Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/F1tAKq-x-rMW1GbIdrE6J1ElBh0.roa
File: F1tAKq-x-rMW1GbIdrE6J1ElBh0.roa (raw, json)
Hash identifier: Tr6eI2Ey8yRAAqcYP46De2Ow/IIRGXgd/CRFMDGtBrQ=
Subject key identifier: 17:5B:40:2A:AF:B1:FA:B3:16:D4:66:C8:76:B1:3A:27:51:25:06:1D
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0192C1E1D976D3B8741D3503B2610DF5171A
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/F1tAKq-x-rMW1GbIdrE6J1ElBh0.roa
Signing time: Fri 25 Oct 2024 04:14:16 +0000
ROA not before: Fri 25 Oct 2024 04:14:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 94.229.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 01:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c1:e1:d9:76:d3:b8:74:1d:35:03:b2:61:0d:f5:17:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 25 04:14:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=175b402aafb1fab316d466c876b13a275125061d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1c:c5:d2:6c:d6:05:ab:07:c8:31:d0:b7:64:
00:93:c0:1b:71:20:7d:e5:07:43:8d:78:a5:b3:5b:
35:2a:fe:bd:b9:75:54:7d:8c:a3:47:ad:67:c8:dd:
5e:b9:a5:39:cf:f2:a7:3c:74:69:e5:83:60:67:83:
a5:9c:15:a0:c1:82:d5:45:69:43:c1:26:c2:fa:19:
7e:af:52:4b:c4:c4:a2:ef:24:4e:d1:73:91:de:fc:
ea:68:65:2c:20:cc:30:05:65:54:2a:0f:d0:f7:da:
ae:17:01:70:ce:8d:a6:83:4d:d4:fc:19:a6:e3:ef:
d7:1f:d0:00:d3:8a:bc:43:28:b4:57:a6:f5:49:6e:
bb:d7:6c:e4:a4:ec:4d:cf:0b:2f:eb:2d:3e:1f:ba:
4a:20:7c:8e:cb:12:97:5e:3a:27:47:85:99:fb:90:
82:4d:e7:e8:99:5f:1a:40:0a:05:33:4a:06:07:81:
f0:64:b8:da:60:21:4c:f1:54:a7:0d:9d:fc:39:d1:
63:fd:b2:da:2b:58:44:05:47:d1:d4:e4:53:f0:7c:
47:f4:1d:8d:12:a4:0c:5f:32:d4:15:28:f4:a3:14:
a4:ba:81:ef:3a:0d:ea:cd:14:20:90:bf:b7:33:70:
c3:e3:df:dd:b9:f8:57:c0:e9:d2:c3:5d:c7:f0:f8:
96:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5B:40:2A:AF:B1:FA:B3:16:D4:66:C8:76:B1:3A:27:51:25:06:1D
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/F1tAKq-x-rMW1GbIdrE6J1ElBh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.212.0/24
Signature Algorithm: sha256WithRSAEncryption
64:c6:6f:ff:02:d0:25:4b:65:ad:10:e9:84:53:6e:9a:68:20:
10:ba:83:60:a3:18:98:d5:37:e1:59:d2:a5:fe:f8:6c:11:ae:
a1:b4:1d:77:b7:ca:35:4b:42:33:bb:ca:a7:72:88:4c:80:51:
c5:48:3f:c6:f7:b4:5e:c2:1a:8c:5c:50:6a:48:3b:39:61:b8:
c1:cb:ef:59:87:b2:bf:fb:46:65:4b:ee:c4:1c:fe:7d:dd:83:
63:22:6e:de:6c:25:d2:25:34:19:35:de:57:f3:6b:af:be:da:
f0:b5:98:1a:50:8a:39:d9:33:89:37:6a:28:6d:34:52:3b:b0:
d1:f7:2e:5f:95:1f:3c:fd:28:c2:6c:1a:02:c2:e3:bb:62:a4:
71:fd:51:84:94:66:6c:4c:ca:ee:2e:87:00:7f:49:ea:d3:16:
79:a4:ae:6e:b7:57:80:20:f4:61:32:35:95:86:e9:50:f1:c6:
43:be:9f:b2:37:da:6d:25:56:90:30:46:a6:c3:2f:b5:71:88:
f0:e5:e8:c6:03:66:44:dc:38:ca:71:6d:14:99:55:8d:87:70:
e2:68:cb:4b:38:ef:68:76:ff:b2:9e:4a:3a:65:93:1d:b0:05:
ad:b5:00:96:d1:be:0a:f8:17:0d:91:30:d5:44:e6:fe:c5:ac:
14:88:91:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:29:11 2025 by rpki-client