Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/zpxTB1IfRJC_mNHEUL--lxhwY-4.roa
File: zpxTB1IfRJC_mNHEUL--lxhwY-4.roa (raw, json)
Hash identifier: B/0GCffr5ggcya1jEKyAH3+95wMXE7gO8MgXtbsF/2Y=
Subject key identifier: CE:9C:53:07:52:1F:44:90:BF:98:D1:C4:50:BF:BE:97:18:70:63:EE
Certificate issuer: /CN=caeefd0844eb139ab21f80d4072ce0b8edcc06b5
Certificate serial: 0193D396E811D114C10201F05C832483EEE3
Authority key identifier: CA:EE:FD:08:44:EB:13:9A:B2:1F:80:D4:07:2C:E0:B8:ED:CC:06:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu79CETrE5qyH4DUByzguO3MBrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/zpxTB1IfRJC_mNHEUL--lxhwY-4.roa
Signing time: Tue 17 Dec 2024 07:48:22 +0000
ROA not before: Tue 17 Dec 2024 07:48:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207828
IP address blocks: 193.109.224.0/24 maxlen: 24
193.109.226.0/24 maxlen: 24
193.109.230.0/24 maxlen: 24
193.110.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d3:96:e8:11:d1:14:c1:02:01:f0:5c:83:24:83:ee:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caeefd0844eb139ab21f80d4072ce0b8edcc06b5
Validity
Not Before: Dec 17 07:48:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce9c5307521f4490bf98d1c450bfbe97187063ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c1:91:2a:6e:17:73:e0:6d:b1:e9:d3:24:a3:
f5:a9:b4:ff:e8:16:2e:65:88:91:69:e2:7c:9e:c9:
93:fe:b8:1c:20:e8:11:81:02:4e:4d:28:47:a8:94:
ff:c4:57:24:60:82:49:3c:0f:5c:e7:81:f3:41:9a:
9f:c3:65:8c:bb:30:9d:33:7e:64:e8:6e:37:8e:7f:
28:db:7a:32:0d:f3:65:27:b5:9e:c4:e2:14:f8:c9:
38:c4:10:48:27:8a:6d:4c:2a:cb:23:6c:49:0e:1f:
2f:47:45:35:9a:f7:45:78:a2:69:cf:5d:68:b4:28:
dd:4e:8f:7b:2e:9d:96:cc:19:f2:65:06:a4:73:59:
88:87:94:32:2b:6b:97:d2:ce:af:33:04:40:d7:d2:
6e:93:c6:cb:70:db:89:55:83:94:3b:ce:11:31:91:
cb:1f:7e:a3:14:11:da:c5:99:e3:72:f2:4c:0d:62:
fd:f4:cd:f4:cd:50:33:34:59:eb:9e:b3:1b:4f:c2:
75:47:9d:3d:4a:6f:09:60:a8:c2:cf:36:0b:e4:20:
f2:ed:e8:a7:8b:f0:c0:8a:b9:6a:ef:63:16:b7:6d:
09:99:94:00:9b:eb:8e:65:34:97:57:c4:be:4d:c6:
a0:b8:1d:fd:0b:b9:92:83:31:91:41:59:26:e7:d0:
b1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9C:53:07:52:1F:44:90:BF:98:D1:C4:50:BF:BE:97:18:70:63:EE
X509v3 Authority Key Identifier:
keyid:CA:EE:FD:08:44:EB:13:9A:B2:1F:80:D4:07:2C:E0:B8:ED:CC:06:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu79CETrE5qyH4DUByzguO3MBrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/zpxTB1IfRJC_mNHEUL--lxhwY-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.224.0/24
193.109.226.0/24
193.109.230.0/24
193.110.82.0/24
Signature Algorithm: sha256WithRSAEncryption
97:e0:ad:80:95:b3:f5:77:9b:05:95:ec:10:9e:e9:32:e5:11:
cd:91:cf:ee:b7:aa:b6:7c:37:ee:11:6f:20:57:40:5b:50:07:
8b:9c:88:89:1d:22:fc:10:af:00:40:15:fa:6d:7b:73:02:6b:
4a:fb:57:19:e5:a2:bc:b7:32:ec:a5:e8:05:09:e4:b8:e3:e7:
a8:19:3e:78:4d:0f:77:a7:88:33:a4:9f:ac:57:e1:68:73:ee:
5f:a8:24:9d:6d:eb:fc:ef:cf:8c:69:92:bf:62:30:a4:f2:fb:
94:3c:d4:54:8a:4f:8a:32:71:b0:17:07:64:7b:9f:d5:1c:5b:
91:03:cf:e3:cf:33:51:51:b1:ad:ea:f9:ad:33:26:21:55:48:
40:68:93:ef:0b:4e:d2:87:d8:af:b1:55:a1:2f:4e:0f:4b:14:
db:f9:20:37:fd:89:1f:3c:1a:4e:5e:35:3a:49:b2:72:db:6d:
18:f8:18:42:6b:aa:37:82:5f:22:f0:4f:6d:60:54:36:5f:76:
28:06:23:56:a8:83:88:52:9c:2a:d8:7d:8d:c1:ae:b1:ca:a9:
c9:51:ce:9a:e9:29:f2:ed:10:39:79:2e:ec:32:ee:ec:a3:2c:
07:61:33:ed:5e:a5:64:68:55:8c:4d:68:2e:90:09:a3:db:32:
7f:08:cc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:29:51 2025 by rpki-client