Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/qJYs_O4lb34IEErV5qeRuClv9tc.roa
File: qJYs_O4lb34IEErV5qeRuClv9tc.roa (raw, json)
Hash identifier: R4zr0aLslz62HQ/0VspQSCgwQJ0Q9RbE9IKT+HEf5hs=
Subject key identifier: A8:96:2C:FC:EE:25:6F:7E:08:10:4A:D5:E6:A7:91:B8:29:6F:F6:D7
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0194206854A379F04687F3AF676380665B5E
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/qJYs_O4lb34IEErV5qeRuClv9tc.roa
Signing time: Wed 01 Jan 2025 05:48:15 +0000
ROA not before: Wed 01 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 193.233.21.0/24 maxlen: 24
193.233.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Feb 2025 20:58:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:54:a3:79:f0:46:87:f3:af:67:63:80:66:5b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8962cfcee256f7e08104ad5e6a791b8296ff6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:17:0f:3b:f4:49:b8:9e:f6:17:ab:9e:7f:
c0:23:a3:31:76:1a:76:a5:64:14:42:ab:ea:a5:06:
4f:70:d2:30:83:38:b6:6b:19:6e:65:72:83:9d:b9:
d7:da:5c:6d:92:15:bf:08:fc:06:4c:fd:53:e4:15:
71:60:08:f4:f9:f2:43:82:3d:e0:e4:ad:a3:e4:ff:
91:23:20:72:09:3e:16:03:a7:fe:ee:c2:a3:dd:5f:
6a:8b:c5:a7:32:9d:d4:06:61:88:c6:5d:14:6c:33:
cc:a9:66:39:c6:6b:8a:47:d6:60:37:1b:07:79:7b:
23:32:9b:d2:72:9b:6c:81:e3:4f:77:88:d3:7c:84:
11:19:80:3a:f0:f8:fd:9d:7d:70:62:e9:f6:81:86:
df:4d:c6:e6:e8:27:52:25:32:e1:91:da:ba:01:97:
85:4f:6e:29:e4:21:cc:a4:27:bc:fc:33:70:42:d0:
78:89:6f:ca:f2:e9:85:ca:53:7b:c2:4c:c1:2a:0c:
37:2d:98:d3:7b:0f:97:e6:46:b9:89:df:00:fc:45:
f6:43:6c:67:a4:bf:11:2a:39:76:2f:e4:30:6b:61:
90:74:37:91:c3:01:bc:f1:0d:83:65:2e:a3:47:56:
b3:6f:73:e7:4c:22:8e:4f:1f:71:5b:0c:94:bd:99:
cb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:96:2C:FC:EE:25:6F:7E:08:10:4A:D5:E6:A7:91:B8:29:6F:F6:D7
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/qJYs_O4lb34IEErV5qeRuClv9tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.21.0/24
193.233.132.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:fd:0a:ea:da:8c:8e:a2:f6:fa:21:68:65:69:3c:ef:d1:2b:
ef:b7:95:9b:71:a2:da:f3:16:0b:dd:06:4e:8f:21:46:79:8a:
84:71:3d:e4:39:f9:5e:78:16:21:a5:88:5e:43:65:1a:48:ac:
b8:8c:dc:f0:8b:52:22:19:4b:de:23:47:8b:ba:79:12:69:fc:
5a:84:37:9c:8d:fd:1b:bc:9b:7b:a5:46:68:bb:d6:ed:20:53:
46:57:42:3f:32:62:52:f7:65:13:aa:20:2d:f8:a2:92:7c:c5:
87:6b:6a:75:90:af:3d:ff:e3:77:b6:78:58:36:75:a7:4a:ac:
57:d4:96:27:59:1c:b4:3e:a4:b7:f2:cc:48:c5:c2:f9:1b:d0:
df:46:8a:22:8d:f1:04:c0:a3:03:70:5f:b8:3f:96:ff:f4:4f:
04:1a:93:f7:54:e7:6c:af:75:f3:2a:30:a8:1f:b3:8a:9e:3f:
ce:82:2b:c1:6f:56:3e:10:c5:d3:b6:15:1d:7f:b7:a6:04:b3:
71:b4:e4:7b:d2:08:42:ca:d2:6a:61:4d:f6:a7:c3:25:ca:d9:
72:b0:07:1c:07:55:0d:a2:d7:8f:fe:af:92:87:00:13:6a:e5:
22:0d:79:5f:4a:b1:18:a4:cc:d2:f6:99:84:c6:ec:17:07:a8:
f5:12:3e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:09:52 2025 by rpki-client