Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/cBHVer1qbHnmlVaWceSXrlgbFfs.roa
File: cBHVer1qbHnmlVaWceSXrlgbFfs.roa (raw, json)
Hash identifier: p0P0hTZ55ldMsiEB15sPjoyfIvS/iQQy/7O0FSYjL2s=
Subject key identifier: 70:11:D5:7A:BD:6A:6C:79:E6:95:56:96:71:E4:97:AE:58:1B:15:FB
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C12E78F12658A580C91A4AB2A5F4B
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/cBHVer1qbHnmlVaWceSXrlgbFfs.roa
Signing time: Wed 01 Jan 2025 01:47:41 +0000
ROA not before: Wed 01 Jan 2025 01:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13181
IP address blocks: 193.230.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Jan 2025 18:39:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:12:e7:8f:12:65:8a:58:0c:91:a4:ab:2a:5f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7011d57abd6a6c79e695569671e497ae581b15fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b6:f6:6c:87:67:25:5a:7b:83:3f:a0:1f:30:
5d:d2:0f:c9:77:13:61:fa:0c:10:05:14:c0:7a:7a:
a4:9e:27:1e:c3:f7:31:6e:53:b8:8b:16:1c:51:5f:
6c:76:7e:74:33:95:b3:41:7a:8a:67:79:33:ef:a4:
1c:e5:6e:1d:2d:89:65:7b:1d:b4:a0:27:0c:62:14:
0c:ea:46:17:d6:38:61:d9:70:c7:14:e9:4d:05:e4:
da:86:2f:e2:47:87:2b:9c:c9:41:28:3c:52:6c:9b:
24:b2:72:76:f8:b5:8f:85:75:a9:16:55:4d:08:f7:
90:09:c2:36:50:7e:b8:68:8b:7b:e5:24:79:5e:d6:
30:b2:18:c9:df:ae:15:f8:37:4e:2b:45:9e:8c:1c:
9b:e4:60:36:66:2c:74:bb:13:c2:08:c5:1e:77:6b:
1b:7f:17:b8:51:9a:d7:c4:57:37:1e:94:92:3f:00:
ae:78:d7:ed:a2:46:ac:40:84:06:67:cc:e8:db:a0:
27:5a:c5:30:48:0d:3b:be:6c:1c:f2:50:2d:ae:a6:
9c:16:47:69:18:20:80:ce:6d:04:c0:19:a7:3b:d3:
77:1b:f2:d3:cb:29:88:1b:cf:f9:61:14:ab:27:6a:
09:94:8a:34:5a:66:46:f4:b6:2c:d6:e0:b2:4f:ab:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:11:D5:7A:BD:6A:6C:79:E6:95:56:96:71:E4:97:AE:58:1B:15:FB
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/cBHVer1qbHnmlVaWceSXrlgbFfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.230.191.0/24
Signature Algorithm: sha256WithRSAEncryption
90:f0:a8:cb:df:9f:c9:94:b9:ae:f2:36:4d:2f:e3:44:ce:1b:
6e:b7:4e:45:ea:a5:dc:d3:a7:5f:18:ff:d3:4c:14:14:64:16:
b8:ac:b1:b5:18:9f:f0:ec:84:db:fa:31:5b:f4:29:4e:c8:6f:
fe:21:9c:e0:b6:2f:9a:4f:36:7e:bc:29:e6:6b:dd:8c:fb:61:
d9:91:96:a2:d2:67:49:4e:3b:73:0c:14:cf:4c:38:37:8e:65:
41:6f:4f:f0:3e:cc:01:66:2c:9f:9f:c1:03:62:b9:ac:d8:f8:
93:f7:49:26:10:42:0b:09:76:5e:b2:0a:a6:f8:b7:bc:cb:b4:
c8:60:e0:7c:a9:14:41:f5:83:ee:e5:6a:e6:cd:3c:59:df:1b:
4a:1f:72:c0:e4:02:61:e8:70:86:06:1b:95:cd:c8:3e:70:53:
6e:c5:09:f8:49:12:e9:da:b4:1d:ef:4e:a3:db:26:0b:12:c7:
69:2e:b9:5d:e0:79:7e:42:fb:81:6a:7d:5f:e6:03:e5:36:41:
22:07:e9:c9:fd:43:5e:d5:52:ad:c5:c6:5d:47:4f:22:fa:bd:
65:da:27:83:54:28:2f:5a:a1:e9:23:f6:f9:1e:81:6d:d0:2c:
c6:ac:85:a0:ac:c3:df:0e:74:68:cf:43:7e:73:a8:a0:5f:cd:
7c:31:d3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:51 2025 by rpki-client