Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/IKQBTl9eILfkQehXzJ2pH-46-Rw.roa
File: IKQBTl9eILfkQehXzJ2pH-46-Rw.roa (raw, json)
Hash identifier: iHAHTZIRi+BXzvjIszd1jjlGLYiErgFMg3FbsaG8tqE=
Subject key identifier: 20:A4:01:4E:5F:5E:20:B7:E4:41:E8:57:CC:9D:A9:1F:EE:3A:F9:1C
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 018F9AB290CA2C3C1F09D208D2E992E2A912
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/IKQBTl9eILfkQehXzJ2pH-46-Rw.roa
Signing time: Tue 21 May 2024 10:29:04 +0000
ROA not before: Tue 21 May 2024 10:29:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207475
IP address blocks: 193.38.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jul 2024 12:57:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9a:b2:90:ca:2c:3c:1f:09:d2:08:d2:e9:92:e2:a9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: May 21 10:29:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20a4014e5f5e20b7e441e857cc9da91fee3af91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b3:77:ef:9e:2c:16:1d:29:19:58:67:01:e9:
97:dd:8d:7e:3a:3d:83:bf:bb:dd:b2:0d:08:8c:fd:
18:2e:e1:9d:df:64:1e:8f:7b:5c:78:a8:82:ee:6c:
51:08:a4:9c:84:54:82:10:d2:be:ed:70:74:3e:02:
81:fb:4e:4a:63:a6:81:54:0d:f9:6e:a1:e3:be:23:
73:1b:b7:ae:c2:ac:77:0a:92:ad:12:d3:09:e8:cf:
c6:e5:ec:25:03:5a:26:e9:10:da:b5:44:23:64:33:
ee:1f:fc:f3:c9:02:f2:ba:cd:91:df:a4:58:47:41:
25:23:a6:cd:94:91:23:84:ab:1a:2d:63:41:21:ef:
ff:9c:db:31:2d:34:74:17:15:15:f5:87:22:fc:6a:
91:e5:94:f6:4a:57:d8:92:82:58:65:04:6e:62:13:
3b:45:0c:8f:47:33:6a:50:ce:4e:87:d4:d6:08:b4:
8b:29:2e:23:32:34:b6:20:c1:a8:6c:7d:de:3d:31:
37:73:6a:e7:c1:08:d8:69:7d:6c:81:ce:05:4d:66:
2c:28:0d:7d:39:5f:e9:5c:53:a1:41:e5:72:78:cf:
b5:0c:89:45:28:d9:2a:f0:bb:01:86:6b:08:c4:e6:
93:5c:5f:c3:e8:18:10:35:75:13:2d:ff:f5:7b:de:
3f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A4:01:4E:5F:5E:20:B7:E4:41:E8:57:CC:9D:A9:1F:EE:3A:F9:1C
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/IKQBTl9eILfkQehXzJ2pH-46-Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.255.0/24
Signature Algorithm: sha256WithRSAEncryption
25:6e:ef:0c:87:b9:3d:86:a1:fe:20:97:04:9a:84:89:e4:52:
38:81:d4:f4:56:78:2f:31:db:dc:44:8a:4c:3b:ce:06:66:a9:
7e:b3:b2:f0:ca:10:0d:d6:cc:91:31:08:e4:96:db:29:f1:c1:
9e:15:54:04:ef:79:e1:e7:3a:96:27:20:9b:a3:c5:de:92:c9:
09:a9:c9:46:04:fc:d2:7b:c5:8f:0e:36:fb:66:a5:53:78:f8:
04:75:64:ee:e7:29:d4:de:d1:81:26:02:0b:84:46:53:99:4e:
8d:c6:18:54:38:65:e7:90:79:8c:bc:bd:f2:9d:7c:8a:1b:38:
2c:7d:2a:49:57:30:b3:14:0d:0e:2b:66:21:dc:a3:19:2f:be:
cd:b6:14:ab:40:53:e4:ce:e5:2d:ea:b1:63:11:67:6d:e8:d3:
fa:cc:9f:28:e6:32:19:37:71:a0:84:59:29:7b:1f:39:58:6c:
f2:79:63:1f:34:97:98:f6:0d:15:07:e0:48:b9:71:5e:95:74:
f0:3e:91:a1:cf:4d:9c:b1:ef:70:7f:a3:d2:67:86:56:a0:f0:
26:35:ae:98:05:a5:b5:4a:3a:50:60:e4:c1:eb:85:0f:9b:c4:
b6:87:da:21:d5:9f:eb:b4:94:16:fc:6f:f2:9f:a1:67:a2:fa:
c5:58:ff:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:24:05 2025 by rpki-client