Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/vP-3kuxLTePMmuBmEP2fOjdL3K4.roa
File: vP-3kuxLTePMmuBmEP2fOjdL3K4.roa (raw, json)
Hash identifier: lDNQyEiPCy6PUaPB9wQFC4Q+kJ+7e23E7S7YJwSJS1s=
Subject key identifier: BC:FF:B7:92:EC:4B:4D:E3:CC:9A:E0:66:10:FD:9F:3A:37:4B:DC:AE
Certificate issuer: /CN=08018478914871aab0e1c0036d3626ebad6e20cc
Certificate serial: 018FCA0B94FF71F330408EA8597383B85D95
Authority key identifier: 08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/vP-3kuxLTePMmuBmEP2fOjdL3K4.roa
Signing time: Thu 30 May 2024 15:08:27 +0000
ROA not before: Thu 30 May 2024 15:08:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44334
IP address blocks: 92.61.160.0/20 maxlen: 24
2a03:4600::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 03 Jun 2024 11:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ca:0b:94:ff:71:f3:30:40:8e:a8:59:73:83:b8:5d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08018478914871aab0e1c0036d3626ebad6e20cc
Validity
Not Before: May 30 15:08:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcffb792ec4b4de3cc9ae06610fd9f3a374bdcae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:79:ba:67:55:50:8b:06:be:ff:96:0a:55:08:
24:44:b7:e6:21:80:c4:36:b3:9b:a0:1b:a1:21:47:
a7:80:c2:31:ef:ff:f4:e1:f4:0e:8f:24:25:d9:ca:
bb:ab:51:cc:2e:c3:9e:92:e0:62:69:45:cd:59:ef:
86:1f:b9:d7:bf:2d:e3:53:3f:42:0e:68:9c:d3:5e:
30:09:90:89:1c:7d:21:ff:97:df:27:50:c5:39:74:
23:34:a4:9e:81:a6:5e:42:6c:e1:51:3f:8c:a1:96:
ff:a1:55:de:d0:9c:c5:be:54:b3:06:7e:43:fe:dc:
7e:3a:58:ab:bc:e7:8c:c7:b1:e7:00:c5:ad:9c:37:
9b:00:ae:99:be:0a:22:c6:13:f4:b6:b1:84:25:32:
b5:51:8e:77:c4:b3:82:38:c1:92:03:d1:46:6d:2f:
50:19:e7:c5:8c:24:71:e8:9d:ef:dc:1a:63:d3:8d:
3e:6c:92:56:f8:e2:51:c7:87:3e:7e:da:61:d5:67:
bf:e7:3a:84:cd:48:fa:00:17:f8:e9:12:9a:e2:10:
d6:11:12:3a:f8:27:10:68:a7:06:b5:f4:27:e0:0d:
73:b8:34:82:0d:ca:cc:a6:ff:b1:98:0c:3c:7c:9e:
2e:7d:fb:76:15:5a:5e:03:a8:1b:c9:2e:90:20:3e:
99:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FF:B7:92:EC:4B:4D:E3:CC:9A:E0:66:10:FD:9F:3A:37:4B:DC:AE
X509v3 Authority Key Identifier:
keyid:08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/vP-3kuxLTePMmuBmEP2fOjdL3K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.160.0/20
IPv6:
2a03:4600::/32
Signature Algorithm: sha256WithRSAEncryption
5d:35:e5:26:52:43:c2:84:8b:29:74:60:0c:45:ad:75:09:3e:
ac:ca:00:b6:9c:44:06:91:e0:52:5f:60:3b:27:58:a3:07:7b:
65:0c:ab:d8:53:0c:22:f8:7c:82:4c:85:87:05:33:59:61:02:
d6:4e:3e:a4:8f:cf:85:30:e9:ec:2e:5f:10:de:bc:30:50:7a:
b6:79:af:4a:f7:f1:af:27:66:26:5b:0f:1b:7f:26:c7:39:57:
02:63:a6:a3:e4:d8:c6:d5:8e:e3:58:1d:d6:b9:89:27:01:39:
f6:55:b5:36:f9:67:87:8a:15:9b:f1:cb:23:cf:99:92:77:6d:
54:2e:38:0e:25:84:93:ba:99:a8:ef:4d:8e:7b:2e:55:b3:e9:
2b:87:d7:c7:d9:1e:95:50:a6:52:5d:b3:aa:e1:58:83:1e:dc:
f2:f5:cb:62:82:01:8e:52:57:2e:2a:5f:24:35:05:bc:93:22:
9f:ec:71:b4:b9:d4:47:b9:61:ee:7e:95:78:32:3d:87:1a:f5:
c9:de:16:7c:81:92:d5:c3:3a:81:65:cd:24:1d:0c:a2:81:d3:
8b:3c:08:95:82:aa:c4:d0:1b:3e:24:de:fe:db:4c:ca:29:ce:
12:7e:11:35:66:c7:f9:c6:d8:99:14:2e:63:a8:c1:09:fc:71:
b1:df:ef:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:02:24 2025 by rpki-client