Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_UcFatcYe4Zatalf7R1ZFTr98bE.roa
File: _UcFatcYe4Zatalf7R1ZFTr98bE.roa (raw, json)
Hash identifier: p6t47spTf3CrAGk9ZKFqldL8BARzl9nPUq1o8SEP9Ks=
Subject key identifier: FD:47:05:6A:D7:18:7B:86:5A:B5:A9:5F:ED:1D:59:15:3A:FD:F1:B1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01938C35B6A9A7B5A3F8D040F0CE125C7FF3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_UcFatcYe4Zatalf7R1ZFTr98bE.roa
Signing time: Tue 03 Dec 2024 11:09:10 +0000
ROA not before: Tue 03 Dec 2024 11:09:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.219.98.0/24 maxlen: 24
87.120.68.0/23 maxlen: 24
93.123.74.0/23 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Dec 2024 00:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8c:35:b6:a9:a7:b5:a3:f8:d0:40:f0:ce:12:5c:7f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 3 11:09:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd47056ad7187b865ab5a95fed1d59153afdf1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:84:9e:a5:b3:22:0c:2b:c1:50:6c:98:11:
20:8e:c9:41:65:e3:97:6c:08:06:cb:4e:e2:70:92:
5c:4b:f7:5f:95:4f:2b:01:1f:db:de:88:99:f2:c9:
ed:9e:06:c6:ce:b3:d0:3b:9e:4a:1e:8b:a6:63:7c:
82:b9:67:1b:84:d6:a8:4f:d9:65:35:39:a8:19:00:
cb:bb:b8:18:5c:6d:b5:77:80:88:99:c9:e6:2f:a1:
13:8c:e1:df:b9:6f:10:3f:f1:7e:5f:e6:60:d9:52:
5e:8e:a1:6e:c8:17:ef:6b:ad:c5:cb:b8:6f:d4:35:
8c:f8:ea:20:3a:32:6b:23:98:26:0e:c7:e9:e0:2f:
3f:4c:a7:41:6d:47:16:1c:31:1f:4b:f9:a4:83:28:
93:d7:de:22:af:b6:09:f3:71:90:08:e8:70:18:f7:
e9:aa:60:13:b5:ec:60:fe:9e:58:70:db:81:9b:94:
3f:b2:b7:8f:bb:26:79:c1:94:29:b6:e9:9e:cc:4d:
7c:44:61:fd:d6:1a:14:b3:54:4e:cf:77:36:c3:a7:
00:d3:3c:58:51:8e:06:e7:f3:7d:6d:fc:b2:59:ac:
3a:31:7f:d3:7c:71:3a:6b:f0:bb:f2:d5:7c:59:65:
2f:ad:65:bf:7b:4d:c9:52:37:3a:69:44:7b:83:44:
9c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:47:05:6A:D7:18:7B:86:5A:B5:A9:5F:ED:1D:59:15:3A:FD:F1:B1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_UcFatcYe4Zatalf7R1ZFTr98bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.98.0/24
87.120.68.0/23
93.123.74.0/23
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:0a:5b:39:f0:49:93:06:9c:9f:c7:e7:3b:2f:7a:2b:ec:77:
4a:67:09:7a:23:59:7b:f6:3f:d3:8c:8d:0a:eb:c4:b9:cf:06:
ba:88:62:22:46:bd:a5:27:a6:19:bb:af:ca:3c:d0:cb:e3:18:
17:b3:91:ca:77:a5:1e:d3:84:f9:8c:9e:68:48:67:c5:fb:8e:
b9:6c:3d:56:66:a6:bc:cb:f9:7c:df:16:36:c6:4f:9c:b8:5a:
95:0c:4d:b7:34:88:34:72:9c:9f:1f:f6:09:04:c2:c7:72:c8:
51:0a:cd:2f:a5:c6:ab:6c:3c:5d:de:f2:5c:90:bb:ad:c7:6f:
81:51:7c:90:15:0b:9f:b6:7a:3b:72:a6:b0:68:88:07:db:91:
11:b0:c5:0e:7d:50:8f:74:60:3c:f8:52:08:6b:44:54:ba:e8:
6f:0a:49:5e:e4:3f:54:0a:dd:07:e9:98:7b:4d:06:f2:f5:88:
05:ec:bd:03:54:22:30:c4:5e:a7:bb:92:f5:ca:58:0a:31:fa:
ff:4e:43:76:2c:b9:54:c8:04:ff:5d:0b:03:87:06:c4:1b:1a:
d6:3b:61:48:5a:3a:73:23:38:06:3e:de:0d:af:19:ab:e1:5d:
3b:fe:b1:60:26:0d:67:cc:ae:e8:1e:fd:cf:9f:7f:37:0f:bb:
fa:81:04:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:26:21 2025 by rpki-client