Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/sQG6mnW8p_S1go0yLjmQGJWWxJs.roa
File: sQG6mnW8p_S1go0yLjmQGJWWxJs.roa (raw, json)
Hash identifier: 0VwxZFu2/7/OD23wZyXKEP0AzJ7efc/gPCbsg/WaH7A=
Subject key identifier: B1:01:BA:9A:75:BC:A7:F4:B5:82:8D:32:2E:39:90:18:95:96:C4:9B
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 01907852015FFD3A82E197F7C8029378CB14
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/sQG6mnW8p_S1go0yLjmQGJWWxJs.roa
Signing time: Wed 03 Jul 2024 11:19:18 +0000
ROA not before: Wed 03 Jul 2024 11:19:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42337
IP address blocks: 193.228.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jul 2024 10:07:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:78:52:01:5f:fd:3a:82:e1:97:f7:c8:02:93:78:cb:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Jul 3 11:19:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b101ba9a75bca7f4b5828d322e3990189596c49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:fa:a2:50:1f:3d:06:da:5d:21:37:6f:8b:
aa:c8:e1:03:4f:ac:fd:a0:69:9b:48:86:89:dd:ac:
d2:d3:5f:09:67:bd:1e:72:93:8d:4d:26:2b:41:ac:
71:87:63:b8:44:be:aa:ee:ab:f2:f3:64:bb:15:46:
95:40:f8:6c:e1:28:c8:56:44:89:54:04:d1:f4:5a:
00:b1:55:46:ab:9b:1b:1e:91:2e:5f:c7:49:00:a1:
80:7d:ea:6d:f2:c7:14:dc:7d:d3:d0:ba:66:c8:64:
24:dd:9f:11:cf:05:76:c5:7a:03:d0:72:8a:5e:e3:
68:fe:f9:1b:83:6c:36:1e:3b:80:b3:47:6f:cb:4b:
73:3c:5a:ea:bc:8a:b6:91:18:7d:30:29:ad:19:36:
b7:a4:6a:2f:74:7c:12:a9:1d:47:dd:a2:2c:f2:69:
fb:55:5f:e1:9f:d5:23:3a:36:7e:06:31:72:f9:ec:
2a:89:d8:e1:95:73:f3:61:da:93:07:fa:1b:12:73:
58:5e:70:b5:2c:42:e4:f6:f5:54:67:fa:54:eb:a3:
2a:36:72:0b:7b:53:f3:25:2d:57:a1:f4:ba:2b:73:
dd:30:b4:99:76:0a:92:6a:c3:37:9c:b5:d8:93:b4:
08:a6:79:c9:bd:63:8e:e9:89:57:9e:25:90:be:98:
5a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:01:BA:9A:75:BC:A7:F4:B5:82:8D:32:2E:39:90:18:95:96:C4:9B
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/sQG6mnW8p_S1go0yLjmQGJWWxJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.168.0/24
Signature Algorithm: sha256WithRSAEncryption
54:01:53:63:2d:f6:a9:fb:69:9a:b7:f9:ff:65:98:8a:f4:1d:
a4:8c:7e:88:61:03:aa:d5:31:c4:18:f8:87:66:a6:3c:1b:2d:
07:7f:85:e6:d5:4d:d2:41:da:11:e2:7f:58:fc:0a:13:c3:0b:
17:d6:87:98:56:2c:c9:49:53:ae:07:4f:5e:06:30:03:eb:0e:
70:d9:21:65:88:ce:60:da:10:0f:d9:41:94:69:1a:cc:98:b3:
f8:6a:32:5e:b0:6e:65:c6:dc:4e:1b:a8:fb:2d:32:77:59:eb:
bf:4f:66:55:a7:56:33:0e:07:69:22:dd:31:ad:d2:6b:4e:13:
2b:12:fd:11:90:fc:da:02:f2:4e:75:f1:8e:85:a3:9f:c9:15:
67:b5:6f:04:f7:9f:50:c8:e1:4a:74:91:5b:10:b1:c9:e0:7c:
35:fd:66:10:75:5f:fb:18:75:1d:18:02:70:98:84:ce:ed:e9:
0d:3a:b4:25:67:41:fe:31:a1:94:7e:6e:ec:7f:82:5f:98:f9:
3e:2a:ca:e5:c4:96:f1:0c:6e:55:c4:14:ea:c8:f6:52:e3:a7:
22:65:13:f2:86:d7:98:9c:cc:5e:19:a5:cb:89:23:33:70:af:
c6:5a:59:60:f3:b0:aa:90:e3:b9:5c:b8:f6:d4:20:66:77:8a:
81:60:c8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:56:15 2025 by rpki-client