Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/AF1NkoU_qEq0_1T7G0o_fejTBl4.roa
File: AF1NkoU_qEq0_1T7G0o_fejTBl4.roa (raw, json)
Hash identifier: YTOXyR6+wm5vhx3dT1A61qnIm0uv2gEz5BMzCw38GSg=
Subject key identifier: 00:5D:4D:92:85:3F:A8:4A:B4:FF:54:FB:1B:4A:3F:7D:E8:D3:06:5E
Certificate issuer: /CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Certificate serial: 019373D48DA24B2CFA3E41FA69CAB12B4CE3
Authority key identifier: 51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/AF1NkoU_qEq0_1T7G0o_fejTBl4.roa
Signing time: Thu 28 Nov 2024 17:32:09 +0000
ROA not before: Thu 28 Nov 2024 17:32:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47164
IP address blocks: 93.95.30.0/24 maxlen: 24
185.192.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:73:d4:8d:a2:4b:2c:fa:3e:41:fa:69:ca:b1:2b:4c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Validity
Not Before: Nov 28 17:32:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=005d4d92853fa84ab4ff54fb1b4a3f7de8d3065e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a1:16:86:35:24:17:05:8b:7c:19:bb:53:5f:
3c:30:9c:78:84:8f:2c:7f:9a:bb:98:b2:58:62:9c:
ca:75:12:32:45:01:35:fd:80:e0:ee:7c:42:b5:1f:
75:2d:b9:19:5d:ab:ea:b6:c2:7a:aa:bb:65:8a:53:
98:31:85:5b:36:00:46:07:00:93:6b:fb:21:c1:de:
99:6e:a8:c4:e4:b9:75:93:f8:a7:9f:4e:58:ed:dd:
30:8b:7c:e9:fa:71:c9:d8:be:36:89:45:34:52:c9:
d2:0b:73:33:9c:81:95:2c:00:71:c0:8f:70:2f:9b:
5a:57:49:40:3c:93:02:3f:1b:64:74:a9:df:e5:46:
9d:54:c6:e4:5a:49:f0:9a:c2:b3:20:ed:e7:c9:df:
8f:b2:84:00:b2:67:fa:b6:3b:6c:26:bb:75:74:dd:
83:97:d5:51:21:e9:fa:16:c9:59:bf:65:52:1b:ef:
78:b2:14:c7:fd:78:da:d7:d8:ac:bd:04:76:2b:5e:
7a:d6:8e:f1:e9:05:df:cc:85:e9:57:b6:3a:db:77:
99:1b:14:39:70:28:1d:52:c3:b5:1c:3b:70:7f:a3:
9a:99:c5:bd:01:32:bf:c0:57:b1:1a:5f:f7:ab:d7:
62:31:ce:91:07:5d:8f:a1:47:bd:79:64:fe:ec:aa:
51:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5D:4D:92:85:3F:A8:4A:B4:FF:54:FB:1B:4A:3F:7D:E8:D3:06:5E
X509v3 Authority Key Identifier:
keyid:51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/AF1NkoU_qEq0_1T7G0o_fejTBl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.30.0/24
185.192.181.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:33:b9:6b:94:8b:05:39:cb:5a:1f:ce:21:60:69:ce:ad:ad:
81:5b:1e:77:ad:1e:b0:af:83:17:81:a0:a6:db:e5:e6:5b:64:
64:cd:fb:37:e7:d5:d8:f6:13:54:1d:26:b8:88:49:73:0c:eb:
fd:c6:ef:cb:1b:60:73:b6:42:30:a5:2b:d7:5a:a6:d2:00:f4:
bf:6d:33:52:aa:6d:15:49:f2:90:98:25:91:f4:73:75:3f:1c:
81:ca:b0:36:7d:52:42:1c:4a:77:d9:c2:eb:bd:26:82:d4:ef:
5a:69:8d:24:cd:d4:d6:d0:b2:ff:89:e7:55:4c:4f:b1:37:bb:
9c:8e:84:4d:5f:fc:04:ab:d5:cd:d9:df:75:1f:43:88:0f:0a:
75:92:43:af:f6:a4:e8:89:e1:97:38:2a:27:ee:2e:96:33:70:
c1:ae:11:d5:70:86:2d:d8:77:16:bb:de:ae:b9:48:76:03:58:
e1:b6:d7:5d:ac:c2:f5:03:95:ea:c7:bd:5e:bf:82:bf:c3:f7:
f5:2b:73:3d:ef:bf:bd:d0:a4:46:25:32:0e:72:84:d7:99:97:
2a:f3:c2:4f:5c:74:4e:e6:64:0a:ff:8a:b1:c0:7a:de:77:e8:
f4:83:f3:3c:1b:5d:8c:46:bc:58:6f:50:74:14:5b:d8:89:71:
a7:8f:a9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:37:43 2025 by rpki-client