Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/ehRTpS4atm_gd1HH1CMPaf7twgo.roa
File: ehRTpS4atm_gd1HH1CMPaf7twgo.roa (raw, json)
Hash identifier: XZGvpCL/0ip82EYuHaqJpoleqSP75ld/Q6nrk9baDgc=
Subject key identifier: 7A:14:53:A5:2E:1A:B6:6F:E0:77:51:C7:D4:23:0F:69:FE:ED:C2:0A
Certificate issuer: /CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Certificate serial: 018CC80195E64E6BA5368E05DE4E9C9E823E
Authority key identifier: 21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/ehRTpS4atm_gd1HH1CMPaf7twgo.roa
Signing time: Tue 02 Jan 2024 02:29:56 +0000
ROA not before: Tue 02 Jan 2024 02:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34720
IP address blocks: 193.178.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:95:e6:4e:6b:a5:36:8e:05:de:4e:9c:9e:82:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Validity
Not Before: Jan 2 02:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a1453a52e1ab66fe07751c7d4230f69feedc20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0f:42:0d:8a:1e:2b:ee:af:a9:32:06:e8:67:
93:d4:ee:ef:52:78:43:d0:18:f4:3f:1b:fe:e0:18:
aa:fd:3a:ad:a8:e5:43:b6:97:79:65:6a:b2:05:00:
84:38:ac:4a:48:90:b0:c6:5a:d5:fe:cb:f1:51:d0:
ce:78:33:ec:91:54:1d:29:4e:e1:72:8a:22:ac:be:
2f:d4:f5:5f:0e:24:da:80:ca:53:9e:8e:ac:13:27:
95:9c:22:21:c6:bc:9c:66:5e:fc:5a:0b:3c:b8:68:
ff:36:b4:eb:a2:57:89:0f:dd:8b:c2:e0:a0:70:df:
9e:28:fe:a3:ef:12:67:30:3f:71:b1:4b:71:56:6d:
97:a4:51:35:c3:91:c4:9e:ac:f5:76:50:62:3a:71:
a3:34:66:2a:5c:e4:55:2f:d9:75:45:4d:d8:14:10:
f3:cd:d5:b4:bf:34:4f:a3:7e:7f:21:96:d2:fa:d7:
b5:7e:1d:20:a3:37:85:44:d0:c9:5d:63:5b:dc:db:
22:70:90:3a:f5:c3:a2:5d:e4:d8:ef:40:2e:6e:f9:
d9:a2:df:a1:8d:bb:15:b6:20:73:19:6b:dd:8a:87:
9d:27:5b:d4:0f:90:1d:06:20:6d:a7:fd:50:ed:94:
71:0c:ad:5b:cd:5c:8f:e5:00:83:d3:2b:41:05:6b:
8d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:14:53:A5:2E:1A:B6:6F:E0:77:51:C7:D4:23:0F:69:FE:ED:C2:0A
X509v3 Authority Key Identifier:
keyid:21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/ehRTpS4atm_gd1HH1CMPaf7twgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.162.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d8:9c:5f:d2:86:23:ef:24:6f:0b:05:fb:99:d9:fc:86:2d:
33:cc:5c:24:fe:f2:f5:8d:cf:a9:ba:c7:e8:a4:05:84:04:54:
23:74:70:e3:f0:78:c0:f8:6d:2f:d3:eb:40:12:0c:ee:1d:05:
bf:8e:69:34:13:40:e0:be:ad:ff:c0:65:b1:59:db:96:a1:7b:
5d:11:a5:95:6f:63:96:07:75:b2:f2:0a:e8:45:17:12:b6:69:
53:67:c8:0f:32:3c:cd:62:fa:37:ca:a9:87:10:6b:70:3b:c5:
0c:50:32:83:e6:34:a2:5c:bd:a5:0d:ae:2d:a3:b1:b4:70:cb:
8b:8c:50:f7:96:49:50:fe:29:0c:6a:52:03:13:4e:8b:2b:e1:
24:9c:b4:ac:68:03:fe:27:e0:2d:c9:9e:6e:ba:41:13:d6:6f:
7c:56:02:ca:e8:5b:58:12:ed:84:d6:4f:9c:fe:54:ee:bc:06:
1e:ce:6a:42:c5:cb:b6:9c:d7:8a:6b:6c:45:73:8a:73:c2:0b:
97:4b:2d:48:34:e0:99:47:33:b2:66:04:bd:41:92:d5:92:c4:
ec:4b:6f:f3:36:09:31:ed:a8:62:df:3b:83:74:22:a0:0d:75:
14:40:85:bc:9a:5d:c9:cd:f1:ed:5f:3e:5d:c7:71:97:d7:85:
9e:8a:01:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:53:00 2025 by rpki-client