Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/xJHJcV1S_oRq4k7PJAPY4NlZ7GU.roa
File: xJHJcV1S_oRq4k7PJAPY4NlZ7GU.roa (raw, json)
Hash identifier: WljFnN/2MM7b9bYFOe3EDxpuQLeEoi4dVGyd36MXN3s=
Subject key identifier: C4:91:C9:71:5D:52:FE:84:6A:E2:4E:CF:24:03:D8:E0:D9:59:EC:65
Certificate issuer: /CN=c7908f53e4517dce4c74ca2e30982788910c4033
Certificate serial: 018CC794C7BE7260EC4C71F25E1E130B23AA
Authority key identifier: C7:90:8F:53:E4:51:7D:CE:4C:74:CA:2E:30:98:27:88:91:0C:40:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/xJHJcV1S_oRq4k7PJAPY4NlZ7GU.roa
Signing time: Tue 02 Jan 2024 00:31:05 +0000
ROA not before: Tue 02 Jan 2024 00:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52164
IP address blocks: 193.238.86.0/24 maxlen: 24
2a11:280::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:c7:be:72:60:ec:4c:71:f2:5e:1e:13:0b:23:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7908f53e4517dce4c74ca2e30982788910c4033
Validity
Not Before: Jan 2 00:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c491c9715d52fe846ae24ecf2403d8e0d959ec65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6c:00:e9:3e:4f:d6:02:b6:47:ee:eb:bf:c7:
a3:f4:85:23:da:b4:1e:da:0c:64:bd:6d:e4:f5:dd:
c3:df:0a:8e:fd:6b:66:a7:da:94:54:e0:13:99:44:
47:86:81:2f:b2:60:ab:18:37:e5:10:8d:f6:67:8c:
23:77:d4:1e:0b:6b:bb:32:39:fd:25:a3:71:0d:0b:
95:a7:95:18:cf:3a:5c:e9:b3:38:99:7f:94:6c:ae:
37:2e:8a:63:f2:05:92:b7:e4:d9:84:30:43:61:f3:
0e:b0:4a:64:a8:de:eb:89:7d:51:ff:3a:95:f2:8b:
ed:aa:2e:1d:64:17:29:6d:ba:86:68:58:c1:4d:e1:
4f:38:3d:54:31:6e:e7:6c:86:a8:d8:5e:4b:10:6f:
eb:b8:9a:eb:c7:8e:dd:be:b9:82:13:e7:3c:9c:db:
1e:38:d1:9f:8d:e5:79:52:10:0a:2d:c6:03:88:a0:
e3:0c:57:fa:20:6e:6c:81:c8:04:44:05:db:31:7d:
1e:5c:b8:27:40:50:37:04:38:52:e5:a8:36:bf:a0:
be:9b:8e:9c:72:20:b9:16:c8:9c:89:83:82:6e:7b:
53:a3:43:5d:cd:42:1d:d0:aa:4e:ab:21:ae:7d:f0:
30:79:42:4c:87:d7:5c:75:e0:05:d4:c5:7a:40:c3:
60:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:91:C9:71:5D:52:FE:84:6A:E2:4E:CF:24:03:D8:E0:D9:59:EC:65
X509v3 Authority Key Identifier:
keyid:C7:90:8F:53:E4:51:7D:CE:4C:74:CA:2E:30:98:27:88:91:0C:40:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/xJHJcV1S_oRq4k7PJAPY4NlZ7GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.86.0/24
IPv6:
2a11:280::/29
Signature Algorithm: sha256WithRSAEncryption
0d:42:e4:24:8f:6f:ba:db:0b:b1:00:74:4b:dc:de:f5:23:19:
b1:a0:85:5d:2c:fa:11:ce:56:0f:02:1d:90:2f:0d:7c:bf:2b:
da:2a:9a:43:f2:99:2c:b3:59:04:77:a3:5c:87:0c:a7:9a:38:
95:4d:dd:60:7d:d8:e7:71:de:92:35:f2:ea:0b:09:15:9b:da:
e3:a3:47:98:62:ca:46:99:e9:d5:57:e8:0c:5d:45:2b:31:d9:
4a:6f:5e:a7:2f:d5:90:c0:c3:94:b8:82:fb:cd:b5:3e:1c:e9:
3e:18:27:e0:29:cb:56:b4:87:ba:97:e7:53:a7:4b:99:00:47:
46:71:70:0e:d3:81:c3:74:c9:3d:48:67:23:78:59:92:74:af:
0f:dd:56:88:b2:0b:47:b1:a2:9f:f7:7a:81:d1:96:a1:d9:c9:
b9:c2:54:28:3d:35:4a:a5:93:d5:4e:a1:18:41:6f:75:2c:0a:
45:9b:9d:3a:70:bf:16:23:3b:e9:1d:e2:49:46:33:38:88:26:
60:92:20:5d:d7:a9:f7:c9:dc:67:eb:77:71:62:b0:79:fc:76:
68:18:90:dc:75:5e:ac:69:8d:2e:0a:00:5b:e1:02:ce:43:48:
b0:70:27:0b:a5:6f:d5:2e:a6:d7:70:f3:31:52:ad:fd:7e:c9:
53:ea:f3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:23:36 2025 by rpki-client