Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/tu7GLYLSVfa9JXtxDS7l1R7jhlY.roa
File: tu7GLYLSVfa9JXtxDS7l1R7jhlY.roa (raw, json)
Hash identifier: 88tQx79QrYGW/FcjUbFLbGK33rw3yhppNVlutCcXWOM=
Subject key identifier: B6:EE:C6:2D:82:D2:55:F6:BD:25:7B:71:0D:2E:E5:D5:1E:E3:86:56
Certificate issuer: /CN=9c9fee03271b15c233a24589f2365a710d4352d7
Certificate serial: 019368A3DE113D9C8F8310CD55CB1B0312C4
Authority key identifier: 9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/tu7GLYLSVfa9JXtxDS7l1R7jhlY.roa
Signing time: Tue 26 Nov 2024 13:23:09 +0000
ROA not before: Tue 26 Nov 2024 13:23:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197917
IP address blocks: 87.236.112.0/21 maxlen: 21
185.192.224.0/22 maxlen: 22
2a0a:2f40::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:a3:de:11:3d:9c:8f:83:10:cd:55:cb:1b:03:12:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9fee03271b15c233a24589f2365a710d4352d7
Validity
Not Before: Nov 26 13:23:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6eec62d82d255f6bd257b710d2ee5d51ee38656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8b:f2:40:75:da:0b:e0:ba:2f:7d:e4:36:79:
f6:b1:b6:eb:1c:06:ea:ac:6f:74:2f:5d:c7:5d:6f:
8d:c7:5e:8f:5a:9a:2e:5b:ea:b8:bb:c3:16:4e:5e:
77:fe:f4:bc:e2:93:2c:73:16:22:11:8c:2a:40:fb:
3b:25:b5:f2:27:34:c3:00:76:0a:99:aa:8e:6f:35:
e0:8e:18:d1:a3:ba:c5:94:a3:71:59:eb:b7:6f:38:
90:83:97:29:99:0c:92:31:ad:45:1f:ed:81:0e:bd:
9a:5d:e0:14:fc:be:da:51:3c:2e:14:08:72:b0:13:
3d:3a:3e:04:ef:99:c6:09:e4:f1:57:64:32:4d:69:
b5:16:ef:f7:ad:6d:dd:7f:0f:82:ec:3e:0f:61:f6:
8f:d9:0d:c3:7e:37:ff:cf:77:ac:1b:79:d1:86:49:
11:23:af:c6:d9:4c:5f:33:bc:a3:7d:32:19:79:3f:
49:f4:bd:85:ea:bf:de:63:eb:ea:65:4d:8f:3b:9d:
ca:f2:e3:7e:ed:09:8d:74:4a:39:28:68:a5:5a:33:
88:9b:09:eb:c4:5e:93:4a:07:ef:43:cd:bd:40:07:
87:12:14:93:ac:0e:35:8d:9d:3b:f8:95:3f:e2:aa:
03:50:0a:62:90:93:2f:f5:f0:9a:ce:7d:a1:3e:45:
6d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EE:C6:2D:82:D2:55:F6:BD:25:7B:71:0D:2E:E5:D5:1E:E3:86:56
X509v3 Authority Key Identifier:
keyid:9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/tu7GLYLSVfa9JXtxDS7l1R7jhlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.112.0/21
185.192.224.0/22
IPv6:
2a0a:2f40::/32
Signature Algorithm: sha256WithRSAEncryption
3a:ef:56:02:05:f8:3f:f8:5b:6f:9c:b2:ab:be:ec:50:25:79:
48:d6:19:ad:ed:05:3a:58:4d:2b:fb:f8:98:5b:e2:76:92:28:
59:31:81:0f:92:f4:97:66:a8:50:4c:2a:cc:dd:20:da:f1:aa:
e4:22:15:c1:5b:ce:86:44:e6:36:3b:15:14:c1:cb:e7:9c:9a:
5f:2f:37:2d:2e:3b:11:61:5b:98:d4:8d:58:18:94:a8:73:1f:
11:43:5f:9c:20:cd:5a:c8:1d:dc:29:16:e4:c3:29:d0:90:d3:
fd:42:db:c4:df:75:61:b9:77:01:4d:76:79:02:ca:ad:9f:df:
21:d4:49:d4:bc:be:ba:aa:98:20:94:07:e0:07:27:81:f9:02:
89:87:29:27:3e:27:59:a1:1b:82:ed:50:74:5a:d7:af:1f:1a:
01:41:ec:a4:4f:95:9a:a1:0f:63:ee:af:29:8c:f9:c0:76:81:
ff:76:60:22:5c:3a:c4:74:fa:1f:34:39:fb:3b:c5:95:e1:d1:
c3:ea:fd:0b:b6:83:1a:17:e1:61:ed:e9:a1:68:a7:8f:28:5a:
84:3b:8c:7f:56:37:03:a2:3c:17:b3:39:aa:db:90:e3:ec:d9:
3d:1b:ae:01:15:53:3c:82:ed:ae:8c:23:af:b5:37:d6:ab:11:
06:fb:01:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:00:26 2025 by rpki-client