Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/qI-m-8wmAKJyymdV55-T4AkAseQ.roa
File: qI-m-8wmAKJyymdV55-T4AkAseQ.roa (raw, json)
Hash identifier: TINffF3bFeDSLFpECJeV0MMde/3bRNP3deL6t/bmZ00=
Subject key identifier: A8:8F:A6:FB:CC:26:00:A2:72:CA:67:55:E7:9F:93:E0:09:00:B1:E4
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 01938F732D10DF5B1A5AE9892A8B7258DF86
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/qI-m-8wmAKJyymdV55-T4AkAseQ.roa
Signing time: Wed 04 Dec 2024 02:15:10 +0000
ROA not before: Wed 04 Dec 2024 02:15:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213772
IP address blocks: 193.187.112.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8f:73:2d:10:df:5b:1a:5a:e9:89:2a:8b:72:58:df:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Dec 4 02:15:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a88fa6fbcc2600a272ca6755e79f93e00900b1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a1:f0:75:4e:4c:e7:a2:9d:82:ea:94:e4:8f:
6e:3e:9c:cc:f3:1d:33:ca:aa:0b:fd:51:a1:9d:b4:
9d:66:c7:fe:cf:5d:74:b1:23:16:e1:42:cb:34:4e:
65:11:a9:18:4f:9f:ee:e4:f1:c8:4c:c8:9d:2e:d5:
dd:e0:b3:58:53:d4:0a:52:b5:61:3b:9b:5a:f2:9a:
77:5c:2c:0d:02:09:79:c9:af:3c:17:50:88:6f:e4:
51:4d:1f:19:02:a5:b1:45:16:d9:ac:42:97:21:81:
93:c9:b2:c9:01:0f:c8:dc:7d:7d:49:dd:5e:c4:e7:
1d:f5:9c:b5:1a:4d:28:d7:5d:1b:8d:07:ec:a1:78:
8c:db:fa:3b:63:f9:27:ce:3b:36:28:7e:ab:72:34:
6d:50:b7:f5:1f:c2:ab:b0:25:3c:f9:3c:13:f5:4f:
96:9d:ee:98:4e:ec:a3:a7:2d:04:51:03:22:dc:a2:
c8:6d:b9:10:c3:e2:5b:58:38:4b:2c:b9:b3:1e:95:
b5:31:4d:29:73:e7:a8:b6:fd:e9:c0:7f:a1:81:9f:
0d:62:0f:67:f4:a7:34:85:99:d5:1f:59:fa:69:7e:
c1:16:ca:52:1f:e6:65:a6:fd:b2:5e:14:92:26:c2:
52:06:0c:12:5a:7a:f6:a2:fe:54:0b:10:ba:df:60:
2e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8F:A6:FB:CC:26:00:A2:72:CA:67:55:E7:9F:93:E0:09:00:B1:E4
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/qI-m-8wmAKJyymdV55-T4AkAseQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.112.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:11:12:0e:51:44:33:6d:1c:14:bb:1e:fc:b2:b7:4b:e2:b8:
80:21:1e:36:e1:fc:95:79:71:c3:14:da:7c:22:34:94:5c:33:
40:1b:17:9a:7d:2f:f4:35:33:87:90:ae:1c:0d:7c:15:8a:56:
5b:67:7d:2e:04:1a:2b:f4:69:54:51:d6:b8:b9:5b:d4:6b:4a:
82:78:d7:65:dd:fd:c1:e1:bf:75:d7:4b:13:7f:a9:dc:cf:28:
53:fa:79:b0:e5:4e:fb:c6:68:a1:ce:2d:a4:dc:12:d0:7d:f1:
44:ec:3f:b2:78:35:96:09:0f:5e:75:14:24:7e:cd:aa:21:68:
8a:bb:2d:ea:64:d3:b2:d5:48:1c:0a:d6:e1:46:d9:34:3d:8e:
3f:42:08:18:40:48:55:85:67:00:ac:6c:1b:ad:dc:20:96:f4:
1e:f1:c5:47:98:88:25:af:a3:4c:f7:eb:26:1c:60:e2:0a:2f:
bd:be:18:b5:26:d7:83:7e:1e:54:6b:09:1f:d6:d9:cc:18:7a:
82:f5:37:53:a0:3a:6d:30:c0:c4:fc:c1:c4:09:3f:2d:9d:74:
fb:99:21:15:a4:b4:97:89:ff:23:75:d4:5e:70:d9:77:28:f2:
86:61:f5:d3:dd:e8:24:7f:08:d4:a5:4d:48:8e:40:c0:2d:fa:
38:dd:42:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:22:22 2025 by rpki-client