Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/0SUzE7xgqrKLdW5U1pn_UNlh_Sk.roa
File: 0SUzE7xgqrKLdW5U1pn_UNlh_Sk.roa (raw, json)
Hash identifier: jvCzMZJvo8QzpWx/hRx5jkdiqaMUCkPFQiyl/VskOaU=
Subject key identifier: D1:25:33:13:BC:60:AA:B2:8B:75:6E:54:D6:99:FF:50:D9:61:FD:29
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 018CC42523AF45CA4D53D2A60D94A739A008
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/0SUzE7xgqrKLdW5U1pn_UNlh_Sk.roa
Signing time: Mon 01 Jan 2024 08:30:17 +0000
ROA not before: Mon 01 Jan 2024 08:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24634
IP address blocks: 93.185.80.0/20 maxlen: 24
185.125.148.0/22 maxlen: 24
2a06:b8c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:23:af:45:ca:4d:53:d2:a6:0d:94:a7:39:a0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: Jan 1 08:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1253313bc60aab28b756e54d699ff50d961fd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8e:48:a9:f7:fe:67:ab:71:d6:18:2d:9e:c7:
6d:22:5e:6c:c6:39:9d:b1:ac:12:75:0a:7b:26:0d:
73:b0:2d:92:b1:59:d7:25:1f:d1:d8:2d:d3:ce:7d:
fc:0d:be:d4:b0:c6:a3:3a:eb:86:14:3f:b1:d7:da:
99:28:3f:7e:8e:0c:c1:f6:64:49:83:f4:8a:35:9b:
01:d1:88:27:1b:94:21:6d:df:95:38:4f:eb:d0:95:
3a:6f:36:0f:79:be:5f:54:7a:7b:e9:f8:e6:30:03:
7d:11:0a:f9:29:13:c2:c6:d5:35:ac:b7:52:15:9d:
4e:4f:1e:04:19:48:02:f4:08:81:bb:10:31:12:ba:
9c:d2:a8:e2:77:48:96:3a:2c:cb:59:e5:5c:06:30:
2b:52:dc:40:32:0b:ad:7c:25:a1:66:4d:29:81:a3:
d3:80:27:e0:5e:8f:89:2f:82:9f:74:f0:46:fc:b3:
25:2d:2d:da:49:20:42:f4:8f:a9:71:5f:f5:df:39:
e9:3e:ff:59:73:b3:94:b3:b0:50:bf:8f:6a:59:02:
01:86:23:42:26:83:01:54:c7:b5:06:4b:80:c5:a3:
18:a5:94:d7:d7:bd:fa:c8:1f:9d:7a:2b:fe:47:ab:
6d:89:82:cb:8e:85:e0:27:ae:6c:6a:86:6c:7f:ba:
0e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:25:33:13:BC:60:AA:B2:8B:75:6E:54:D6:99:FF:50:D9:61:FD:29
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/0SUzE7xgqrKLdW5U1pn_UNlh_Sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.80.0/20
185.125.148.0/22
IPv6:
2a06:b8c0::/29
Signature Algorithm: sha256WithRSAEncryption
4b:e0:df:f5:82:2c:df:9e:57:e0:1e:2c:1f:59:c4:c9:3b:59:
9c:a9:87:22:10:73:87:06:48:e9:0a:e4:90:74:b5:da:bc:1c:
91:73:9e:13:cc:d3:08:bb:e9:5c:87:82:64:a4:8f:7a:1d:63:
74:8c:1f:1a:a4:f2:1f:4e:6b:53:21:a1:51:4c:a2:b1:98:33:
8c:00:24:94:c0:e8:2b:ca:b2:dd:68:86:98:3d:5d:f3:cb:09:
63:ff:b1:d9:18:97:e8:31:f0:7d:67:92:7a:86:8b:b2:4c:26:
f3:54:7b:9a:d6:d0:cc:06:13:5f:4e:6c:90:f8:41:01:8e:b9:
4a:7d:c6:ac:94:9e:e8:2d:7a:9f:49:fc:c3:c1:6e:21:c5:50:
a3:4b:3c:81:4e:cf:a0:52:35:a6:ad:39:ea:b2:a1:6c:35:a0:
87:d3:a0:59:2d:eb:8d:2b:9f:ef:f6:d6:23:3a:52:65:fb:bb:
e3:6c:25:41:de:5a:97:4c:b4:10:78:91:f6:db:70:69:5e:b3:
6c:64:66:a8:b9:7e:6f:00:75:6b:0c:e3:da:d6:3e:f3:82:dc:
94:66:48:2c:90:b9:bc:c0:cf:7a:76:5a:e8:fe:66:51:a4:93:
46:77:33:73:2e:44:9f:bc:ea:77:4e:ff:cf:62:55:c0:d3:d9:
68:7b:21:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:22:45 2025 by rpki-client