Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/cc2NKQPPmZP5wdN4RbIlNs6yLIk.roa
File: cc2NKQPPmZP5wdN4RbIlNs6yLIk.roa (raw, json)
Hash identifier: zL+vNvLbF5OC5Elr8H0OXij3F1uNFpasL9WvfSBb+fo=
Subject key identifier: 71:CD:8D:29:03:CF:99:93:F9:C1:D3:78:45:B2:25:36:CE:B2:2C:89
Certificate issuer: /CN=f6f49bfb2a0b82446060c7fc907810e518705936
Certificate serial: 0193AA62AE625F03E7B9E4984D7D7F7B8472
Authority key identifier: F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/cc2NKQPPmZP5wdN4RbIlNs6yLIk.roa
Signing time: Mon 09 Dec 2024 07:46:54 +0000
ROA not before: Mon 09 Dec 2024 07:46:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213754
IP address blocks: 176.103.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:aa:62:ae:62:5f:03:e7:b9:e4:98:4d:7d:7f:7b:84:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f49bfb2a0b82446060c7fc907810e518705936
Validity
Not Before: Dec 9 07:46:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71cd8d2903cf9993f9c1d37845b22536ceb22c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7d:39:b6:7b:36:26:32:c9:d6:21:a3:ce:23:
42:4e:03:db:ea:ad:17:d4:b3:fd:34:49:09:b5:cc:
86:11:8e:e7:df:60:b6:cf:b0:4b:8e:9e:60:d3:46:
ca:ec:f6:b3:90:8b:37:93:bf:c0:77:16:fd:70:00:
b9:9b:48:c2:8e:c3:bf:13:34:bf:04:41:ee:5b:90:
56:72:66:f4:e8:bc:7c:50:43:05:9b:e6:e8:27:4c:
9d:ac:a5:f7:6a:c9:c9:dc:26:a8:78:93:e3:04:19:
a8:2e:30:f6:e0:fa:74:ba:45:a0:25:01:b6:68:5d:
65:2b:08:84:6d:4a:f0:76:8b:3d:85:c3:51:72:41:
15:a2:a0:43:57:17:e2:91:e2:22:a8:e2:52:fa:08:
9f:ab:bc:dd:f7:43:e2:4c:09:cd:b3:79:59:2d:8c:
1c:19:03:8a:d2:c6:21:39:c2:ee:e7:40:87:4f:fe:
be:45:38:84:8b:01:78:69:93:d6:2b:da:e7:f8:62:
81:3c:fd:6a:29:7b:48:3d:f2:75:7d:fa:a3:15:87:
b3:c2:bd:11:4f:2d:fd:bb:4e:38:f1:79:6e:9b:8f:
94:da:93:19:12:09:b3:21:b7:66:0b:00:f6:2f:26:
92:86:8c:05:86:04:52:81:42:82:20:1a:1a:5b:27:
18:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CD:8D:29:03:CF:99:93:F9:C1:D3:78:45:B2:25:36:CE:B2:2C:89
X509v3 Authority Key Identifier:
keyid:F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/cc2NKQPPmZP5wdN4RbIlNs6yLIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.112.0/24
Signature Algorithm: sha256WithRSAEncryption
85:e1:43:df:74:df:f3:d3:e2:9d:48:ff:4e:ac:64:f9:a5:c9:
19:fe:63:b7:c1:80:81:62:4d:50:78:24:8d:10:12:95:ab:fc:
9b:14:71:21:db:f3:bc:76:7f:35:d8:60:a5:5d:c1:9f:75:7b:
04:2a:34:42:c2:84:a8:fe:ab:a1:dc:f2:13:47:47:8f:f7:fe:
c8:d0:2f:89:b4:dd:2c:ed:fb:1d:f5:a0:ad:5b:d3:89:58:56:
28:6f:b2:78:91:b1:ce:20:db:b1:e5:7a:4d:89:0a:6c:0e:4f:
b3:74:7b:e8:69:4b:70:d9:c1:ed:98:9a:c2:6c:95:11:ee:3e:
99:84:bc:16:09:b3:6b:9b:58:1d:77:99:c0:07:09:38:ac:8b:
ec:3e:c2:f8:ed:f9:fe:7f:3d:5a:17:9c:91:8b:1f:af:79:07:
35:62:81:29:0a:5f:d1:44:f6:3d:93:f8:c6:cf:12:b1:d2:9f:
45:ff:58:46:f7:9e:d8:62:ec:a5:eb:f7:24:f5:58:2d:13:3c:
33:6a:36:be:27:07:cb:d7:c9:fd:24:66:ff:3c:4a:1f:b3:20:
cf:02:0a:b9:2e:e7:7a:e8:27:4b:c2:7c:be:7d:5b:69:f4:0f:
bb:81:e6:95:12:ab:01:09:03:62:27:14:a6:08:1e:d9:6e:5a:
6d:13:28:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:26:09 2025 by rpki-client