Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/l35CvMJ3gAz0fe5qnaO7eZjiiCU.roa
File: l35CvMJ3gAz0fe5qnaO7eZjiiCU.roa (raw, json)
Hash identifier: KbQ+m4e6ZQuSHovRIvhNh+1yGISHSu1RNZ+Wu4Mg3Yc=
Subject key identifier: 97:7E:42:BC:C2:77:80:0C:F4:7D:EE:6A:9D:A3:BB:79:98:E2:88:25
Certificate issuer: /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Certificate serial: 018CC6B7BC6711CBDE7C04214F5E14995DAA
Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/l35CvMJ3gAz0fe5qnaO7eZjiiCU.roa
Signing time: Mon 01 Jan 2024 20:29:39 +0000
ROA not before: Mon 01 Jan 2024 20:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209342
IP address blocks: 86.60.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Sep 2024 09:55:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:bc:67:11:cb:de:7c:04:21:4f:5e:14:99:5d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Validity
Not Before: Jan 1 20:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=977e42bcc277800cf47dee6a9da3bb7998e28825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2a:38:8a:07:3a:23:86:8d:87:0f:e3:dc:0b:
c9:85:a0:56:d7:9e:7e:8a:8e:d5:5f:81:ff:69:4c:
d9:15:8f:7c:cb:e7:ac:95:40:06:fd:0d:2a:53:e5:
be:c4:86:c4:15:1f:27:57:31:b0:89:9b:00:1c:eb:
5b:05:8d:8a:56:85:53:31:b7:44:c4:9c:78:d9:b4:
58:b6:81:c6:b8:9d:c3:b4:ae:e1:bf:68:2a:28:6c:
02:1e:ee:3c:72:03:e8:2b:06:8c:fb:04:1a:86:6e:
b5:ad:14:2a:67:29:be:3c:04:a7:9f:be:bc:e3:85:
6c:b3:e9:18:1e:fa:df:81:24:4b:46:a9:cc:46:cc:
c2:09:ec:3d:71:49:c7:b4:73:ac:bd:3e:e8:75:03:
ba:22:65:d0:a4:0b:17:a6:db:f8:b4:03:01:a7:58:
76:d4:ca:8e:a8:0f:3f:30:0b:0c:b6:c5:56:68:cd:
be:9b:88:61:19:b9:ef:82:d6:cd:ee:f7:bf:9c:5f:
85:e8:a8:b9:6a:cf:f0:6c:f2:c5:51:24:03:90:a6:
25:cf:49:10:ad:ea:5a:3d:ae:63:17:b6:49:18:eb:
ef:4e:81:05:af:79:6d:c8:f0:b2:3e:7d:12:7c:3d:
a7:b4:49:97:a3:fc:57:69:17:93:c5:a5:1e:39:68:
a0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7E:42:BC:C2:77:80:0C:F4:7D:EE:6A:9D:A3:BB:79:98:E2:88:25
X509v3 Authority Key Identifier:
keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/l35CvMJ3gAz0fe5qnaO7eZjiiCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.60.96.0/24
Signature Algorithm: sha256WithRSAEncryption
02:b5:e3:93:36:24:df:8a:63:8f:d4:ad:37:63:34:74:7c:e0:
d2:1b:87:bd:7b:fc:0a:2b:51:17:c0:e9:3e:3f:1f:f6:e5:df:
b4:62:4e:5e:c0:fc:a2:21:17:15:40:8c:49:be:6f:97:67:89:
94:50:b0:7e:36:fd:22:c6:f6:f9:f0:e4:c8:40:a0:5c:34:f7:
6a:53:74:c0:29:5d:7e:91:a4:02:26:3a:97:4b:6d:40:0e:a2:
53:b9:64:f7:aa:5e:97:82:23:94:a5:d6:9d:a4:f2:03:99:ba:
d8:c1:b4:c7:e0:82:70:d3:f9:8a:86:62:40:fd:39:93:b9:84:
e4:c3:82:a9:92:8e:db:b8:29:19:e3:ea:0c:96:58:e4:cb:f0:
4f:72:0d:06:e1:bf:ad:20:19:ae:a7:54:56:d0:9a:e2:32:22:
b0:4d:f5:72:bd:df:69:6a:2f:06:ef:ff:4e:fe:d7:34:6b:aa:
e3:0f:27:0f:9e:35:ea:2e:78:d6:32:20:e4:54:4a:8e:c1:c1:
cc:76:a2:8d:d7:34:0f:13:7c:af:5c:de:03:74:a7:c9:6d:0f:
a3:38:9f:2a:02:05:ce:af:fb:4e:35:4a:11:ff:f9:43:ee:4f:
18:66:ee:8a:a1:7c:ce:9e:0b:67:b9:aa:11:8f:cf:be:35:de:
19:88:df:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:14:23 2025 by rpki-client