Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/lRwzCSD1qgu_Tru5fn1OsLBe84w.roa
File: lRwzCSD1qgu_Tru5fn1OsLBe84w.roa (raw, json)
Hash identifier: UxqDjViCgy7hhNJaiso+OCuDhvkHWUCbLIXXyGfTdDs=
Subject key identifier: 95:1C:33:09:20:F5:AA:0B:BF:4E:BB:B9:7E:7D:4E:B0:B0:5E:F3:8C
Certificate issuer: /CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Certificate serial: 01926C6A80A4E7111FCB738E709E6048767F
Authority key identifier: F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/lRwzCSD1qgu_Tru5fn1OsLBe84w.roa
Signing time: Tue 08 Oct 2024 13:56:11 +0000
ROA not before: Tue 08 Oct 2024 13:56:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21396
IP address blocks: 193.223.78.0/24 maxlen: 24
194.180.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:6a:80:a4:e7:11:1f:cb:73:8e:70:9e:60:48:76:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Validity
Not Before: Oct 8 13:56:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=951c330920f5aa0bbf4ebbb97e7d4eb0b05ef38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a8:42:3f:b5:4a:95:e2:3f:bc:ff:91:7f:eb:
af:1e:e5:83:8f:df:52:fc:39:3d:07:1d:ba:3f:5e:
73:86:aa:66:b2:44:32:1b:01:d5:d0:3f:54:26:4c:
8f:5a:b4:ed:13:41:01:16:29:a3:ac:d8:a9:c2:a4:
a1:aa:9d:ed:6c:59:23:22:5c:a5:06:b2:16:94:4f:
98:3c:39:27:a4:e4:f7:dc:ac:48:72:97:84:f0:16:
9f:0e:ba:af:01:fd:93:f9:73:59:a9:e3:a6:99:87:
64:01:28:51:b7:04:7f:04:76:4d:ff:a6:9b:cb:82:
17:c8:70:93:27:ad:a2:7e:f4:74:09:a8:ec:e7:21:
38:9a:b7:ba:eb:d7:08:ba:d9:cd:e9:5f:98:b9:c0:
3f:7c:dc:a3:68:e4:3d:43:b2:5f:1f:b6:9a:59:2e:
c2:1f:c6:cf:69:67:ab:ef:9c:0e:8b:bf:bf:ca:38:
6d:44:11:7f:e6:4f:d1:45:17:e8:ba:8e:75:25:50:
92:91:32:30:62:0b:de:9a:75:e8:fe:03:31:57:e3:
26:9b:d1:12:93:13:15:5a:6c:01:b1:37:f7:d7:5a:
2a:18:47:f2:6f:1c:a2:21:f7:d6:71:ad:e0:40:96:
f9:0c:a9:31:e3:a0:20:ab:11:9f:00:49:14:8d:33:
c3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1C:33:09:20:F5:AA:0B:BF:4E:BB:B9:7E:7D:4E:B0:B0:5E:F3:8C
X509v3 Authority Key Identifier:
keyid:F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/lRwzCSD1qgu_Tru5fn1OsLBe84w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.223.78.0/24
194.180.187.0/24
Signature Algorithm: sha256WithRSAEncryption
51:16:e0:29:9d:44:57:b2:d2:da:44:ab:e2:89:a9:8f:d3:af:
7f:da:fe:5d:7f:11:3b:5a:89:c0:c5:c0:eb:81:0c:48:64:92:
5b:42:54:ba:a7:ad:42:8b:a9:51:6d:fe:f6:33:09:9d:8e:7f:
bd:2e:9b:25:8a:be:2a:d1:df:03:6f:96:e1:37:2a:5a:5d:89:
18:8c:b9:40:4c:95:8b:41:78:e0:eb:28:c2:76:b7:80:7d:17:
c2:31:94:f6:9f:01:f3:97:67:90:d4:09:d4:df:8d:88:12:7d:
10:42:9e:a2:be:c0:ee:d9:e8:f8:af:4a:c7:be:5c:4b:a9:32:
42:27:70:bb:6c:a4:78:cf:03:0f:e8:64:75:57:39:e2:4e:f1:
1a:b6:b2:7d:f2:74:ce:0e:d5:06:1c:d6:ca:63:42:ff:e0:87:
3c:75:9c:e4:03:cd:bc:5f:a2:57:2f:3d:15:4f:77:31:70:93:
ea:25:e4:7d:49:00:9b:8f:ec:99:51:32:ad:ee:3d:39:42:c6:
18:45:eb:a5:3e:22:4d:24:3b:6a:af:a1:09:c5:86:43:64:13:
6c:01:2c:e0:13:5b:b0:c7:b1:fa:d8:ae:c0:e3:20:9e:ef:dc:
ad:93:0a:4b:9d:a2:56:1f:59:8f:f2:27:02:ec:41:f3:64:c9:
ef:d0:3f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:54 2025 by rpki-client