Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/RTV-FLwCIh4HKKoUxfK0-OnhQPY.roa
File: RTV-FLwCIh4HKKoUxfK0-OnhQPY.roa (raw, json)
Hash identifier: 3KPwkENeYkVftzu6KMtiNn+VUa6EF2RN7hRnoobl1dw=
Subject key identifier: 45:35:7E:14:BC:02:22:1E:07:28:AA:14:C5:F2:B4:F8:E9:E1:40:F6
Certificate issuer: /CN=531d55a869f105af6abcdfa0ca406af1f49b24f1
Certificate serial: 018E00D738133764E36415E1C6E3A2026035
Authority key identifier: 53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/RTV-FLwCIh4HKKoUxfK0-OnhQPY.roa
Signing time: Sat 02 Mar 2024 20:24:48 +0000
ROA not before: Sat 02 Mar 2024 20:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199570
IP address blocks: 92.243.83.0/24 maxlen: 24
149.62.33.0/24 maxlen: 24
188.213.232.0/24 maxlen: 24
2a13:ad00::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 03 Mar 2024 12:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:00:d7:38:13:37:64:e3:64:15:e1:c6:e3:a2:02:60:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531d55a869f105af6abcdfa0ca406af1f49b24f1
Validity
Not Before: Mar 2 20:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45357e14bc02221e0728aa14c5f2b4f8e9e140f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:be:3e:74:b0:38:aa:23:38:c1:ca:17:8d:6d:
c0:87:e0:9b:9d:fa:ef:85:ad:9c:e0:8d:bb:85:c0:
94:3a:72:42:bc:b8:87:25:25:f3:e3:33:c2:af:7a:
8e:e5:20:1e:37:b0:b8:66:44:67:89:56:dd:f1:76:
1f:4e:0c:ec:c2:69:9c:ac:d1:98:b9:ce:d2:65:18:
17:68:02:97:45:72:93:f2:f4:b9:c9:96:cc:5a:af:
1f:3e:91:cc:c5:6c:85:72:66:41:9a:91:3d:f3:42:
49:2b:6a:fb:9e:5d:62:86:4e:66:a2:b4:03:a1:2f:
98:48:f8:e2:a9:15:89:a7:3d:3e:e8:4c:bd:eb:d5:
60:4f:7c:bf:fd:8e:6a:c6:a7:d5:77:37:4b:e2:a9:
fa:a2:e8:52:33:77:b9:30:88:cc:a9:6e:38:ef:96:
47:b5:62:09:27:47:e2:00:10:2c:5d:45:f2:38:32:
f0:a3:15:fd:16:4e:ae:1b:6b:36:e0:be:72:8d:c9:
4c:d9:ba:b9:f6:93:a6:f7:0a:1b:35:96:72:95:1d:
18:ca:7f:c6:be:bb:14:de:de:d1:eb:8c:c7:d3:75:
79:a4:9f:a6:02:68:33:f4:12:96:06:64:39:dd:01:
b3:b1:64:e7:c2:a1:fb:8f:20:bc:d6:0e:57:9f:88:
4a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:35:7E:14:BC:02:22:1E:07:28:AA:14:C5:F2:B4:F8:E9:E1:40:F6
X509v3 Authority Key Identifier:
keyid:53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/RTV-FLwCIh4HKKoUxfK0-OnhQPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.243.83.0/24
149.62.33.0/24
188.213.232.0/24
IPv6:
2a13:ad00::/29
Signature Algorithm: sha256WithRSAEncryption
95:21:57:cd:a7:60:76:6d:24:e6:9f:8f:3d:22:6f:9c:97:78:
47:36:c5:a5:e7:96:56:f3:9e:72:f6:a5:7c:47:29:58:08:9d:
0c:15:46:a7:51:19:e8:90:14:19:eb:76:96:a9:65:22:a6:6a:
ee:fa:33:c0:65:78:18:7d:26:1b:47:d5:32:88:20:26:36:ba:
24:fa:ea:34:0b:e9:69:86:03:bd:f1:80:97:40:36:33:c5:f5:
1b:40:df:98:e2:4c:9f:27:41:98:b0:4e:6d:1c:ee:83:f7:bd:
1c:d6:2c:cb:65:d7:f1:28:e4:46:d2:49:fc:f3:cf:62:a4:a1:
ba:f2:38:91:b8:3d:48:43:05:a3:06:42:1a:0c:d2:73:62:e7:
d0:92:e7:4d:f8:09:00:48:5a:3d:29:15:3e:01:de:c4:64:5e:
c3:e7:2d:1b:67:41:3b:fc:c4:39:5b:71:7c:63:fd:54:70:f3:
69:f7:bf:05:c9:31:64:fa:7f:7a:ac:47:c7:81:f1:cd:73:1a:
dc:bd:88:aa:37:d3:79:97:9b:ca:ef:9c:e4:69:e5:68:52:90:
6f:ea:16:f7:7f:d0:85:03:82:70:79:d9:a3:2f:a5:0e:ac:73:
13:05:5f:ba:9a:b1:02:6a:df:dc:06:8c:cc:a0:c5:12:30:61:
82:0a:06:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:13 2025 by rpki-client