Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/BoT7zNi0vYVpiqtnbhwpmcZsW6Y.roa
File: BoT7zNi0vYVpiqtnbhwpmcZsW6Y.roa (raw, json)
Hash identifier: scUi8bRz3oHBR04sKQj3nqLOoOwxh92KhqLJ1O+tjzM=
Subject key identifier: 06:84:FB:CC:D8:B4:BD:85:69:8A:AB:67:6E:1C:29:99:C6:6C:5B:A6
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 018CC8DEB8CFFE615AC15FD961E276EB049C
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/BoT7zNi0vYVpiqtnbhwpmcZsW6Y.roa
Signing time: Tue 02 Jan 2024 06:31:28 +0000
ROA not before: Tue 02 Jan 2024 06:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54548
IP address blocks: 82.165.208.0/21 maxlen: 24
157.97.104.0/24 maxlen: 24
157.97.105.0/24 maxlen: 24
212.227.236.0/22 maxlen: 24
212.227.240.0/22 maxlen: 24
217.160.150.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:b8:cf:fe:61:5a:c1:5f:d9:61:e2:76:eb:04:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: Jan 2 06:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0684fbccd8b4bd85698aab676e1c2999c66c5ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3f:38:df:d3:83:d9:bf:7c:ad:9d:35:41:39:
2b:df:b8:96:c5:32:9c:68:fb:1b:b8:c7:7a:95:8c:
d3:17:5a:dc:89:f1:2e:31:f5:4e:4f:6c:a2:55:75:
32:15:a8:4b:61:8d:c4:9e:c4:d0:8f:20:fb:e5:6c:
0e:d4:f8:7c:75:64:42:ba:7c:57:bb:e8:23:9b:b6:
f0:64:9f:79:6d:5f:29:82:1b:2f:3d:c8:19:6d:b7:
43:fc:a4:ab:50:74:ae:3d:2a:f2:43:ca:bc:53:ec:
50:95:70:7f:a1:9c:6d:d9:20:7d:e9:c1:e5:24:fb:
97:c5:f7:93:2b:ae:28:28:54:c3:96:d1:ec:25:c7:
5c:fe:32:fc:a6:4d:70:d8:36:69:56:86:64:20:ef:
84:fd:2d:4e:c1:24:26:2c:8e:cc:a4:de:75:03:0d:
75:8f:fd:81:a8:c7:80:6f:d2:20:ce:8b:4b:8a:6c:
e1:d5:a2:ec:9f:24:cb:d5:1f:04:db:e4:1d:a9:8f:
76:64:1a:25:46:e4:41:24:08:4d:73:2e:1e:29:9f:
53:6c:91:7d:d6:ce:d4:db:e2:7e:4d:f3:25:82:9a:
c5:02:cc:43:95:d9:7e:d4:d6:1c:b6:bc:3b:7d:2a:
ef:11:75:0b:25:1f:a9:53:60:0c:7e:a6:0d:dd:78:
c1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:84:FB:CC:D8:B4:BD:85:69:8A:AB:67:6E:1C:29:99:C6:6C:5B:A6
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/BoT7zNi0vYVpiqtnbhwpmcZsW6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.165.208.0/21
157.97.104.0/23
212.227.236.0-212.227.243.255
217.160.150.0/23
Signature Algorithm: sha256WithRSAEncryption
54:89:11:81:ad:8c:a6:84:2a:ac:ca:bf:4f:94:f5:1f:5b:1b:
36:b6:41:9d:54:09:f1:c0:15:82:83:93:e7:25:91:16:26:26:
94:f4:48:46:d2:21:55:02:55:55:cb:82:5a:2b:2a:24:87:0b:
25:a6:bf:36:3a:a1:ac:00:43:96:30:40:16:24:6b:cd:ee:af:
6d:4d:27:4c:34:12:b8:70:a7:ad:d6:55:83:12:95:c0:c9:92:
8c:a9:97:16:b5:1e:65:89:2c:a7:48:4b:ce:8d:59:72:0a:43:
bc:d8:97:34:9d:e2:24:d7:df:c6:3a:ce:2e:96:7e:ff:2b:bd:
3c:c7:1b:81:ef:fd:cb:12:d2:e5:0f:4a:25:c2:4d:e8:b0:ca:
94:7b:7f:8a:95:62:54:8f:62:c3:ad:93:2c:dc:ed:4e:5e:52:
c7:3c:9c:68:7f:35:5c:a0:7b:6e:2f:bb:83:a5:2b:c4:bd:ea:
c6:29:88:f8:ca:eb:5c:b6:5a:8a:34:73:d2:db:e2:ce:f7:15:
c8:8e:66:39:df:1b:d7:b7:87:8c:eb:b9:58:57:de:06:64:53:
59:c7:4b:a2:7a:d8:4c:e5:b6:23:0f:2b:36:5f:46:dc:4f:ec:
83:8d:e3:25:49:e1:6a:04:b6:a4:5a:57:23:3a:fa:fa:09:f2:
f4:23:55:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:07 2025 by rpki-client