Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ffgKYaLrW-pR9eDtXK50vD-zbNI.roa
File: ffgKYaLrW-pR9eDtXK50vD-zbNI.roa (raw, json)
Hash identifier: zBpBldwDPIV2j3dDQB8FXT+P9NqS93/FNnwaKwXJtDE=
Subject key identifier: 7D:F8:0A:61:A2:EB:5B:EA:51:F5:E0:ED:5C:AE:74:BC:3F:B3:6C:D2
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018CC348E2BF7D6B83FB796B44140ECE64B7
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ffgKYaLrW-pR9eDtXK50vD-zbNI.roa
Signing time: Mon 01 Jan 2024 04:29:42 +0000
ROA not before: Mon 01 Jan 2024 04:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205218
IP address blocks: 193.246.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e2:bf:7d:6b:83:fb:79:6b:44:14:0e:ce:64:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 04:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7df80a61a2eb5bea51f5e0ed5cae74bc3fb36cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e9:89:9b:ab:32:7d:46:6c:9c:a6:d4:3b:8a:
8a:4b:74:bd:59:8c:e8:df:f3:79:85:d5:7f:4f:99:
fc:42:9c:39:6d:29:6f:78:74:80:27:09:5c:7c:4f:
d0:91:cb:3f:6e:4d:26:3a:a7:d9:aa:15:9b:a4:67:
7c:08:69:ba:e6:a2:fa:7a:ac:0c:37:b0:7d:d6:da:
7f:84:77:eb:fd:f4:e1:d0:9e:d4:4c:8e:5f:d7:88:
6c:34:10:3c:19:9f:81:98:e0:66:e8:29:d4:43:08:
55:d6:ab:d1:e8:06:79:39:2f:57:1a:d8:90:5f:d1:
63:25:a1:a3:85:d5:6e:5b:87:aa:4b:4a:a7:26:49:
91:f7:57:fa:f7:fb:45:fd:bf:76:08:85:a5:dc:74:
18:30:c6:cb:4c:71:a1:e4:ed:da:13:a2:44:8e:02:
4f:27:b2:56:a4:f8:d5:cf:cf:bf:66:50:d6:61:65:
a3:e6:93:6f:b4:86:48:d2:a9:f6:24:6a:d8:4d:1f:
fa:2d:85:a2:c3:9c:1b:c7:76:48:0e:2a:76:cf:6d:
5e:e1:27:a8:69:5f:1d:84:b0:1b:cb:87:62:16:5c:
e9:16:f2:47:12:b5:8f:41:e8:20:04:6c:86:66:62:
b0:38:97:14:42:14:41:0b:ec:b1:97:c1:95:9d:ae:
42:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F8:0A:61:A2:EB:5B:EA:51:F5:E0:ED:5C:AE:74:BC:3F:B3:6C:D2
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ffgKYaLrW-pR9eDtXK50vD-zbNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.56.0/24
Signature Algorithm: sha256WithRSAEncryption
30:b7:be:7d:de:82:00:e6:c2:41:e5:47:84:33:82:93:65:e7:
9c:62:a2:fd:27:7b:1e:0d:1f:78:7d:c0:f0:80:30:4c:d3:dc:
e3:52:02:0f:24:83:a8:92:88:76:31:42:63:3e:51:80:02:b5:
d7:6a:1c:05:da:51:1f:d1:02:6d:56:73:b1:3c:b1:f9:b1:fa:
80:50:54:00:59:79:e0:7b:d0:fc:88:ba:73:3f:8c:e0:65:63:
57:32:90:5a:de:5d:b7:f4:4e:c3:c2:f9:69:24:e1:35:57:61:
f0:c3:9c:91:5e:0f:bf:b6:25:ae:92:b6:dd:05:40:ad:41:1d:
b2:fc:68:48:99:b4:1e:36:42:f7:e5:bb:15:e7:bb:f6:f8:bb:
cb:cc:8e:55:06:33:43:41:f1:28:e1:89:5c:59:e1:2c:4f:42:
61:fb:c8:9c:cd:4e:3a:af:88:96:bb:3f:95:f0:ab:3f:18:35:
03:83:b1:81:22:fc:49:f8:09:58:fc:44:26:67:e4:6e:db:e3:
c8:85:a7:ff:0b:55:0a:2b:1e:d9:c6:e0:e2:74:e3:05:75:59:
d1:06:e1:76:69:03:96:ec:a9:59:16:c7:98:fa:2a:25:dd:b2:
9b:ca:ac:97:df:c5:f2:3e:3c:8b:04:23:c2:b6:76:fc:da:1b:
1f:c9:5e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:13:21 2025 by rpki-client