Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/4y27jSbydZOcYcs6zuy-M2jdxRU.roa
File: 4y27jSbydZOcYcs6zuy-M2jdxRU.roa (raw, json)
Hash identifier: EDTyCKhN+ZJCdaTKIgno0hqpC5MxeZXVxA99qIMz4bU=
Subject key identifier: E3:2D:BB:8D:26:F2:75:93:9C:61:CB:3A:CE:EC:BE:33:68:DD:C5:15
Certificate issuer: /CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
Certificate serial: 018CC42486A8D74466320F366C0FFC6C522B
Authority key identifier: 31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/4y27jSbydZOcYcs6zuy-M2jdxRU.roa
Signing time: Mon 01 Jan 2024 08:29:37 +0000
ROA not before: Mon 01 Jan 2024 08:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8937
IP address blocks: 193.24.16.0/24 maxlen: 24
193.24.17.0/24 maxlen: 24
193.24.16.0/21 maxlen: 21
193.24.18.0/24 maxlen: 24
193.24.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:86:a8:d7:44:66:32:0f:36:6c:0f:fc:6c:52:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
Validity
Not Before: Jan 1 08:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e32dbb8d26f275939c61cb3aceecbe3368ddc515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:96:0e:39:30:68:d4:7e:cd:9b:86:fe:ef:51:
85:34:52:71:fb:66:2b:6e:d7:5c:f8:e8:8a:cb:ad:
aa:19:9a:e2:15:92:b8:c2:91:7b:6c:b8:1c:84:70:
57:8e:f8:a7:0e:a2:55:14:4e:4c:da:c5:b7:ab:a5:
1b:c1:43:24:e9:e7:45:cb:c6:77:56:71:2d:ad:a3:
ed:84:fa:4e:43:05:e7:ed:56:2e:d9:e2:b4:8d:a2:
c5:0d:a3:8d:5e:50:7c:ce:2e:76:98:12:f4:26:5c:
d5:bd:91:9d:ba:9b:ff:c1:5b:b1:ec:e8:18:61:db:
62:6f:ed:61:11:ed:10:50:54:36:c8:36:f3:8c:a4:
20:2b:23:0b:d0:13:e3:ae:51:20:19:d6:09:ae:71:
83:38:7b:97:1e:a6:3c:e0:5f:25:fc:77:37:85:2e:
29:98:48:8c:da:70:73:36:18:8b:0f:b5:f3:4b:d6:
b5:da:b3:73:4c:9f:94:79:26:4d:09:7a:64:76:6a:
df:72:63:09:3f:8a:d1:e7:fc:56:e9:70:06:21:6e:
40:eb:86:1d:b5:32:8a:e7:d4:6f:23:af:b9:c3:14:
73:93:c7:96:b6:c6:eb:6b:b5:b7:1d:b7:5f:42:8e:
fc:94:00:eb:2e:b6:38:a6:db:4b:cf:eb:26:e4:0a:
a7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2D:BB:8D:26:F2:75:93:9C:61:CB:3A:CE:EC:BE:33:68:DD:C5:15
X509v3 Authority Key Identifier:
keyid:31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/4y27jSbydZOcYcs6zuy-M2jdxRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.16.0/21
Signature Algorithm: sha256WithRSAEncryption
74:93:92:29:52:72:44:23:4b:22:63:bd:ae:e7:1f:9e:bd:34:
4e:5c:c8:40:7f:96:74:09:5b:37:67:f9:5c:d2:14:46:10:74:
a3:24:7f:e6:aa:8e:2b:9c:fe:29:d5:52:7d:d8:29:26:d5:9e:
b9:a4:f6:d9:78:ea:78:09:f4:ae:0a:d4:8e:14:12:2a:0d:db:
d6:1c:71:3d:40:46:5b:31:63:64:60:71:f7:79:be:65:49:ee:
82:7f:b8:9e:35:7f:60:f4:22:b1:73:97:f9:eb:e1:d9:5b:30:
20:1a:06:35:c9:62:cf:49:32:61:dc:c1:2e:a4:33:21:6c:03:
71:79:96:66:34:97:03:86:7a:68:69:f3:33:5d:e3:35:1d:2f:
f6:1b:2e:d7:d0:98:0f:2b:ee:a6:4d:18:3e:48:b8:eb:89:d7:
87:3c:2e:4e:81:9c:33:77:9b:2c:19:59:9c:cf:80:71:65:a0:
07:bf:1a:db:57:5e:1c:18:00:6f:8b:81:da:ec:81:07:37:e8:
4e:90:24:93:d7:8a:c8:c6:e4:11:b0:50:cd:44:e4:d7:53:51:
89:bd:e9:97:6f:d2:6d:db:c2:0c:4f:b5:79:92:02:11:b4:8f:
bc:b4:d0:be:b4:c5:21:2c:89:e2:23:da:e8:77:6f:be:2d:3e:
07:65:d5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:18 2025 by rpki-client