Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/jlWew8iNrp3uyCwc-UKnD6vas-g.roa
File: jlWew8iNrp3uyCwc-UKnD6vas-g.roa (raw, json)
Hash identifier: 7N/J3vw7NkvttQIZ0G80Gk9goNriL+qvkWAH7xo9T2w=
Subject key identifier: 8E:55:9E:C3:C8:8D:AE:9D:EE:C8:2C:1C:F9:42:A7:0F:AB:DA:B3:E8
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 0193C6F36E7CECA0DBA55CC33FA01C8EB346
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/jlWew8iNrp3uyCwc-UKnD6vas-g.roa
Signing time: Sat 14 Dec 2024 20:54:22 +0000
ROA not before: Sat 14 Dec 2024 20:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206271
IP address blocks: 195.93.226.0/24 maxlen: 24
2a0a:280::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 15 Dec 2024 17:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c6:f3:6e:7c:ec:a0:db:a5:5c:c3:3f:a0:1c:8e:b3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Dec 14 20:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e559ec3c88dae9deec82c1cf942a70fabdab3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bf:f4:6f:a4:b6:70:f1:5d:0a:e7:67:0b:c9:
52:8c:af:8f:84:38:28:ae:1e:17:07:2b:b9:cc:c5:
e6:a8:ae:28:f6:49:25:c3:d5:6c:8c:a6:6e:36:66:
d0:14:de:48:d7:3d:c9:45:63:c1:11:3f:8e:74:3c:
02:54:83:52:fb:ec:b7:b0:e3:7f:b2:60:c2:49:53:
3d:63:be:5a:fc:e4:82:22:5b:bf:f2:c2:8a:90:7c:
2e:49:04:fc:ee:a4:aa:d7:b6:80:94:89:ac:85:0e:
25:15:b2:b9:6c:4f:8b:94:1a:47:62:62:8d:56:f4:
8e:2f:26:5e:ec:11:17:84:7a:5d:a1:48:be:37:2d:
32:ad:2e:f4:95:78:70:df:47:2e:3f:d7:49:cc:74:
68:9d:56:00:2e:1b:47:8c:36:bf:73:ea:f6:e6:0e:
46:a7:a6:87:65:33:a0:e0:de:46:7d:a2:99:8f:47:
52:f4:2b:c7:88:be:e1:26:b8:10:55:fc:35:0e:a6:
04:6e:38:12:87:5f:09:3b:bb:7b:92:12:8d:19:11:
30:26:e6:d1:92:69:18:c2:c2:0d:87:b3:48:82:c8:
58:49:35:df:17:1e:13:c1:e0:89:d1:0e:a4:bd:1a:
27:4f:0d:2e:ad:3f:6b:f6:56:f5:75:3d:30:7a:d0:
7a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:55:9E:C3:C8:8D:AE:9D:EE:C8:2C:1C:F9:42:A7:0F:AB:DA:B3:E8
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/jlWew8iNrp3uyCwc-UKnD6vas-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.226.0/24
IPv6:
2a0a:280::/29
Signature Algorithm: sha256WithRSAEncryption
4f:19:29:76:ae:20:a7:9c:e6:81:bc:62:b1:f9:76:0c:ea:a6:
38:0b:ce:74:a6:71:42:7f:b6:79:e0:e6:84:6e:cb:8a:b5:67:
5e:53:5a:cf:68:8d:75:e8:55:b0:b6:7f:9f:9d:78:0e:f7:57:
84:61:d4:23:d2:74:1f:0a:02:28:68:e2:62:6e:26:ac:58:cb:
84:e3:a9:aa:49:25:9a:56:84:4d:2a:a6:e3:e5:be:7d:78:3d:
1a:88:16:94:85:b2:80:02:ae:9c:92:a2:89:a3:ec:a1:b2:4a:
1b:0b:73:00:01:f9:7d:7a:0f:54:cc:1a:11:84:0e:ac:5f:c3:
32:6b:70:ba:bb:85:e0:ff:26:1f:5c:ff:67:b9:1b:09:10:34:
0b:a4:1e:30:a6:24:d5:d1:c3:ec:a0:40:76:63:b6:db:88:79:
c8:d0:46:7c:71:11:9a:19:a8:3e:ba:c9:63:50:e9:45:a6:8e:
14:0f:b7:d4:c0:a6:9a:d1:e5:e7:03:ad:40:00:80:2a:42:ca:
3d:25:7b:37:1e:95:a8:87:f2:97:66:07:29:01:8f:3b:0a:f4:
ff:12:32:ed:3b:db:da:8d:20:8f:3e:9d:fa:fd:d1:06:0d:32:
1d:96:cc:84:74:87:a0:43:23:74:c9:f8:40:5b:bf:fc:45:5a:
07:c5:bd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:36:38 2025 by rpki-client