Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/p1FP9tZQLYWrcZozwOw_v8TO8vA.roa
File: p1FP9tZQLYWrcZozwOw_v8TO8vA.roa (raw, json)
Hash identifier: L0NfXd6wcf3qVTYKF+s4LGu82+g29YR/8vRKOxVoZ3w=
Subject key identifier: A7:51:4F:F6:D6:50:2D:85:AB:71:9A:33:C0:EC:3F:BF:C4:CE:F2:F0
Certificate issuer: /CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Certificate serial: 018CC3495F98F1AE8D7B07258E6DEE0B9A24
Authority key identifier: 90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/p1FP9tZQLYWrcZozwOw_v8TO8vA.roa
Signing time: Mon 01 Jan 2024 04:30:14 +0000
ROA not before: Mon 01 Jan 2024 04:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15404
IP address blocks: 193.41.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 May 2024 12:38:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:5f:98:f1:ae:8d:7b:07:25:8e:6d:ee:0b:9a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Validity
Not Before: Jan 1 04:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7514ff6d6502d85ab719a33c0ec3fbfc4cef2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:0f:64:99:17:3a:7f:5e:62:77:0a:b8:7c:
d7:c4:02:ef:53:e3:52:89:34:4c:79:1c:e1:32:2f:
5d:cf:c6:5a:e2:ed:57:4c:31:7b:f1:f8:bb:91:cd:
a5:c9:73:18:a2:10:9f:47:f6:e8:b5:dd:b2:3c:ba:
5b:f7:98:e7:c3:37:b4:97:9b:23:6b:6c:cf:b9:10:
f5:c3:d3:ae:4e:56:31:7d:71:23:75:93:0d:fd:02:
d8:b6:1d:1b:ba:98:70:ec:b0:07:95:ee:99:82:f7:
10:0e:6a:f7:a4:df:5e:f7:d3:f4:3b:3b:47:a3:37:
18:6a:91:be:aa:5f:19:46:74:5c:6a:b6:9b:c6:f0:
ba:52:be:09:fc:8c:d9:a0:5b:6c:0f:6d:00:29:b4:
1a:23:35:eb:c7:e2:e7:2b:02:e5:2e:8a:9f:b1:59:
a7:49:47:3a:e0:d5:3b:5f:da:86:98:41:f2:0d:25:
c0:1c:69:d8:92:97:b3:a9:5a:d0:a4:10:10:87:69:
98:14:a3:2a:4e:e5:ef:85:a9:0f:a5:a9:0b:53:3b:
78:ea:18:c1:8c:1c:a6:fc:92:0c:b6:da:d6:9b:7e:
d5:72:c6:24:5a:20:8d:50:1f:d6:02:76:fc:67:7a:
4e:7c:37:cc:60:b0:59:17:09:75:ec:66:ff:68:31:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:51:4F:F6:D6:50:2D:85:AB:71:9A:33:C0:EC:3F:BF:C4:CE:F2:F0
X509v3 Authority Key Identifier:
keyid:90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/p1FP9tZQLYWrcZozwOw_v8TO8vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.71.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e4:57:8d:ca:4c:98:c9:d9:cd:3d:b8:a5:d6:26:08:ae:9a:
50:29:df:1a:e9:f7:29:cf:0d:67:2e:2b:60:e3:8f:9c:39:10:
6e:df:6b:5b:c4:df:ac:61:77:a9:c0:a7:3c:f5:17:88:d9:ef:
e7:f2:ec:00:db:03:6a:1b:08:df:cc:ff:9e:79:98:4b:7f:60:
b8:3d:bd:89:c1:b6:02:47:2b:fe:a5:ca:fd:85:10:08:6d:6b:
8c:8e:d3:5e:66:fd:ee:b8:d8:63:34:ca:f7:e6:a9:83:51:71:
1c:6c:82:13:7d:8b:a8:52:3a:bd:e3:97:49:74:e1:7b:b1:1d:
f5:52:09:b3:c4:71:98:32:a0:28:67:68:c7:61:b3:bf:fe:2d:
77:c0:19:b4:dc:88:c3:c8:b9:47:9b:3d:58:45:5a:de:64:8e:
9d:32:5e:58:65:82:c9:c1:54:07:4b:75:39:62:ca:c8:e4:ff:
ab:e9:82:05:d2:18:36:69:75:8f:e8:f5:09:0c:02:61:17:ec:
7e:97:dc:8f:fa:e5:75:0e:38:17:39:d1:9f:6b:ae:ad:c8:06:
fb:74:32:72:76:75:3b:29:7d:17:d4:1d:4c:34:8f:33:00:50:
48:86:2e:57:c8:ed:f4:b7:c2:ce:c3:b5:c9:74:1f:0c:b7:fc:
09:dc:68:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:27:13 2025 by rpki-client