Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/K5lc8mA-Q9RCBFMuqkH6MerCQk8.roa
File: K5lc8mA-Q9RCBFMuqkH6MerCQk8.roa (raw, json)
Hash identifier: J3MGBwjE/o6x/+swXfHsA6tEONovXjCPjx8y80n02qE=
Subject key identifier: 2B:99:5C:F2:60:3E:43:D4:42:04:53:2E:AA:41:FA:31:EA:C2:42:4F
Certificate issuer: /CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Certificate serial: 018CC94DF7D9D28EA6D0F43338E3CFA129FA
Authority key identifier: 5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/K5lc8mA-Q9RCBFMuqkH6MerCQk8.roa
Signing time: Tue 02 Jan 2024 08:32:59 +0000
ROA not before: Tue 02 Jan 2024 08:32:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210819
IP address blocks: 92.246.88.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:f7:d9:d2:8e:a6:d0:f4:33:38:e3:cf:a1:29:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Validity
Not Before: Jan 2 08:32:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b995cf2603e43d44204532eaa41fa31eac2424f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c6:76:d2:56:fd:76:4f:68:47:40:ec:bb:5f:
7c:6e:17:08:26:6e:2d:94:0a:c0:de:d5:f8:f2:41:
2f:88:82:ac:c1:3a:ab:37:07:1f:cc:c7:d7:3c:29:
91:e9:f5:a5:ba:7c:a5:77:e3:63:ec:d3:19:db:0a:
bc:bc:be:93:8b:fc:84:c9:2c:08:e0:63:91:b4:95:
b3:48:56:7b:f4:60:43:8c:e8:fa:fd:68:ee:b0:ca:
ce:56:77:f3:f9:79:30:f0:11:ca:dc:8e:3e:96:79:
4a:07:16:ce:ed:ed:f7:66:dc:d6:73:d5:f6:9f:c7:
03:0f:40:0e:db:fc:af:20:30:a3:97:e3:cc:ca:a1:
68:70:f5:26:06:41:86:78:5e:96:dd:d1:21:13:b3:
e3:1f:82:4d:de:83:aa:2a:f4:16:c1:18:d1:d5:88:
16:87:7e:ec:6b:5d:66:f7:99:89:d2:cc:35:25:fe:
6f:13:0a:2c:b2:9a:3c:5f:1d:da:2e:78:2e:1f:25:
71:bf:8f:6f:f9:98:8d:90:ac:ad:c2:14:35:55:e2:
64:dd:21:36:d8:41:b5:87:82:d4:99:7f:dc:96:49:
78:0e:62:8b:2d:49:e5:8e:78:f2:6e:b8:16:5b:c1:
11:1b:ae:bb:b4:cd:1c:75:74:a2:b9:ad:12:6d:3b:
00:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:99:5C:F2:60:3E:43:D4:42:04:53:2E:AA:41:FA:31:EA:C2:42:4F
X509v3 Authority Key Identifier:
keyid:5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/K5lc8mA-Q9RCBFMuqkH6MerCQk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.88.0/22
Signature Algorithm: sha256WithRSAEncryption
73:2e:36:19:39:bc:34:39:1a:e4:0e:2c:af:cd:4b:c2:24:e1:
15:79:b6:35:27:04:e2:17:85:f4:b4:9a:c7:e2:d2:b6:26:8c:
ae:b6:e4:02:0b:70:e0:46:5c:8a:20:89:c9:2c:9f:e1:0c:b2:
e1:11:1d:cd:dc:2c:e5:3f:cc:49:59:58:b0:16:7b:2b:3f:47:
4a:68:13:a0:46:89:fe:ab:58:f6:06:62:de:b3:c5:8b:99:cb:
79:e1:ec:b3:53:f5:3e:e9:f7:24:d9:a4:7a:ac:6b:d0:f1:f6:
9b:45:fe:82:71:1c:d9:41:6f:27:49:8c:72:ca:b7:c7:ad:0d:
b0:1d:c2:99:40:87:02:af:4d:7e:da:46:28:5d:5d:43:86:3b:
d3:97:82:14:2b:4d:5d:74:8d:2e:55:7b:cb:03:e5:2d:32:b5:
5e:97:51:4d:95:dd:8a:99:a6:f3:77:02:47:c9:72:65:d3:99:
31:28:db:f6:5f:0f:ab:52:6d:4b:cc:4d:a7:bd:54:72:d4:a0:
f6:be:e8:ff:c4:b3:89:ab:d7:9c:da:c9:0b:c7:75:af:e0:b0:
1d:2c:db:fa:73:bf:2a:55:1a:e7:20:4e:21:5a:48:d0:67:b2:
f1:5f:d1:63:b3:0d:1b:f2:5e:35:bf:90:bf:ae:3f:7f:67:fc:
7a:ac:b2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:07:21 2025 by rpki-client