Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/CVECOfMFy9nVNtgGCXPVDJFC9wo.roa
File: CVECOfMFy9nVNtgGCXPVDJFC9wo.roa (raw, json)
Hash identifier: vuSMPSMHKC2WDEuipFzC9nm9WvCfMpD3Ewjmm8VFZUU=
Subject key identifier: 09:51:02:39:F3:05:CB:D9:D5:36:D8:06:09:73:D5:0C:91:42:F7:0A
Certificate issuer: /CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Certificate serial: 018CC5004368231E6D6553EA1C5E3744B5F9
Authority key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/CVECOfMFy9nVNtgGCXPVDJFC9wo.roa
Signing time: Mon 01 Jan 2024 12:29:37 +0000
ROA not before: Mon 01 Jan 2024 12:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31545
IP address blocks: 193.16.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:43:68:23:1e:6d:65:53:ea:1c:5e:37:44:b5:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Validity
Not Before: Jan 1 12:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09510239f305cbd9d536d8060973d50c9142f70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b3:6f:14:77:34:bb:b6:40:25:35:7d:fd:cc:
99:66:fd:4d:a5:bd:64:a0:39:eb:1b:0a:ac:d8:7c:
33:fa:65:86:5a:7e:cd:ac:6d:09:6f:4a:de:13:41:
8b:cf:a0:63:36:54:f6:a0:57:22:2b:e7:f4:61:b9:
7e:28:e8:02:44:61:4f:e9:3b:48:d3:a5:ad:62:df:
24:6f:78:e5:2b:8e:1b:3d:89:d1:32:d1:63:30:eb:
f7:8c:0c:dd:03:79:08:27:a2:84:bf:6f:b3:98:79:
ff:3d:23:77:99:03:44:16:0a:66:d7:9d:37:54:05:
65:12:0d:ac:fc:75:71:4c:42:40:20:59:a8:5d:28:
5f:11:9d:24:21:2e:db:6b:54:8c:19:4d:17:93:73:
1f:29:e8:ba:86:97:1f:22:36:d7:db:86:8c:71:a6:
10:93:cc:c2:2f:a3:a0:23:70:8e:75:7e:72:d2:31:
b7:90:7e:46:96:dd:ef:80:45:d9:a3:ed:a8:06:ca:
76:cc:50:67:ba:79:e7:3a:45:5a:9a:d0:be:e7:c1:
f9:4f:6e:a3:a1:e5:07:d6:bf:b5:23:a6:f1:29:04:
dd:fe:87:a7:01:a8:db:ab:0c:c8:8c:38:2a:d8:18:
59:8e:74:09:60:02:7b:1d:1f:31:cb:5f:02:20:c1:
5b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:51:02:39:F3:05:CB:D9:D5:36:D8:06:09:73:D5:0C:91:42:F7:0A
X509v3 Authority Key Identifier:
keyid:5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/CVECOfMFy9nVNtgGCXPVDJFC9wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.109.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:50:a4:c0:c5:59:6a:7f:9c:9a:69:87:e9:2d:20:e3:f4:72:
0f:c4:f9:cd:f7:6c:39:6f:b6:e8:6d:dc:86:7f:59:b4:36:8a:
73:9b:42:b3:54:f0:e7:23:b0:36:c5:08:e6:2f:39:2f:e6:a8:
20:5f:cb:7f:f2:80:3d:fe:32:62:71:47:3c:29:7a:e2:0c:7e:
45:67:36:da:9e:57:df:56:41:4b:53:0a:ee:75:bf:51:86:9f:
b8:9e:3e:ae:21:36:be:1d:10:e2:fb:5c:82:25:f2:84:8f:69:
90:d1:15:50:66:a7:4b:fa:80:eb:d6:af:91:a0:0b:94:e0:d6:
e4:09:d6:97:03:7c:48:50:08:47:ee:13:f8:1b:49:e6:09:ec:
c9:14:4b:0b:26:9b:71:75:06:47:e8:a1:ba:76:9e:fe:1b:09:
98:4b:5b:46:2f:28:d3:f3:db:fa:10:3d:27:47:ce:18:d7:60:
84:a4:6c:f2:2e:e7:36:c2:1e:e8:07:8c:62:b6:60:3e:e4:87:
7e:9a:24:fc:98:e0:23:b9:6d:82:ca:95:bf:0e:45:90:74:03:
cc:e0:01:86:c6:4e:a4:dc:44:45:ae:5f:44:2a:18:c9:9c:24:
b5:bb:92:89:c2:36:fc:30:83:20:e6:5c:0a:7f:a1:3e:c3:6c:
5a:17:f2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:55 2025 by rpki-client