Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/mP8pgTJOYsZxnkVCtuHY5SMGqmU.roa
File: mP8pgTJOYsZxnkVCtuHY5SMGqmU.roa (raw, json)
Hash identifier: nxW6bvVTXJNltqo0Sh7SxTDnWyDtWxCv5d6ChiQHCdw=
Subject key identifier: 98:FF:29:81:32:4E:62:C6:71:9E:45:42:B6:E1:D8:E5:23:06:AA:65
Certificate issuer: /CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Certificate serial: 018F3310C70307E71301F9C9DD82322A8924
Authority key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/mP8pgTJOYsZxnkVCtuHY5SMGqmU.roa
Signing time: Wed 01 May 2024 07:31:28 +0000
ROA not before: Wed 01 May 2024 07:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59605
IP address blocks: 151.248.96.0/20 maxlen: 24
185.201.192.0/22 maxlen: 24
2a02:f040::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:52:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:33:10:c7:03:07:e7:13:01:f9:c9:dd:82:32:2a:89:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Validity
Not Before: May 1 07:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98ff2981324e62c6719e4542b6e1d8e52306aa65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f3:ec:fb:d0:af:2e:22:ea:42:6b:63:33:97:
87:de:25:f6:3d:13:89:1b:0b:ec:97:7c:12:25:e3:
c9:f8:26:3f:e1:87:0a:9b:97:88:07:07:0c:dd:ca:
91:bc:f8:fd:65:cb:37:80:7e:46:63:ff:ec:94:52:
ea:54:19:8d:cb:e0:18:73:f4:ad:56:81:f0:ef:1a:
d9:41:76:43:95:14:bf:a4:9e:e1:f2:7f:3b:8a:de:
b9:ae:a9:a2:d8:03:cb:8b:5f:f6:9e:ba:70:27:51:
ff:8a:bb:b8:e7:30:76:b4:3f:90:2e:a4:87:1b:c2:
b1:96:40:d4:1e:4f:3a:1e:74:0b:4f:a6:88:1a:b4:
53:8e:45:79:25:ee:b8:3d:e2:a6:1f:f8:75:70:6a:
47:89:ee:5e:e4:65:27:25:30:b6:53:09:bb:87:bc:
80:da:1f:18:a4:88:5a:e1:46:b0:b3:64:dd:15:c9:
37:88:0e:b9:43:21:3e:1d:26:93:34:fa:4d:39:07:
c6:cf:ee:13:65:f0:65:f6:63:b4:27:85:b9:eb:86:
7b:0b:2a:ed:a4:71:b7:8c:b2:ab:78:db:9e:8d:e1:
9f:a0:8b:20:c1:b7:ae:33:ed:5a:9f:5a:4d:79:73:
7d:72:ac:72:20:e9:3e:9d:87:ab:7f:48:c0:64:a3:
12:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FF:29:81:32:4E:62:C6:71:9E:45:42:B6:E1:D8:E5:23:06:AA:65
X509v3 Authority Key Identifier:
keyid:04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/mP8pgTJOYsZxnkVCtuHY5SMGqmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.96.0/20
185.201.192.0/22
IPv6:
2a02:f040::/29
Signature Algorithm: sha256WithRSAEncryption
36:79:d8:21:68:b7:78:9e:db:a2:c3:f0:f3:5a:1a:43:3d:bc:
e5:0c:45:ec:87:62:b7:4a:01:a9:c2:36:9c:5f:47:4c:e0:c5:
48:21:01:1d:85:c5:23:34:a3:4b:37:6e:e6:74:2f:ef:38:02:
81:48:d5:66:68:99:78:b2:ca:5f:28:2e:44:9b:87:03:71:76:
81:35:b6:a4:0c:ea:a6:8c:29:31:9e:db:46:4d:5e:a0:e1:fd:
e1:54:e8:af:a5:46:93:82:84:9c:79:a4:99:35:c0:99:d2:d5:
c8:f2:50:2c:9c:0c:49:45:9c:72:e1:4a:8c:4d:50:99:06:9f:
fe:ed:89:75:c7:82:d2:a6:14:85:14:73:fe:30:f7:af:30:5a:
1c:13:50:c1:43:5e:2e:cc:db:9e:3d:2a:8a:89:cd:a1:10:50:
d6:88:70:ea:9e:24:d9:60:e9:ad:9f:50:e3:99:46:13:bd:f2:
89:1f:d7:b2:95:39:46:88:16:c4:63:54:b6:f2:21:c4:3b:d9:
30:a3:a1:88:ea:9f:a9:27:44:a9:ab:79:bd:ef:bb:0a:13:a1:
23:85:df:1b:bf:25:0d:1c:3c:49:1a:e4:12:0f:9d:b3:8d:ad:
c1:b9:1b:52:9a:55:47:27:cd:6d:89:8a:4d:ee:01:64:ed:26:
ff:18:c8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:00 2025 by rpki-client