Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/79d860-09ec-47bc-92f4-2a6a06060b09/1/RqmzvDrauwkor7ecBGHU9POnXRg.roa
File: RqmzvDrauwkor7ecBGHU9POnXRg.roa (raw, json)
Hash identifier: 0zeJZ8SKJN3brz21TpwJv2cTfmh69WAuoqUmoe/Qz+M=
Subject key identifier: 46:A9:B3:BC:3A:DA:BB:09:28:AF:B7:9C:04:61:D4:F4:F3:A7:5D:18
Certificate issuer: /CN=f34ae9ff58c936bb4b621bd13fa87c576dd873fb
Certificate serial: 018CC8712F21B86B46CC14FE20EEF64F5D7C
Authority key identifier: F3:4A:E9:FF:58:C9:36:BB:4B:62:1B:D1:3F:A8:7C:57:6D:D8:73:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80rp_1jJNrtLYhvRP6h8V23Yc_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/79d860-09ec-47bc-92f4-2a6a06060b09/1/RqmzvDrauwkor7ecBGHU9POnXRg.roa
Signing time: Tue 02 Jan 2024 04:31:49 +0000
ROA not before: Tue 02 Jan 2024 04:31:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47663
IP address blocks: 93.187.240.0/22 maxlen: 22
93.187.240.0/24 maxlen: 24
93.187.244.0/24 maxlen: 24
93.187.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:2f:21:b8:6b:46:cc:14:fe:20:ee:f6:4f:5d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f34ae9ff58c936bb4b621bd13fa87c576dd873fb
Validity
Not Before: Jan 2 04:31:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46a9b3bc3adabb0928afb79c0461d4f4f3a75d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9c:8a:8c:06:f0:e5:82:6a:c2:b2:8d:0e:b7:
0f:5f:ec:2c:ba:a8:c9:17:58:2a:ef:36:7b:8d:3b:
ca:1f:c5:83:3b:95:7b:40:13:da:c5:72:8a:31:32:
3b:83:8e:f8:2d:28:86:88:67:2c:a3:ba:e6:78:99:
0c:3a:b6:3a:b2:51:1e:62:6e:2f:54:cd:5b:a7:38:
c1:45:65:9a:ef:b6:50:21:8c:f8:8a:b0:49:67:e9:
5d:15:43:a4:3f:a4:40:13:17:ed:65:e9:4c:d3:05:
50:19:15:b5:a0:fc:52:2d:2e:8f:d5:ba:b9:1c:8b:
1f:8b:6c:35:38:47:2a:81:e5:21:3f:58:06:29:ea:
10:ef:20:40:c6:18:a9:42:a4:4f:ad:ae:e6:5e:45:
2b:d3:17:80:63:37:cc:6b:ec:43:98:a4:a3:36:ac:
9b:04:d4:df:72:76:c7:60:88:8e:e0:37:35:cd:35:
2c:4c:20:70:84:c1:b6:89:08:2e:3f:f0:09:58:13:
6b:81:1b:1d:46:b6:74:7f:97:8e:54:39:d9:9d:f6:
70:86:09:b4:23:88:1d:5b:33:1a:4e:8c:05:fd:ec:
a4:8a:74:41:bc:7b:54:0a:74:21:06:af:b1:e1:2d:
2c:de:8e:ce:a1:77:e2:9e:66:62:cb:d6:e4:9c:89:
a9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A9:B3:BC:3A:DA:BB:09:28:AF:B7:9C:04:61:D4:F4:F3:A7:5D:18
X509v3 Authority Key Identifier:
keyid:F3:4A:E9:FF:58:C9:36:BB:4B:62:1B:D1:3F:A8:7C:57:6D:D8:73:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80rp_1jJNrtLYhvRP6h8V23Yc_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/79d860-09ec-47bc-92f4-2a6a06060b09/1/RqmzvDrauwkor7ecBGHU9POnXRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/79d860-09ec-47bc-92f4-2a6a06060b09/1/80rp_1jJNrtLYhvRP6h8V23Yc_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.240.0-93.187.244.255
93.187.247.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:18:a3:a1:34:99:aa:e8:75:30:e1:4a:2b:7f:50:a6:c6:d1:
44:e7:d1:0c:a8:91:cd:e7:1e:59:65:02:5b:30:68:cd:4a:2e:
55:8a:79:87:c6:df:b9:a1:41:83:be:a6:39:77:71:5f:cb:39:
a8:56:8a:d0:ad:66:35:0d:c7:fa:49:f4:a5:10:30:94:eb:a9:
f4:4f:18:ec:a6:a2:e7:84:c3:bc:07:5a:17:93:b7:d7:73:db:
3a:36:a9:f0:ec:65:7e:2f:5f:a9:cc:9e:fc:5b:37:f7:0a:7a:
8e:c7:5f:ad:0b:84:cf:15:91:7f:87:a0:be:ab:7f:ba:ac:4f:
b0:6e:e1:e9:e2:39:bb:7a:27:be:73:25:1e:c8:64:85:66:e7:
6f:87:3e:35:6b:47:24:a6:06:e3:c5:f0:5c:1d:ca:39:1a:2a:
70:ad:db:86:3b:c8:4f:4f:e4:0b:ac:88:2b:aa:50:66:e3:23:
b8:3b:14:e1:69:23:57:bb:43:60:96:d2:6e:14:16:ae:eb:08:
5f:70:4a:f7:02:89:57:63:91:66:27:cd:e5:44:a3:c9:89:3c:
a0:ee:8f:f7:81:28:f8:3d:3c:ed:23:69:17:de:d2:f6:56:dc:
56:bb:fc:d8:5e:3b:b7:fa:07:56:5e:62:a6:30:cd:25:58:06:
f6:13:56:81
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:09 2025 by rpki-client