Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/ivcIOGYGxDr4HuRiOMEJgjPtlw8.roa
File: ivcIOGYGxDr4HuRiOMEJgjPtlw8.roa (raw, json)
Hash identifier: N0sX2xc9l6+o1NGaaCByASB7ZY+20fI1pDGVXPoq3+o=
Subject key identifier: 8A:F7:08:38:66:06:C4:3A:F8:1E:E4:62:38:C1:09:82:33:ED:97:0F
Certificate issuer: /CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09
Certificate serial: 018CC56EEB0D14E9966EDA2AC33397C119DA
Authority key identifier: FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/ivcIOGYGxDr4HuRiOMEJgjPtlw8.roa
Signing time: Mon 01 Jan 2024 14:30:29 +0000
ROA not before: Mon 01 Jan 2024 14:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12808
IP address blocks: 193.242.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:48:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:eb:0d:14:e9:96:6e:da:2a:c3:33:97:c1:19:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09
Validity
Not Before: Jan 1 14:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8af708386606c43af81ee46238c1098233ed970f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:73:ba:27:02:42:5a:e9:6c:37:2e:a5:5b:18:
ed:ac:42:8e:b5:c4:2a:92:2a:36:9a:2d:30:6a:dc:
7d:a1:49:c6:0f:45:82:be:6e:00:6c:a1:1c:67:5b:
7a:0c:c4:30:04:07:be:37:8a:02:2b:94:bf:0d:d6:
c4:66:08:1a:c3:36:cd:29:dc:b8:27:01:cb:ad:53:
5b:66:25:a4:95:24:07:e4:a2:05:17:5a:92:d0:e6:
d1:14:4b:1a:63:24:68:3f:42:5b:d8:45:41:e9:11:
59:cd:c7:19:8b:17:14:ed:85:a0:17:3f:c9:41:b0:
0f:e7:21:e6:f2:a9:5e:0f:af:4e:09:1b:15:0e:4d:
38:14:a8:b6:85:a2:70:40:b6:7d:57:4f:6c:5b:44:
e7:37:c0:0d:9c:03:07:eb:86:8d:9a:a2:8b:dd:73:
36:99:71:29:44:a3:56:9f:0b:98:af:10:85:a1:ab:
f0:a4:7d:56:ee:3d:38:ea:6a:1b:9e:ab:44:52:e1:
07:c6:38:af:8e:86:24:45:12:a6:ce:e7:42:8b:6c:
c0:7c:b4:b5:77:1f:a7:de:61:48:68:31:cf:b1:88:
c2:dc:14:7b:b4:99:4e:f7:a0:f0:27:81:31:78:e2:
e4:98:0c:12:09:ef:40:66:eb:a7:aa:47:a4:15:e3:
dd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F7:08:38:66:06:C4:3A:F8:1E:E4:62:38:C1:09:82:33:ED:97:0F
X509v3 Authority Key Identifier:
keyid:FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/ivcIOGYGxDr4HuRiOMEJgjPtlw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.123.0/24
Signature Algorithm: sha256WithRSAEncryption
86:22:77:1c:8d:3e:b1:d2:75:2c:90:ef:50:40:c5:db:60:bb:
6e:f7:b4:5c:26:01:00:4b:76:ca:a8:2e:ba:f0:0e:ff:35:58:
e5:49:a4:69:10:3b:d9:df:90:3f:e1:50:5f:da:fd:9a:cb:b8:
44:06:75:70:1f:de:c1:02:a0:a0:2d:2b:62:9a:78:c8:1f:4e:
f9:e8:7f:79:66:48:91:34:ab:69:fe:05:fd:db:b8:99:11:4b:
8c:3a:e5:9e:c8:67:9b:e2:94:2a:22:30:4a:ae:2d:f3:73:4f:
1e:17:bd:fb:b9:0b:77:74:50:1d:5c:5a:17:3f:fa:a2:97:11:
96:0d:42:62:cd:71:ff:b5:bc:c9:bc:1e:f6:e2:2f:02:0f:d9:
3d:d3:df:eb:d0:12:1b:0e:a1:41:a7:86:ea:5c:c6:d3:f4:01:
e4:69:5c:78:e3:0b:98:11:ab:4d:86:dd:94:ba:fc:df:66:3a:
a1:83:b1:9c:dc:db:ec:1d:4e:07:53:e3:23:73:b5:73:da:36:
06:0f:ec:90:a8:0b:2d:3a:ce:ba:9c:22:a0:9f:37:31:d9:60:
8f:7b:ac:ac:e3:18:1d:25:ab:8c:e9:3f:19:1d:bb:bc:f1:d8:
59:2b:91:8b:c0:a0:eb:14:23:93:39:f5:85:06:8a:0a:69:99:
d8:0c:ca:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:47 2025 by rpki-client