Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/94CGOZ5dIbGQx3lzfMYQoUZ2z9k.roa
File: 94CGOZ5dIbGQx3lzfMYQoUZ2z9k.roa (raw, json)
Hash identifier: v99wFl/XGNitu4xpdfoZwfDpUTeuSDHfvCLVjjYCVyc=
Subject key identifier: F7:80:86:39:9E:5D:21:B1:90:C7:79:73:7C:C6:10:A1:46:76:CF:D9
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 01932161FE03739ADABB56EF453D92C54594
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/94CGOZ5dIbGQx3lzfMYQoUZ2z9k.roa
Signing time: Tue 12 Nov 2024 17:18:10 +0000
ROA not before: Tue 12 Nov 2024 17:18:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 87.254.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:21:61:fe:03:73:9a:da:bb:56:ef:45:3d:92:c5:45:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Nov 12 17:18:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f78086399e5d21b190c779737cc610a14676cfd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ad:4a:59:58:aa:18:33:41:96:e7:95:e7:7a:
17:01:40:ab:99:84:ff:92:56:33:9e:8f:a7:8e:1f:
14:e0:5f:16:f2:90:5e:7c:8d:68:d8:6d:f0:92:0f:
2a:41:b9:e2:bf:06:80:e1:6f:3e:1d:73:b7:bb:0c:
46:f4:14:d2:b8:dc:69:1c:fe:b1:df:e6:5c:f0:12:
f9:8c:44:c9:ba:fd:0a:98:3c:97:09:dd:a6:ce:af:
a0:01:e4:1c:de:19:ea:e0:b6:31:a5:f9:f8:ae:c5:
d1:37:3c:04:0e:da:b4:54:ae:99:4b:4f:22:b2:3e:
df:ab:7a:ab:65:11:e4:9e:c6:1a:18:91:1f:c7:4d:
10:c0:06:d1:25:ef:bf:02:5e:39:77:bd:99:cf:de:
17:12:e1:bb:c6:b7:8e:f4:1a:eb:4d:73:f0:08:ba:
59:60:1e:8b:01:a1:2b:b0:ae:ed:58:25:9f:72:fd:
0c:7f:8c:3f:59:2a:e7:94:99:f8:4c:a1:50:13:8c:
38:34:f0:bc:51:3b:e1:10:5d:cd:42:43:0b:9c:75:
a0:48:7f:53:19:8e:bd:b1:67:0f:4c:5f:b1:53:74:
d7:e9:02:9e:3c:0f:50:d2:30:88:14:ac:a1:17:16:
e3:27:c5:1d:5e:f3:0e:60:cc:12:e2:83:28:00:2c:
cf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:80:86:39:9E:5D:21:B1:90:C7:79:73:7C:C6:10:A1:46:76:CF:D9
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/94CGOZ5dIbGQx3lzfMYQoUZ2z9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.29.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:18:45:a4:17:10:f1:a7:25:79:db:6f:b0:09:a7:39:dd:1f:
13:bb:30:db:a7:23:4b:47:cd:78:73:2e:19:1c:53:d7:46:42:
e2:4b:ef:da:f8:a8:e5:bf:15:f4:0c:6b:8c:3c:25:b4:ae:89:
ba:9b:d0:94:bc:30:3a:86:5e:64:bc:92:bc:d9:9f:c5:4e:5c:
33:72:df:98:5f:ca:6a:19:63:3d:9e:23:ed:d6:17:88:5e:78:
f3:c4:76:80:1f:98:94:8b:81:d9:72:1c:d0:51:57:23:69:4b:
0f:57:49:cb:71:6b:bc:51:ab:c7:62:4a:8b:b0:a4:a0:1f:7c:
ce:27:04:a3:30:41:74:ab:c6:de:7d:17:bb:f9:4e:4c:46:a7:
a8:d7:7a:84:9c:c0:47:28:df:33:59:b7:5c:0e:e6:35:cd:73:
17:80:4e:15:67:ea:f8:af:b3:c8:3d:ec:7a:f0:b8:5f:8e:f5:
ff:07:3c:6a:c4:9e:0f:26:c5:ae:6e:d2:f7:e3:83:02:6d:aa:
f6:e8:0f:32:87:53:3a:f7:dc:78:d4:df:78:b8:03:95:3f:e0:
05:ff:c7:af:3d:36:02:54:f9:b4:be:db:02:e5:ea:88:95:77:
d6:ce:99:2b:b5:a6:ce:00:e5:44:94:2c:23:d7:9e:eb:29:af:
73:09:f9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:51 2025 by rpki-client