a6:
61:c5:e5:e8:a3:00:8b:a2:1a:db:d4:da:e8:c2:03:33:5c:44:
3e:ad:e6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:12 2025 by rpki-client