Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/qNjaMY6B3mRhNBlNa-GNB42XExw.roa
File: qNjaMY6B3mRhNBlNa-GNB42XExw.roa (raw, json)
Hash identifier: t8M19bTIO9S9+2Fuxik8eHNWA0S7m+lfwzKw4xG+tgg=
Subject key identifier: A8:D8:DA:31:8E:81:DE:64:61:34:19:4D:6B:E1:8D:07:8D:97:13:1C
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 019403D0BCFC1FCA3AF4021FDF77BB5C16C2
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/qNjaMY6B3mRhNBlNa-GNB42XExw.roa
Signing time: Thu 26 Dec 2024 16:33:18 +0000
ROA not before: Thu 26 Dec 2024 16:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52468
IP address blocks: 158.172.220.0/23 maxlen: 23
158.172.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:03:d0:bc:fc:1f:ca:3a:f4:02:1f:df:77:bb:5c:16:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Dec 26 16:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8d8da318e81de646134194d6be18d078d97131c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:9a:ee:7e:57:4f:37:be:0d:8f:f0:25:b6:
7d:27:a4:7f:20:1b:dd:7d:f9:04:39:ef:ca:0b:0b:
29:28:d8:34:8a:3c:76:80:32:f0:b2:8a:ee:1e:6b:
cc:e2:40:80:58:91:de:c7:9e:2b:52:da:a4:a8:54:
a4:0c:7a:3f:17:8a:58:cc:ca:23:60:5c:6f:cb:2f:
12:d1:35:96:8f:bb:7b:db:18:5b:06:97:37:e6:6a:
32:4d:b6:ea:8f:2d:36:87:a7:c5:cb:16:aa:bc:d6:
fb:f9:39:59:3d:fd:11:7f:c8:37:9c:78:31:e5:b8:
0b:b8:be:b2:92:9a:2b:dd:81:25:45:61:a9:26:c0:
48:f0:01:2d:32:28:36:7e:a1:c8:6c:34:8d:53:c2:
f5:43:7d:12:5e:e8:a6:91:1b:25:cd:41:70:02:85:
b6:4b:ff:e3:43:32:63:1f:b5:5b:07:7e:66:19:79:
fc:ec:42:ab:ca:c5:c6:3d:e4:6f:da:53:21:16:70:
bd:e7:1b:79:18:27:6b:bc:c8:7b:c5:8b:be:ce:96:
7a:23:2a:f3:9e:5b:50:42:2b:4c:a6:21:7d:76:bb:
12:fb:2e:38:e9:3b:8e:23:a9:7c:9f:5f:ad:79:fc:
32:3b:f9:c2:0f:b0:db:3e:f9:0c:90:7d:41:dc:dc:
50:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D8:DA:31:8E:81:DE:64:61:34:19:4D:6B:E1:8D:07:8D:97:13:1C
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/qNjaMY6B3mRhNBlNa-GNB42XExw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.172.220.0-158.172.222.255
Signature Algorithm: sha256WithRSAEncryption
a6:fe:04:b9:44:ee:96:c7:6a:51:d5:fe:9e:11:98:5d:bb:03:
e0:52:92:c4:f6:b2:ce:9e:8e:72:95:aa:59:b6:a5:6b:d9:1b:
04:e0:7c:c3:f5:5f:c0:d7:c0:6f:39:3d:41:51:d3:81:0c:aa:
89:c6:1d:94:ac:fd:0f:2c:0e:c3:03:3a:b7:fd:75:aa:96:24:
42:16:63:c6:54:6c:8c:88:47:d7:9a:ff:bf:1f:d3:77:4c:a5:
11:2b:a6:57:50:0a:f5:2e:86:f2:19:51:ec:bc:8f:92:7d:8e:
2c:c1:17:c9:34:81:d7:af:e5:8d:a1:5f:29:14:60:1c:96:69:
73:b8:7e:de:97:53:a1:8a:53:c4:5d:f4:11:05:a8:a4:b3:69:
6b:f9:0f:52:c6:9a:dd:dd:42:b4:f9:32:4b:2a:43:d3:f6:01:
5d:be:f1:f3:be:8e:cb:62:cd:77:39:dc:cb:3f:f7:0a:48:2e:
d9:d4:73:de:6f:17:f2:2f:0e:e7:d8:ef:53:1f:5f:66:09:b6:
b9:b4:ab:55:f6:ed:bb:09:49:b4:8e:47:64:ea:4f:a2:8b:a9:
43:f1:90:a4:30:21:b6:1c:d4:24:3f:c5:67:11:f6:f8:29:29:
11:f7:1a:b6:36:67:ba:dd:68:85:09:46:cd:ea:e3:d0:3a:1d:
78:b9:f8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:18 2025 by rpki-client