Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/6Ne_O9H12ZJM_15XjCAbjhNYzuc.roa
File: 6Ne_O9H12ZJM_15XjCAbjhNYzuc.roa (raw, json)
Hash identifier: uVkCsHtU+9ATH8DU1Rw2HJzBCzGiz/DEFDIXIrYlIYY=
Subject key identifier: E8:D7:BF:3B:D1:F5:D9:92:4C:FF:5E:57:8C:20:1B:8E:13:58:CE:E7
Certificate issuer: /CN=f7822d4597e5493d15178bfb10e6841dd17e5897
Certificate serial: 019367D14BFEA439CC79585C7B464735F47D
Authority key identifier: F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/6Ne_O9H12ZJM_15XjCAbjhNYzuc.roa
Signing time: Tue 26 Nov 2024 09:33:09 +0000
ROA not before: Tue 26 Nov 2024 09:33:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202098
IP address blocks: 158.47.10.0/23 maxlen: 24
158.47.208.0/21 maxlen: 24
158.47.216.0/21 maxlen: 24
158.47.224.0/19 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:d1:4b:fe:a4:39:cc:79:58:5c:7b:46:47:35:f4:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7822d4597e5493d15178bfb10e6841dd17e5897
Validity
Not Before: Nov 26 09:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8d7bf3bd1f5d9924cff5e578c201b8e1358cee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6d:2c:ae:f7:dc:8e:df:0b:e7:0c:12:e7:ef:
14:f8:8d:6f:47:84:d4:4b:ca:25:60:0e:df:5e:8a:
0c:d6:3d:10:10:5d:b4:6a:fb:58:d3:68:40:a3:0e:
1e:ba:77:6f:55:d3:d2:db:f2:a9:5a:e8:3d:c6:e6:
9e:06:37:f4:0e:91:2d:26:44:ea:cc:22:0a:98:ce:
38:35:2d:25:8b:c7:f2:3f:59:5d:af:d3:f0:f9:e4:
c0:10:c7:dc:d9:81:af:95:57:c6:4a:ae:05:23:17:
bf:51:89:2d:f5:38:58:48:17:c0:d8:84:d9:0a:48:
f9:48:5d:7a:db:bd:62:96:32:d7:31:2e:6d:cc:f1:
7d:63:da:9a:d0:ee:57:3f:88:04:f6:04:23:52:b1:
28:f4:b9:aa:58:10:19:f4:41:ad:42:b1:d0:e7:d1:
bf:8a:78:4e:bc:a6:6b:3e:91:ed:b7:ae:59:d5:74:
ea:fb:6a:d4:c0:e4:e0:46:fa:b4:ef:a7:a5:20:e1:
83:f9:e4:ed:1f:92:50:19:db:d0:70:ab:42:ca:0f:
ee:00:fb:79:70:6a:95:89:9c:64:93:95:31:80:31:
b0:41:b3:e6:03:d9:d7:17:2d:b1:37:01:1f:08:a1:
55:38:52:c4:0d:cb:a5:52:ef:9d:bc:77:d1:86:f5:
d6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D7:BF:3B:D1:F5:D9:92:4C:FF:5E:57:8C:20:1B:8E:13:58:CE:E7
X509v3 Authority Key Identifier:
keyid:F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/6Ne_O9H12ZJM_15XjCAbjhNYzuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.47.10.0/23
158.47.208.0-158.47.255.255
Signature Algorithm: sha256WithRSAEncryption
86:e8:a1:3c:5d:76:36:ce:55:60:35:1a:97:62:5e:a3:93:4a:
d9:3b:75:8c:27:54:11:d2:8d:63:32:15:97:69:ee:99:40:a9:
26:05:e2:81:22:5a:d3:09:14:18:cb:73:f6:6c:36:e9:ef:3a:
3e:19:88:b2:ab:0b:2b:e1:61:90:45:60:db:60:e8:25:01:67:
c3:7d:40:a5:71:aa:1c:8f:61:7d:70:33:7a:b3:92:ab:11:4d:
4e:1c:4e:b5:9a:23:9a:da:0c:93:b3:f9:7a:c8:a4:2f:4b:e0:
fd:c7:79:5c:e7:c1:36:ec:0d:3a:1c:55:30:da:fa:e1:3c:52:
49:5a:78:cf:66:61:ca:66:af:b4:93:56:12:44:f4:22:9c:8e:
4d:37:6c:a9:00:30:d7:8c:3a:07:33:d6:11:63:5d:a3:59:0c:
37:73:59:d4:1e:f1:b7:d2:5f:50:fa:c4:d9:50:3d:58:e1:11:
4d:49:c0:30:06:88:13:51:af:d4:67:91:e7:27:88:9e:3d:30:
6b:7e:fd:95:ef:9e:30:79:de:64:15:21:43:66:8b:86:a5:d0:
a6:3d:6f:0f:c1:58:e7:14:da:dd:b8:41:7d:fc:76:f7:b2:d3:
fe:37:ab:a4:a5:f9:db:6f:3b:81:e9:aa:b3:4b:45:34:45:e6:
29:52:5f:51
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 08:02:19 2025 by rpki-client