Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/9x3_U8qx79TNaJPCp0afPKP4Hb4.roa
File: 9x3_U8qx79TNaJPCp0afPKP4Hb4.roa (raw, json)
Hash identifier: CkrabCoWdesDOSOLYAo0hz7o6pe4BOkSgLSNmRieaVw=
Subject key identifier: F7:1D:FF:53:CA:B1:EF:D4:CD:68:93:C2:A7:46:9F:3C:A3:F8:1D:BE
Certificate issuer: /CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Certificate serial: 018CCA2A3C03ECBF49093E2BC0BFEFAD36FC
Authority key identifier: 60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/9x3_U8qx79TNaJPCp0afPKP4Hb4.roa
Signing time: Tue 02 Jan 2024 12:33:34 +0000
ROA not before: Tue 02 Jan 2024 12:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34614
IP address blocks: 193.26.215.0/24 maxlen: 24
193.26.219.0/24 maxlen: 24
193.26.223.0/24 maxlen: 24
193.27.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:3c:03:ec:bf:49:09:3e:2b:c0:bf:ef:ad:36:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Validity
Not Before: Jan 2 12:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f71dff53cab1efd4cd6893c2a7469f3ca3f81dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:73:9f:92:a0:53:7a:8c:c0:3f:1e:ce:20:42:
d5:58:ac:cb:ba:84:d1:aa:8a:fb:b9:56:09:6f:c2:
d8:a9:4d:95:fe:92:8c:46:72:1b:a7:e0:11:f4:15:
6b:62:99:70:db:32:ce:69:cf:7a:4f:81:e9:72:5a:
3b:ba:ff:b2:64:3b:0c:95:5c:c6:ad:42:02:4b:19:
5c:93:9e:bf:7a:b8:75:14:a5:6b:83:61:c4:19:8a:
f3:29:b7:8f:66:ee:7e:af:44:17:61:f3:9f:5d:48:
30:7d:7c:ab:0c:d0:a0:ea:a6:52:f6:74:bc:ca:2f:
d8:b1:bb:25:32:06:cc:13:5c:dc:ac:93:1c:68:bd:
2f:b5:39:74:2a:ec:32:dc:25:cc:b2:19:83:c1:b2:
23:1b:5c:6e:ae:1c:d7:81:74:85:c2:06:8a:5e:5a:
f5:1f:88:a5:c2:a7:5f:8b:4d:2e:b8:07:a8:18:99:
2e:fa:ae:85:23:bf:1f:98:d7:8d:40:51:e1:93:c8:
f7:64:e6:72:9e:f4:53:5c:a7:d8:46:f4:4d:e8:06:
67:86:95:21:dc:f1:09:50:6b:f6:c4:65:40:9d:b6:
89:98:bf:77:f9:fe:b4:df:a3:9f:15:96:50:8e:1a:
48:0f:e7:2f:4b:1c:4e:97:1e:90:60:3f:a0:6f:50:
d8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1D:FF:53:CA:B1:EF:D4:CD:68:93:C2:A7:46:9F:3C:A3:F8:1D:BE
X509v3 Authority Key Identifier:
keyid:60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/9x3_U8qx79TNaJPCp0afPKP4Hb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.215.0/24
193.26.219.0/24
193.26.223.0/24
193.27.8.0/24
Signature Algorithm: sha256WithRSAEncryption
39:fd:0b:ef:a5:59:7b:50:71:cf:31:84:e9:44:36:29:a2:52:
00:b9:fc:39:66:44:ab:b8:fa:5f:fd:9f:05:2d:d9:c7:95:83:
19:b2:75:55:53:19:7f:7e:bd:32:22:10:58:ce:5a:34:15:fe:
72:3b:49:00:5f:92:6d:44:77:35:49:19:4b:0c:14:55:20:4b:
8f:17:91:a3:d0:72:e6:3c:db:86:61:f2:36:84:a4:06:39:d1:
0a:3b:d8:07:a6:74:41:a0:d8:6e:68:0b:b1:b0:22:3f:1f:d0:
3d:c0:17:e7:66:c3:07:dd:6a:df:3d:55:3f:02:3e:2c:39:36:
ec:0a:1f:f1:35:c4:8b:43:ec:6f:6f:d8:df:ee:4b:1a:17:bb:
6c:a2:0a:d5:75:95:2b:c2:f2:6a:d7:85:3c:ec:92:6e:15:6a:
1c:78:8f:3b:ec:ce:01:2a:60:9f:23:62:76:1f:05:03:97:01:
d9:86:39:7c:e5:c1:66:48:06:dc:6e:c8:51:09:76:ae:06:9a:
47:db:d6:7a:9c:a3:b5:78:21:fb:0c:de:f3:52:8e:54:f5:9d:
8f:79:99:f5:60:1c:39:1c:c0:3c:63:c7:95:1c:aa:72:44:8f:
dc:24:86:2a:cb:e1:16:1d:8b:47:60:b6:56:68:f0:dc:08:24:
b7:78:ed:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:37:44 2025 by rpki-client