Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/9dYYFcd_O55-JutQL1MGiVaz38A.roa
File: 9dYYFcd_O55-JutQL1MGiVaz38A.roa (raw, json)
Hash identifier: fbxv3zpGeYvxkViMkuXNb2PNg6s+FxZvS0gnSadH7Cs=
Subject key identifier: F5:D6:18:15:C7:7F:3B:9E:7E:26:EB:50:2F:53:06:89:56:B3:DF:C0
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 01914AC2177610C0F660ADEB70B0BA2446D4
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/9dYYFcd_O55-JutQL1MGiVaz38A.roa
Signing time: Tue 13 Aug 2024 08:01:59 +0000
ROA not before: Tue 13 Aug 2024 08:01:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29641
IP address blocks: 193.124.189.0/24 maxlen: 24
193.124.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 09:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4a:c2:17:76:10:c0:f6:60:ad:eb:70:b0:ba:24:46:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Aug 13 08:01:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5d61815c77f3b9e7e26eb502f53068956b3dfc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:64:f9:e2:bd:66:69:0d:95:f9:10:f9:c4:a7:
08:6c:7c:98:9e:84:2f:b2:e9:ed:39:68:3f:19:35:
35:36:cb:fe:98:b4:58:a2:db:02:9a:ad:79:ff:60:
40:b0:6d:63:24:23:0e:19:ad:95:b9:22:0b:87:c0:
8c:8f:0a:f5:46:04:0d:3b:41:43:04:44:f5:37:9b:
09:c4:72:ee:28:14:88:89:85:f3:97:4f:00:a9:28:
ca:6e:5b:b3:48:10:a2:2f:c4:51:2a:ab:34:ba:8d:
93:33:3a:75:c4:dd:b2:91:f9:f4:dc:35:a8:19:0a:
e4:70:ce:d0:d8:30:db:44:f7:bf:90:ae:21:86:44:
38:45:e7:33:7f:5e:3b:c6:ae:2b:1d:02:af:92:cb:
1f:99:8c:24:d6:d2:49:0a:46:37:c5:5e:23:af:2a:
52:d8:21:44:f9:2a:a7:5e:67:03:2c:37:3e:ef:63:
76:55:9d:a5:7a:55:8e:61:7f:f4:2e:11:32:b8:1c:
fc:35:db:77:df:d6:d3:fc:e0:22:0d:08:62:35:e1:
bc:26:19:ae:b4:ab:9b:d9:e6:a1:85:97:6d:d8:67:
67:da:60:f1:cc:f2:56:f9:d3:61:8e:1f:5f:46:34:
18:de:bf:1e:79:7f:1e:e5:0b:f1:d7:34:e1:a0:3a:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D6:18:15:C7:7F:3B:9E:7E:26:EB:50:2F:53:06:89:56:B3:DF:C0
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/9dYYFcd_O55-JutQL1MGiVaz38A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.189.0/24
193.124.191.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:06:59:c1:75:ab:4d:47:06:a1:a7:91:ca:37:9a:18:80:7d:
70:8c:bd:e5:19:99:50:f8:28:d9:8f:dd:28:65:0b:65:be:ed:
7f:9f:8f:cb:b4:0d:2c:d4:0f:ad:1d:6a:aa:aa:fd:3f:10:8f:
c9:99:d0:2b:71:38:29:2e:4a:32:2b:06:ae:68:44:08:85:cc:
15:cd:27:a0:70:50:7e:c5:77:fa:78:ad:de:47:cb:7c:d6:5f:
ff:a6:c2:b2:d4:ad:83:7f:58:bf:4f:09:1e:b3:66:75:a4:ca:
30:07:fc:a5:f3:98:54:22:11:49:21:32:4c:ab:74:38:9b:8f:
20:e4:6b:27:82:84:2f:a9:1e:47:62:88:7d:21:61:1f:36:5b:
2b:da:60:2b:82:7c:0c:e9:46:a5:32:85:14:7f:59:fe:68:45:
5e:bc:16:d7:9f:c0:fb:75:f6:0b:5e:73:84:91:a4:4a:a6:95:
cf:0c:c6:37:2a:b9:b9:40:dc:f2:bf:0c:7c:19:c4:8f:18:06:
5f:c1:98:56:91:97:29:51:45:2b:e1:a4:9e:eb:77:f9:8c:0a:
4c:53:f5:8f:01:8f:7b:3f:0d:62:4c:3f:60:ad:ac:24:cf:e8:
5c:3d:f3:fb:4b:1c:45:77:e4:4c:a0:69:a3:b4:ce:2f:5f:b2:
bc:ca:42:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:28:43 2025 by rpki-client