Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/qJSwcUQqR-I6qPPshYdmdU4vXh8.roa
File: qJSwcUQqR-I6qPPshYdmdU4vXh8.roa (raw, json)
Hash identifier: 9f/FgN9HDLK/Q7KqoZYwbPQ/hBnwZm/3074AlF01AzE=
Subject key identifier: A8:94:B0:71:44:2A:47:E2:3A:A8:F3:EC:85:87:66:75:4E:2F:5E:1F
Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial: 0193875D2C0D4A8EDD81810D2F39815A521F
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/qJSwcUQqR-I6qPPshYdmdU4vXh8.roa
Signing time: Mon 02 Dec 2024 12:34:10 +0000
ROA not before: Mon 02 Dec 2024 12:34:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13903
IP address blocks: 193.29.148.0/23 maxlen: 23
193.29.158.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 02 Dec 2024 15:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:87:5d:2c:0d:4a:8e:dd:81:81:0d:2f:39:81:5a:52:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Validity
Not Before: Dec 2 12:34:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a894b071442a47e23aa8f3ec858766754e2f5e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:45:b8:3d:9d:ae:b6:15:8c:32:c5:60:b6:a3:
2b:93:87:03:ac:13:bf:54:5a:d1:e2:01:8f:5d:8a:
b9:70:3c:ae:19:50:23:de:21:e3:e7:eb:20:81:5a:
0c:a5:c4:d3:f5:ff:7f:1b:56:98:4f:41:28:13:e0:
86:02:d0:bd:8b:6e:26:b3:34:3d:6f:25:aa:ae:c5:
2b:c6:15:bc:29:2f:d5:df:f7:50:95:1d:93:74:b9:
31:56:d6:47:12:be:69:06:43:30:27:3a:43:d6:70:
bc:00:31:20:db:56:71:d9:b5:1e:90:52:44:ec:f6:
47:10:5a:df:03:b6:5b:1a:c5:c7:cd:c0:bd:6c:7b:
35:6f:7c:a5:ee:bc:58:dc:3a:96:19:39:57:e8:65:
6b:7f:ba:ed:23:b9:06:69:d6:57:fa:19:30:02:90:
a3:7d:89:92:59:af:0a:ec:a6:4b:59:17:b8:d9:da:
c8:b1:9a:ba:43:35:a1:31:85:b6:ed:0a:96:72:23:
45:54:5d:f3:3b:92:5c:89:cd:a9:8e:02:18:c2:f8:
25:d9:91:af:64:55:d9:55:1a:5f:58:0e:cd:86:c5:
7d:ae:aa:55:b8:3d:25:14:72:a1:a2:e2:f1:b9:f6:
b8:d2:22:50:34:26:21:23:74:60:54:0c:3c:92:d5:
11:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:94:B0:71:44:2A:47:E2:3A:A8:F3:EC:85:87:66:75:4E:2F:5E:1F
X509v3 Authority Key Identifier:
keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/qJSwcUQqR-I6qPPshYdmdU4vXh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.148.0/23
193.29.158.0/23
Signature Algorithm: sha256WithRSAEncryption
16:01:88:83:72:32:01:53:9c:55:19:1f:f8:96:97:1d:41:d6:
5b:46:bd:97:5d:f7:06:40:f8:86:21:fb:41:b3:f3:58:44:d0:
d5:46:65:81:4a:e8:fb:0f:bd:be:de:b0:0e:44:b8:cc:7e:53:
b7:06:4e:5d:64:91:98:44:b3:f4:76:45:21:04:f3:67:d7:3c:
95:b6:83:81:1a:07:d5:e5:d6:e6:1c:96:bf:49:7d:d5:7a:ae:
35:e2:07:34:7c:91:82:4f:c3:9e:84:38:f9:64:46:c3:64:be:
be:58:61:96:fe:48:bf:6e:0b:82:ef:04:8e:88:24:30:97:7b:
e8:4e:2c:2f:9f:0f:2c:12:dd:24:f4:44:0b:f6:19:e7:31:a7:
39:71:c8:97:72:d4:d9:f1:67:d8:ad:95:62:fd:64:32:a9:ea:
60:5b:11:eb:f3:a8:39:f2:26:fa:3f:ab:74:f5:ef:8a:a2:01:
c0:eb:00:42:6e:4b:10:59:49:f3:ed:17:37:8e:e7:91:b1:93:
a3:55:9e:5f:11:c7:b3:78:a5:7e:67:77:63:58:c6:4b:06:34:
fc:4f:5e:2a:34:f0:bb:1f:9d:71:e0:e7:9d:78:1e:2a:a3:c7:
e4:20:07:f3:c0:f0:2c:92:0c:ce:e3:ae:46:bc:44:58:a0:35:
38:bd:97:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:35:40 2025 by rpki-client