Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RJlAYucS9buZ_WIiW-YTdrwXrso.roa
File: RJlAYucS9buZ_WIiW-YTdrwXrso.roa (raw, json)
Hash identifier: 83r2XBPUEtw8ZkvvlvIe88yRLWaTR3fIcycHNuhSLuA=
Subject key identifier: 44:99:40:62:E7:12:F5:BB:99:FD:62:22:5B:E6:13:76:BC:17:AE:CA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0193880DDE8B05C04AFEA7424B57EA89E04B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RJlAYucS9buZ_WIiW-YTdrwXrso.roa
Signing time: Mon 02 Dec 2024 15:47:10 +0000
ROA not before: Mon 02 Dec 2024 15:47:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 193.124.227.0/24 maxlen: 24
195.133.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Dec 2024 14:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:88:0d:de:8b:05:c0:4a:fe:a7:42:4b:57:ea:89:e0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 2 15:47:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44994062e712f5bb99fd62225be61376bc17aeca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a3:2c:6a:30:73:75:cc:17:4d:da:ad:7e:cc:
db:0a:c7:94:62:fc:35:7e:25:64:2c:99:92:26:51:
f3:72:c9:32:36:bf:10:23:2c:f8:49:ff:b5:aa:c9:
d0:76:91:a0:4a:7c:8d:18:37:e6:22:f3:1f:b3:cb:
9d:11:de:1a:c9:81:d2:2b:ae:10:3f:2b:fa:a9:b5:
5c:48:df:b9:02:42:b2:86:f1:62:f5:1d:56:19:e6:
85:9f:d2:29:dd:3e:27:49:28:76:37:ca:20:2d:4f:
11:ee:64:3e:7a:e8:cd:e9:77:84:f1:99:c0:19:6b:
8f:5c:88:e5:74:55:99:b6:99:f6:d5:91:03:d4:38:
ef:85:5a:d9:33:92:b6:38:6d:8f:79:22:ce:ae:8b:
3e:a9:92:dc:99:d0:c1:9c:6d:b0:5f:bf:8e:39:1e:
b9:41:33:d5:18:be:26:17:b0:ab:e7:52:50:ee:97:
83:38:8c:cd:4c:9b:9b:64:13:af:fb:c2:e8:10:03:
79:cc:ff:56:1e:15:51:ad:4b:31:4e:41:cb:09:64:
14:24:46:d1:22:7f:ce:1b:80:de:8a:da:3d:82:3c:
dd:ab:55:57:79:6d:ab:e4:8d:0f:d1:7c:d4:25:ec:
27:de:64:ab:a9:65:04:5b:78:46:80:37:96:f1:12:
1a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:99:40:62:E7:12:F5:BB:99:FD:62:22:5B:E6:13:76:BC:17:AE:CA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RJlAYucS9buZ_WIiW-YTdrwXrso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.227.0/24
195.133.59.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:d7:d8:ba:50:64:8a:4c:e2:33:a6:46:55:81:bb:e8:32:4e:
cb:be:b4:63:1f:65:ca:45:f5:12:a6:f1:a6:c0:9f:05:e3:a3:
c8:16:6b:25:92:4b:38:1f:6e:2b:a4:c0:1b:fe:c1:27:07:8a:
81:10:e0:45:48:84:3a:70:40:2e:5b:b6:79:ba:81:6d:28:2b:
ab:e9:62:1a:9a:b3:a7:58:16:9f:0c:cb:ad:65:18:13:d6:77:
43:a0:7c:3d:d7:fa:f1:e4:b7:ee:93:54:92:d9:b9:7b:f4:03:
1d:ea:ae:3c:ab:6d:e6:72:99:13:a7:d1:bc:61:be:c8:3c:cd:
3d:9c:29:e4:68:9b:06:c1:8b:0c:02:64:2a:58:10:21:6c:92:
4e:ab:4d:4c:4b:70:72:3c:b1:a6:12:bd:31:0f:f5:b0:95:7f:
13:b9:4a:04:f3:3b:a4:b8:a6:9b:66:bd:2b:28:2d:53:49:91:
d6:71:eb:55:9f:67:f9:c6:54:64:d2:2f:99:5f:b7:af:2e:a3:
d6:4c:8d:f0:36:57:76:97:15:cd:09:60:81:6f:61:55:0a:89:
3e:9b:c4:f8:32:76:b8:d7:c0:02:de:3c:8b:58:f8:6c:a5:71:
2c:e9:15:5e:b7:e5:e7:ba:96:e5:76:62:ef:b8:91:8b:f5:a2:
76:43:a1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:09:13 2025 by rpki-client