Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cc1WZxht8SE1ZBzpmtvIBl8rMeA.roa
File: cc1WZxht8SE1ZBzpmtvIBl8rMeA.roa (raw, json)
Hash identifier: h/TbU/N8p39Pc+lIlU3p6vyIgvFsAm2MEsdblyejx+4=
Subject key identifier: 71:CD:56:67:18:6D:F1:21:35:64:1C:E9:9A:DB:C8:06:5F:2B:31:E0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019484F095B21A4CAA340FCDD4CFA4D40BD7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cc1WZxht8SE1ZBzpmtvIBl8rMeA.roa
Signing time: Mon 20 Jan 2025 18:19:06 +0000
ROA not before: Mon 20 Jan 2025 18:19:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214111
IP address blocks: 193.222.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Jan 2025 23:39:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:84:f0:95:b2:1a:4c:aa:34:0f:cd:d4:cf:a4:d4:0b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 20 18:19:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71cd5667186df12135641ce99adbc8065f2b31e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b7:d8:db:23:9f:62:20:9a:a5:a3:2b:74:5b:
21:67:95:46:d9:57:a6:7b:80:91:ef:8a:81:b5:70:
e7:a5:dc:b3:b0:49:64:5c:bc:16:c7:e1:30:b4:0c:
6e:d3:76:9d:55:79:76:f7:f5:1e:72:5d:af:7f:27:
ab:b3:f2:e9:c7:fe:11:d8:16:5f:55:89:67:9f:b8:
0c:2f:65:76:78:33:4b:f0:7f:1e:e4:05:f1:09:47:
69:45:d1:1d:81:d1:1f:7e:1e:f2:c9:0e:4f:60:bf:
44:5d:c7:36:5f:4d:ac:1a:8e:0a:93:98:5b:0f:8b:
b9:7f:d6:fe:ab:fb:b8:97:ed:46:05:f0:92:1d:a8:
57:c7:a1:bb:bd:6c:63:5c:85:1b:f6:4e:56:ae:de:
e3:f1:6c:77:8e:e4:86:71:dc:2d:45:cd:47:f9:46:
4b:a5:cb:dc:86:ac:fe:26:c5:f7:86:d8:af:f8:47:
ba:0e:9d:b2:99:9a:d9:25:5f:54:e3:f8:da:76:7c:
ee:d2:e8:56:8e:69:06:b4:36:02:82:dc:5e:f2:10:
d2:82:19:ae:9a:c5:ff:a4:4b:cf:67:13:34:21:f8:
85:f1:dc:be:41:9d:b9:cf:aa:f6:23:6f:df:9e:a2:
e4:dc:ee:f9:23:a1:db:76:3e:fb:15:56:4a:89:81:
8c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CD:56:67:18:6D:F1:21:35:64:1C:E9:9A:DB:C8:06:5F:2B:31:E0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cc1WZxht8SE1ZBzpmtvIBl8rMeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.96.0/24
Signature Algorithm: sha256WithRSAEncryption
16:4c:e8:f4:f5:c5:70:d0:1c:19:dd:22:ea:08:ac:66:b1:83:
cd:b5:43:48:67:25:da:44:7e:18:1c:d0:d8:96:a6:90:7e:ee:
86:ee:ae:34:34:25:f2:af:a6:3c:f3:81:ef:cd:1b:2a:1a:b8:
3a:e0:3d:81:97:28:57:1d:5b:e7:02:c7:cf:a2:98:cc:f5:2f:
ff:10:3a:ec:30:73:ea:9a:8d:10:77:28:9f:87:29:1b:20:a3:
f9:7b:2e:d0:d8:a8:4a:48:73:8d:0c:0f:ad:b7:7d:0c:8f:32:
b3:b0:cf:45:77:a4:d2:6c:5f:c2:ad:a3:06:0c:34:97:70:10:
70:46:58:83:8a:c5:89:be:a8:11:9b:22:d0:35:43:1a:de:72:
03:33:10:7a:39:21:e4:94:63:d2:9c:d0:15:14:ed:4c:5d:ee:
5e:9b:ca:da:d0:6f:ee:2c:0e:d1:f8:6f:30:0c:99:59:62:aa:
fd:13:b6:e7:c7:27:d2:3a:b6:95:11:cd:97:cd:f1:d0:29:e1:
12:37:6f:86:06:36:21:67:fb:8a:16:9e:0c:10:ba:2f:b3:e3:
1a:de:25:4e:7c:58:bb:f3:ae:b4:b1:56:85:04:79:b8:56:de:
16:36:0f:cf:08:3a:94:63:b6:0e:69:5e:33:19:44:22:79:df:
c4:c3:92:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:23:45 2025 by rpki-client