Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/D23DtTg1wwxLMBvRq60vgafK0uI.roa
File: D23DtTg1wwxLMBvRq60vgafK0uI.roa (raw, json)
Hash identifier: yPKPMZee9UdAVTHy9yV687Wr40UPm7Pxr9dUGFjaLQA=
Subject key identifier: 0F:6D:C3:B5:38:35:C3:0C:4B:30:1B:D1:AB:AD:2F:81:A7:CA:D2:E2
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 018EEE63DD8DC6D50B823D210A4290A602CA
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/D23DtTg1wwxLMBvRq60vgafK0uI.roa
Signing time: Wed 17 Apr 2024 23:28:25 +0000
ROA not before: Wed 17 Apr 2024 23:28:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208821
IP address blocks: 193.22.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Sep 2024 10:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ee:63:dd:8d:c6:d5:0b:82:3d:21:0a:42:90:a6:02:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Apr 17 23:28:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f6dc3b53835c30c4b301bd1abad2f81a7cad2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c5:43:f0:c6:30:23:96:5e:67:15:09:98:01:
a8:52:b9:f3:c9:a2:41:66:fa:9b:9c:6d:0c:32:2f:
ef:4d:48:af:3b:68:b0:c1:4c:4e:92:3a:97:f6:45:
45:24:52:58:02:16:4b:d5:90:15:24:82:0f:5a:11:
97:7a:ff:db:c5:d6:4c:c6:03:ac:91:d2:91:94:65:
4a:56:8d:0c:f1:ed:15:fb:3a:bc:72:c7:cc:d3:db:
14:af:c0:1e:ec:28:e1:54:fa:e3:c8:89:30:81:8c:
d0:95:7a:64:a3:d9:6a:f0:49:ac:48:ce:13:6b:c9:
1a:db:60:3c:3e:b0:a1:39:31:5c:ed:b6:64:78:40:
7b:73:56:8f:e2:c2:ad:70:6f:70:8d:75:85:b3:cb:
07:78:3b:c6:4b:d3:55:5b:3c:3d:2f:12:14:8f:b2:
e6:47:d0:21:e0:05:74:73:e6:62:24:88:c4:67:27:
00:6f:ec:89:85:61:af:15:f9:cb:5f:e2:0b:54:31:
c7:6e:17:b6:90:60:bf:de:aa:e0:4a:95:f4:1b:51:
47:0b:2d:9f:75:2e:1f:50:70:4d:94:76:52:2a:e9:
e5:cc:3b:ea:7a:02:60:51:2b:29:6e:11:a1:1e:e4:
64:db:c3:de:f1:03:f9:a4:30:c0:fe:81:c1:67:f5:
d9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6D:C3:B5:38:35:C3:0C:4B:30:1B:D1:AB:AD:2F:81:A7:CA:D2:E2
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/D23DtTg1wwxLMBvRq60vgafK0uI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.12.0/24
Signature Algorithm: sha256WithRSAEncryption
33:d5:b3:93:69:55:a5:68:90:2f:af:96:ba:29:79:01:a6:36:
66:41:9d:ad:de:18:0b:2c:d1:2c:53:b5:d9:74:05:20:b0:4a:
e4:02:71:d3:66:43:37:9e:37:e3:79:5a:55:53:80:60:f3:a6:
4f:07:ce:a8:ee:52:57:5b:94:5a:03:29:ab:14:2b:78:d2:54:
77:53:fb:f8:16:e9:91:96:50:08:27:7f:d8:89:f4:45:0e:2d:
34:4b:1a:83:1a:7b:4e:a4:2d:e2:65:52:7d:c9:76:15:ae:4b:
c0:f6:2e:26:a7:ab:9b:7b:8a:65:a1:6f:7d:6f:7c:79:0a:59:
7f:77:70:0d:90:f1:29:f8:25:c7:24:34:79:9d:7b:7a:f8:67:
ed:56:e0:00:51:b9:80:2b:45:af:65:2c:1b:20:25:0b:c0:3a:
81:ab:15:2a:48:a0:3e:ff:0d:3b:91:ae:b8:de:36:1a:69:f3:
7f:49:ed:92:1a:4b:94:50:ec:3e:3c:e9:85:5b:3c:bb:32:b5:
7a:af:bb:a2:7b:05:c8:76:6d:73:a4:7c:86:6b:e9:db:97:40:
72:65:16:82:e5:94:92:27:60:34:8b:90:e6:bc:fc:b1:bd:38:
84:01:ec:ee:32:d7:ec:21:0d:b8:3d:1a:a2:2d:bc:d2:66:df:
d8:8d:a1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:03:30 2025 by rpki-client