Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/ogP90on1YdDBFZq_ji-xnfe8GTU.roa
File: ogP90on1YdDBFZq_ji-xnfe8GTU.roa (raw, json)
Hash identifier: fOnBRF1qdZs0pr6Atncj5t3yzaR6mbmzd8f2Y9J/gvg=
Subject key identifier: A2:03:FD:D2:89:F5:61:D0:C1:15:9A:BF:8E:2F:B1:9D:F7:BC:19:35
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 0193F94C43659EA692E7EDEA09FCC4D5C054
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/ogP90on1YdDBFZq_ji-xnfe8GTU.roa
Signing time: Tue 24 Dec 2024 15:32:24 +0000
ROA not before: Tue 24 Dec 2024 15:32:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3549
IP address blocks: 158.172.222.0/24 maxlen: 24
158.172.222.0/25 maxlen: 25
158.172.222.128/25 maxlen: 25
158.172.222.128/26 maxlen: 26
158.172.222.192/26 maxlen: 26
158.172.222.192/27 maxlen: 27
158.172.222.224/27 maxlen: 27
Validation: Failed, certificate revoked on Tue 24 Dec 2024 15:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f9:4c:43:65:9e:a6:92:e7:ed:ea:09:fc:c4:d5:c0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Dec 24 15:32:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a203fdd289f561d0c1159abf8e2fb19df7bc1935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4b:cc:2a:a4:5a:0c:09:06:8d:88:d1:83:83:
7d:44:06:9d:72:b2:c1:8d:0d:7a:1d:78:05:de:9b:
fe:ee:aa:09:e3:bc:7c:cc:66:40:65:98:46:56:ff:
b8:a3:02:64:46:72:f7:29:ef:76:a5:28:99:0b:12:
64:58:59:b0:9d:74:92:2e:6b:1f:a8:a8:2c:d0:bc:
60:85:d7:b4:3d:3a:cd:eb:19:d9:31:cb:69:de:51:
f9:ef:41:66:ee:09:dd:74:1a:d8:57:3d:2d:42:eb:
ca:cd:5c:d9:9c:ff:d3:56:9e:8a:45:b8:80:2d:0a:
80:0d:74:71:66:d0:c2:b7:c6:88:3c:34:1e:49:3c:
ad:e6:4f:4d:54:a0:ed:fb:45:a9:6c:66:0e:45:50:
1b:da:9c:6f:c5:5e:3c:71:86:fe:5d:03:63:d8:17:
a3:10:b0:21:83:61:75:4e:76:be:f1:22:9b:8f:89:
d9:32:d9:cf:03:7a:7d:91:41:5d:a0:d1:1e:87:9c:
ec:03:83:28:82:f2:ca:fb:45:71:07:78:ce:dc:20:
a4:10:70:e9:db:06:6e:1a:18:34:65:e2:15:02:8d:
d8:8a:78:5c:ca:d3:f6:36:37:cc:89:8b:9e:ca:f7:
80:db:b3:7f:ba:a7:71:87:a4:5f:6e:b7:27:36:65:
3e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:03:FD:D2:89:F5:61:D0:C1:15:9A:BF:8E:2F:B1:9D:F7:BC:19:35
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/ogP90on1YdDBFZq_ji-xnfe8GTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.172.222.0/24
Signature Algorithm: sha256WithRSAEncryption
97:ce:0a:bd:f3:8d:ff:9c:74:bd:d0:c5:ac:6d:a7:89:e1:3d:
55:a9:92:dd:5f:a0:49:b9:b2:a5:8d:f3:6b:91:27:db:c2:d9:
4b:de:4e:3c:1f:0c:b6:a0:76:1f:65:74:d1:41:6d:d6:ae:40:
0c:39:2a:eb:22:d8:cf:bc:24:80:6b:ed:dd:55:98:4f:a8:d7:
d8:0e:20:be:68:ba:a7:d8:d3:22:c7:d7:70:e3:87:5a:de:a7:
04:c6:d5:39:40:53:f6:19:0c:b3:a6:2f:b0:fd:54:13:32:df:
a7:21:af:0b:c5:35:cc:58:05:d1:4f:e9:e2:eb:c9:98:e9:c2:
9e:7a:c1:cc:43:cc:97:2c:a3:6a:64:37:a6:e9:1a:b2:3c:af:
d0:12:66:5c:84:98:8c:2c:ad:a5:64:eb:3f:53:62:74:db:d2:
48:86:6f:83:99:b8:fa:f1:6a:84:4b:98:2b:7f:10:2f:24:ae:
75:8e:98:a1:b7:db:d8:40:34:05:02:bd:be:30:6c:3e:16:80:
77:13:41:a3:39:b0:76:8c:67:c0:5c:6d:09:1c:28:2c:93:46:
17:b7:cc:37:8f:59:9f:88:35:f5:98:ce:1e:d6:d7:1d:af:fc:
8d:87:1d:99:aa:7b:f9:5c:cc:e8:73:58:51:bf:33:52:9e:a0:
e6:99:db:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:38 2025 by rpki-client