Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fpzup2Gm2LMkwE2Ca7yLSNdd9ec.roa
File: fpzup2Gm2LMkwE2Ca7yLSNdd9ec.roa (raw, json)
Hash identifier: POcEA7JHQLw+M9eLfVVkxrvtxLwiWMYeVzOE2ahbOwc=
Subject key identifier: 7E:9C:EE:A7:61:A6:D8:B3:24:C0:4D:82:6B:BC:8B:48:D7:5D:F5:E7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019408B446F89D2E9D7CCBA69149C3DED518
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fpzup2Gm2LMkwE2Ca7yLSNdd9ec.roa
Signing time: Fri 27 Dec 2024 15:20:19 +0000
ROA not before: Fri 27 Dec 2024 15:20:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 94.156.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:08:b4:46:f8:9d:2e:9d:7c:cb:a6:91:49:c3:de:d5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 27 15:20:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e9ceea761a6d8b324c04d826bbc8b48d75df5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d9:c8:a4:14:98:b2:7e:56:fa:8b:93:90:8c:
95:d2:7a:e1:f3:ca:b4:cb:0a:b3:fb:51:e7:50:1f:
62:58:b5:82:0c:d9:a4:a4:b0:b0:9a:ce:39:ad:8d:
3b:47:1f:c0:e8:cb:aa:70:e3:c5:04:23:7a:7b:f7:
19:b3:42:09:24:67:02:6d:01:fe:97:73:7b:57:5d:
27:f3:91:eb:17:a2:e4:d9:46:1a:c5:28:35:ee:eb:
7e:5b:e6:02:4e:e3:ab:2c:9d:a9:da:5c:26:fd:0d:
83:bf:b8:c4:d6:55:0b:01:af:20:27:2c:5c:40:5f:
b3:74:a2:39:30:bf:12:17:9c:43:33:89:99:3d:fd:
8b:2a:7d:db:df:08:0b:03:8f:4e:ff:6f:80:a9:4e:
56:5d:ea:c2:c9:b6:6d:a6:ec:b3:17:78:bc:4d:ba:
b4:8d:ff:d3:df:ff:ce:40:60:81:b4:65:98:88:ca:
53:46:ee:50:bc:85:2d:2c:88:7f:26:7c:eb:74:91:
29:bf:92:a3:20:cd:ad:94:89:55:2d:3d:84:28:2c:
71:4d:3d:20:1a:20:19:e9:0c:82:ea:7c:89:c2:8b:
9f:67:74:53:84:5b:c4:af:46:22:9a:f2:78:76:b1:
27:de:03:9f:ed:73:60:87:09:f2:15:c5:5e:4f:6b:
75:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9C:EE:A7:61:A6:D8:B3:24:C0:4D:82:6B:BC:8B:48:D7:5D:F5:E7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fpzup2Gm2LMkwE2Ca7yLSNdd9ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.177.0/24
Signature Algorithm: sha256WithRSAEncryption
49:26:a7:98:a7:d6:7f:4d:75:de:4c:ae:83:b3:c3:8b:ab:d8:
d5:8c:30:e2:fa:a8:f2:61:be:bf:8c:4a:8b:ad:45:66:3b:19:
e7:2f:69:4b:cc:da:8b:ca:d2:89:94:6b:c8:b9:ea:d0:e9:83:
0b:25:49:82:1f:ba:f4:58:a1:b8:93:ff:17:9b:21:5a:fc:73:
f0:65:15:61:c3:7b:6f:03:f8:51:1e:08:e7:71:0f:43:4b:24:
bd:04:ae:5b:8f:d2:34:0b:ea:8f:ef:32:2d:ab:97:b0:ad:2f:
ee:d3:91:c6:94:d3:7c:5a:b4:19:a8:2e:1f:5c:00:8c:ba:06:
71:08:84:0d:94:e6:67:5d:78:a6:6c:fe:85:37:26:8f:2d:24:
8d:1f:fa:d2:d8:f1:19:15:65:55:87:f5:45:c2:00:9a:00:b7:
9f:e4:11:33:4d:05:cc:cb:a0:2e:26:88:65:11:80:9e:bb:1e:
fc:c2:27:07:b9:6a:d2:6b:44:ef:77:38:ad:82:de:3b:63:d7:
13:4c:cc:02:9c:26:13:13:45:90:6d:bd:d5:ad:62:6d:cd:8b:
ae:d4:57:70:c7:be:dc:d6:c7:f4:43:ed:de:a3:e5:2a:0f:3d:
6a:a1:bb:34:8b:44:4f:7b:a1:7d:9d:a6:4e:b4:cd:51:d7:f6:
e4:de:7b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:41:07 2025 by rpki-client