Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/68T0xseQyvW-Q00Mw9hUNAua0DY.roa
File: 68T0xseQyvW-Q00Mw9hUNAua0DY.roa (raw, json)
Hash identifier: 7wbYY+s2klX2VsRMckmXjrjz1lurfX61Y8O7sv7drjM=
Subject key identifier: EB:C4:F4:C6:C7:90:CA:F5:BE:43:4D:0C:C3:D8:54:34:0B:9A:D0:36
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018FAB0DD9B9E7AF506E9AC3847E094357AD
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/68T0xseQyvW-Q00Mw9hUNAua0DY.roa
Signing time: Fri 24 May 2024 14:42:42 +0000
ROA not before: Fri 24 May 2024 14:42:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51799
IP address blocks: 193.23.4.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ab:0d:d9:b9:e7:af:50:6e:9a:c3:84:7e:09:43:57:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: May 24 14:42:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebc4f4c6c790caf5be434d0cc3d854340b9ad036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:78:8a:01:40:07:1c:30:ba:f7:b9:83:da:87:
01:41:84:13:a2:6f:51:f5:16:a7:af:9f:46:53:ca:
7e:91:bd:7e:e6:55:6c:17:4b:f5:d8:1e:38:b0:ab:
45:37:b9:a9:b3:41:5b:cf:3e:2b:49:4e:89:f3:68:
11:4a:43:b6:c3:8b:9f:0e:53:20:e7:52:10:2f:6a:
8f:08:87:35:8e:0c:e0:e8:b5:be:92:7a:20:1b:1f:
cf:9a:96:b9:39:3d:b7:1d:84:49:5b:7d:90:df:fd:
7e:ae:79:9d:f7:1c:5a:cd:af:fe:4f:21:cd:e7:6e:
19:60:7b:98:6d:a7:8d:19:db:58:96:ac:75:fc:20:
c0:a1:4d:43:05:d7:04:e7:f6:48:00:22:0d:ec:99:
e2:e2:9f:f8:5b:c0:a1:f3:3c:03:73:11:bf:4e:d1:
d4:35:a3:3a:df:eb:c1:4b:d7:70:ae:a5:98:03:75:
fa:cf:2e:ac:76:cb:e1:d7:b6:58:11:3f:fd:c5:f9:
53:01:7f:ea:c2:53:92:c6:10:1a:0e:f6:4b:0d:f8:
ad:e0:57:23:f6:72:fc:01:5c:cc:01:f2:31:c8:90:
69:d4:7b:16:35:2c:4e:92:0e:93:ea:69:b2:ec:43:
d1:65:34:1b:26:46:41:ab:7d:e0:b7:39:d7:9e:0d:
19:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C4:F4:C6:C7:90:CA:F5:BE:43:4D:0C:C3:D8:54:34:0B:9A:D0:36
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/68T0xseQyvW-Q00Mw9hUNAua0DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.4.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:44:74:a7:d4:26:0b:f0:80:50:82:15:10:0f:ce:62:c9:56:
21:fc:18:8c:20:18:f2:fa:7b:01:bd:7f:b4:4f:08:4d:fa:04:
45:e4:e1:a7:21:97:af:fa:6b:38:c2:e0:2c:ad:a8:ea:1d:46:
15:70:57:3b:b0:df:35:9a:ea:d0:11:56:1c:79:88:ef:08:d2:
52:be:fc:99:22:08:dd:b1:dd:94:f4:2f:bd:df:c4:08:96:3d:
56:44:ca:c8:1f:0e:16:a5:81:73:c7:bc:d0:86:39:c8:63:23:
37:22:12:6f:3b:13:e2:fa:e9:a7:aa:6f:b2:e5:93:0d:92:00:
7d:6f:83:1c:ac:30:62:2c:40:eb:a4:a6:fe:51:a4:6c:c9:ee:
d7:03:ae:c9:4a:b1:0d:e0:ce:9d:c4:0e:ab:f7:3c:5c:0e:09:
15:3c:98:3a:65:7a:a1:6b:be:e7:06:7a:5c:a2:2a:19:55:a6:
04:02:2b:37:e5:78:24:de:f1:0e:a3:a6:ff:88:50:96:11:6a:
12:d4:0a:0b:43:cc:49:53:69:40:db:63:47:d8:8a:98:b9:d8:
7a:50:c9:3d:4a:ee:50:39:eb:5d:7b:5f:a9:2a:0b:ab:bd:d5:
22:6c:1c:dc:91:14:69:c7:d0:0b:52:9f:a5:02:69:ef:c2:16:
9e:d9:d5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:24:51 2025 by rpki-client