Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/_pinoeA_lVSH18-eCf5vyA2K7eg.roa
File: _pinoeA_lVSH18-eCf5vyA2K7eg.roa (raw, json)
Hash identifier: Gj4K5LhvKruIO5y2ly8J65HRN8DslL48gS29DRWpwKU=
Subject key identifier: FE:98:A7:A1:E0:3F:95:54:87:D7:CF:9E:09:FE:6F:C8:0D:8A:ED:E8
Certificate issuer: /CN=8836bd8fad393e5131a023729315b356014e6637
Certificate serial: 018CC94E26C4D22198FE474D31B75DA391FD
Authority key identifier: 88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/_pinoeA_lVSH18-eCf5vyA2K7eg.roa
Signing time: Tue 02 Jan 2024 08:33:11 +0000
ROA not before: Tue 02 Jan 2024 08:33:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51485
IP address blocks: 192.40.71.0/24 maxlen: 24
192.40.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:26:c4:d2:21:98:fe:47:4d:31:b7:5d:a3:91:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8836bd8fad393e5131a023729315b356014e6637
Validity
Not Before: Jan 2 08:33:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe98a7a1e03f955487d7cf9e09fe6fc80d8aede8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:81:f9:40:81:2b:0d:82:a3:24:42:7a:d7:
73:09:a2:b2:c2:94:3f:c1:ca:47:92:3b:ec:ad:75:
99:d5:5b:c7:f5:8e:49:29:53:d7:bc:b2:a9:ee:b2:
8c:0d:2e:58:55:9a:23:7a:ec:ba:b4:3e:61:70:50:
4c:eb:92:50:9b:0a:a7:dd:5e:8a:e2:ea:26:4e:90:
5b:c2:33:c6:4d:28:2c:db:a3:90:1c:54:de:07:7e:
e3:54:ae:ad:b5:1b:c0:a8:7b:07:28:ae:86:e3:09:
ef:59:dd:8d:0a:c1:db:fb:47:0a:46:75:f3:9c:32:
c7:66:69:20:a2:e2:f9:48:a3:82:e3:0f:f7:05:5e:
e0:1e:6a:4a:d7:b7:5a:72:41:97:10:1c:2f:4a:78:
38:b8:24:bc:e5:d7:90:60:6a:ac:82:fc:38:8e:2c:
28:ce:17:85:c3:c1:b8:37:be:65:3a:ec:6d:b0:cd:
68:66:9f:92:af:11:7d:d3:4a:eb:2c:de:f8:e9:67:
a0:71:2a:8d:ce:37:c2:12:4d:c3:3e:04:ec:95:76:
e1:fe:59:76:b1:4a:f5:48:a0:ba:22:09:a2:23:be:
f6:7d:f8:e3:bc:c4:18:34:d4:5d:fa:5a:41:52:5a:
f7:6c:88:e4:e5:58:d4:c0:be:a0:eb:61:3b:ab:62:
72:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:98:A7:A1:E0:3F:95:54:87:D7:CF:9E:09:FE:6F:C8:0D:8A:ED:E8
X509v3 Authority Key Identifier:
keyid:88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/_pinoeA_lVSH18-eCf5vyA2K7eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.40.70.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:57:cc:db:5b:8d:92:d7:c6:cd:11:64:56:b8:0b:38:de:6e:
a6:12:e0:7a:79:11:8c:b7:20:58:8c:0d:62:9c:4b:66:9d:d8:
1c:5c:ff:2d:5b:36:26:ad:62:e7:f7:c1:fa:0f:9d:97:90:d1:
d0:ab:8f:40:28:e9:81:32:0c:45:8c:53:12:2c:47:b6:96:d2:
50:d6:5e:e8:15:91:aa:c1:12:59:12:67:a4:ec:19:5d:a5:d6:
94:27:42:06:c5:33:74:1f:6f:c3:d9:62:b9:7e:59:96:c1:a5:
db:5a:7b:1d:50:b5:11:18:59:f4:b1:a7:5f:81:73:c2:4d:5b:
b2:87:ac:41:de:12:84:21:15:f6:1a:eb:d0:e6:2e:38:bd:28:
bf:92:db:98:4c:e6:13:6f:60:99:9d:d4:81:2c:ae:49:3d:6c:
e7:f1:3b:64:c9:47:6b:f9:1a:16:a6:2d:29:3c:a8:47:a1:a4:
4c:ed:9f:24:dc:74:26:2c:0a:37:57:66:e0:26:26:93:0e:0b:
0f:0a:f6:58:7b:3f:ce:f4:4a:39:35:a3:7b:65:69:95:32:f1:
c5:78:e4:5c:2d:a2:9c:50:e5:28:a5:97:78:a3:75:09:63:82:
98:8c:13:18:7d:46:1e:aa:48:10:f9:43:0d:93:1c:81:0a:18:
2c:e0:c3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:57 2025 by rpki-client