Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/TimrptqcMqT_KvA7gi2uXeUvnWM.roa
File: TimrptqcMqT_KvA7gi2uXeUvnWM.roa (raw, json)
Hash identifier: Q+hRxXEEw66uceqkg00XGHKiy4VusKU1jDhNFf3wWIw=
Subject key identifier: 4E:29:AB:A6:DA:9C:32:A4:FF:2A:F0:3B:82:2D:AE:5D:E5:2F:9D:63
Certificate issuer: /CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e
Certificate serial: 019423690064B840FD75894D3AC293CB9B6D
Authority key identifier: 11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/TimrptqcMqT_KvA7gi2uXeUvnWM.roa
Signing time: Wed 01 Jan 2025 19:47:51 +0000
ROA not before: Wed 01 Jan 2025 19:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 193.32.92.0/24 maxlen: 24
2a13:1000::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 28 Feb 2025 10:17:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:00:64:b8:40:fd:75:89:4d:3a:c2:93:cb:9b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e
Validity
Not Before: Jan 1 19:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e29aba6da9c32a4ff2af03b822dae5de52f9d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b1:83:fd:7d:a6:d7:cf:c3:1b:71:b9:de:c1:
b3:6f:be:c1:b2:79:bb:1c:56:3a:f1:3f:0c:89:a5:
09:74:b2:5c:9a:50:4f:38:68:a2:3a:30:07:39:01:
cf:07:68:b2:3e:b1:be:15:1e:85:38:95:1b:7e:1f:
99:2a:f0:f7:45:cc:b3:fb:8c:38:be:b4:de:46:63:
df:a0:87:bf:81:2c:66:cf:49:dc:4a:aa:aa:97:08:
70:76:22:85:1d:60:a9:4e:24:6b:99:6f:d6:72:f9:
eb:f4:bb:60:8a:77:cb:43:b3:81:99:dc:ed:ff:8f:
ef:f4:66:e7:fc:2f:cb:76:35:6e:8d:7a:4e:97:7b:
02:07:5a:6b:66:70:dc:ae:41:47:10:47:65:b9:16:
eb:d1:8c:0c:6d:00:29:fc:72:62:b6:a3:c4:7a:da:
e6:77:fc:97:07:3b:21:46:52:e3:0b:c1:70:b2:6c:
b3:42:65:c7:39:69:d1:39:a0:95:cb:c0:6c:14:45:
60:bd:af:06:0d:f5:94:3a:82:a8:7e:03:af:13:2e:
94:f6:0f:65:bf:d0:85:25:e4:31:da:64:6d:a7:4f:
75:09:77:e3:1b:44:f1:5f:64:b5:f8:90:60:4a:d3:
55:be:62:36:89:3f:61:b8:ae:e1:3f:3a:25:24:ee:
f2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:29:AB:A6:DA:9C:32:A4:FF:2A:F0:3B:82:2D:AE:5D:E5:2F:9D:63
X509v3 Authority Key Identifier:
keyid:11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/TimrptqcMqT_KvA7gi2uXeUvnWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.92.0/24
IPv6:
2a13:1000::/29
Signature Algorithm: sha256WithRSAEncryption
1d:36:24:d0:7c:5b:43:e5:40:ef:39:34:c7:03:24:21:d7:95:
3d:60:e9:a6:b0:be:f2:47:c2:79:cf:4b:91:7f:10:74:78:56:
85:64:99:15:25:3f:4b:9e:8d:a5:c2:f4:05:19:cc:32:d9:6e:
a2:39:1c:3f:b2:56:06:e4:57:19:39:16:e0:5f:73:91:de:81:
44:65:85:83:86:50:a4:3b:0a:f9:46:4a:f4:6f:b5:b7:ca:ec:
cf:5c:b8:20:fe:a5:82:e3:33:3b:51:57:48:2c:72:5a:4f:03:
9e:99:1f:d1:40:be:ca:7d:6a:3b:fb:40:01:7e:5a:de:eb:b2:
cf:b7:f8:a8:66:70:20:b2:2e:b0:98:8c:4b:78:2c:eb:4e:ba:
0e:99:ea:20:48:41:af:25:0b:f6:94:16:ca:87:b3:75:0a:da:
b5:8d:d1:be:a0:93:95:79:32:eb:40:d8:50:9f:8d:ca:74:80:
7f:2b:bd:6e:5d:6c:63:cb:ce:01:e7:f1:33:6d:80:c1:4e:46:
f7:c8:5a:e2:18:dc:59:cf:7f:93:62:0c:e9:82:57:e7:1f:10:
0d:fa:75:bd:ff:df:07:be:4b:64:74:e6:02:41:77:f6:d3:ea:
5a:13:59:ed:59:c4:11:99:02:f9:29:c3:7a:d7:3d:72:7e:77:
8e:20:74:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:08:56 2025 by rpki-client